Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/63fbf8-5cff-4991-8f27-a41a4834ecaa/1/VDxUBnOFp2Wx1WF8QzMZVvsgjok.mft
File: VDxUBnOFp2Wx1WF8QzMZVvsgjok.mft (raw, json)
Hash identifier: iFofgEgySOHGV+IJaFVRIah9XatkTkx30MbMZIDSl9E=
Subject key identifier: 56:AC:AE:BF:82:48:82:C9:DE:4B:3A:28:CD:BA:12:82:8C:0B:FE:01
Authority key identifier: 54:3C:54:06:73:85:A7:65:B1:D5:61:7C:43:33:19:56:FB:20:8E:89
Certificate issuer: /CN=543c54067385a765b1d5617c43331956fb208e89
Certificate serial: 0198A083A6D9759BDF7178FC7216504A991E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VDxUBnOFp2Wx1WF8QzMZVvsgjok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/63fbf8-5cff-4991-8f27-a41a4834ecaa/1/VDxUBnOFp2Wx1WF8QzMZVvsgjok.mft
Manifest number: 1630
Signing time: Tue 12 Aug 2025 23:00:39 +0000
Manifest this update: Tue 12 Aug 2025 23:00:39 +0000
Manifest next update: Wed 13 Aug 2025 23:00:39 +0000
Files and hashes: 1: VDxUBnOFp2Wx1WF8QzMZVvsgjok.crl (hash: Bw8JuE9aq9Kp4TwnRk1kryyr0DJ4w+2YuTUQ9wppOpM=)
2: z735G_UD7XSfWpNDTnzeaf_tL4w.roa (hash: DkYxS6x4qA1lOII9eThmWP47P9TbdKeyTU6VofiN3dI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/63fbf8-5cff-4991-8f27-a41a4834ecaa/1/VDxUBnOFp2Wx1WF8QzMZVvsgjok.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/63fbf8-5cff-4991-8f27-a41a4834ecaa/1/VDxUBnOFp2Wx1WF8QzMZVvsgjok.mft
rsync://rpki.ripe.net/repository/DEFAULT/VDxUBnOFp2Wx1WF8QzMZVvsgjok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:83:a6:d9:75:9b:df:71:78:fc:72:16:50:4a:99:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=543c54067385a765b1d5617c43331956fb208e89
Validity
Not Before: Aug 12 23:00:39 2025 GMT
Not After : Aug 13 23:00:39 2025 GMT
Subject: CN=56acaebf824882c9de4b3a28cdba12828c0bfe01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:b3:55:26:9c:c1:92:2f:ef:05:e2:90:7a:de:
a5:1d:87:2f:3f:9b:df:65:ff:84:af:e0:27:8b:7c:
8f:90:a9:db:d9:a6:1a:7a:2b:84:8e:e8:10:5d:f1:
2c:ad:67:f9:21:82:65:f6:c1:4c:7e:7c:b8:c3:87:
1b:7f:f3:01:33:25:7d:1e:bf:0a:e4:45:35:de:fc:
d4:7e:0f:0e:5a:81:46:db:e8:40:10:30:a5:85:66:
d7:ac:fc:d0:0b:d8:d2:4a:5a:a3:38:a6:f3:c2:f4:
5e:a0:b3:b4:89:06:94:81:d8:bc:dd:60:ca:31:bf:
4d:62:74:f9:9d:46:4f:44:07:b3:8a:b1:6c:82:2c:
0a:ff:47:d1:f6:51:9b:7d:8e:e9:f0:b6:09:41:7d:
4c:e3:c9:19:66:e5:53:df:1b:51:ef:6c:a7:53:f8:
16:a9:ed:f0:92:29:1c:da:1a:5b:34:f8:58:46:17:
f9:b7:50:a0:e1:36:c5:1c:b4:25:69:3a:54:08:67:
aa:05:4c:97:62:42:32:d6:5c:2a:d1:38:85:41:03:
42:c3:f9:ba:2e:6f:fd:d5:fb:c4:7b:1f:5e:6b:bd:
58:af:2b:ed:14:5e:a2:1e:ef:f0:f2:10:a6:20:dd:
31:30:b4:76:ce:03:2d:8c:64:88:e3:6d:10:5b:0f:
36:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:AC:AE:BF:82:48:82:C9:DE:4B:3A:28:CD:BA:12:82:8C:0B:FE:01
X509v3 Authority Key Identifier:
keyid:54:3C:54:06:73:85:A7:65:B1:D5:61:7C:43:33:19:56:FB:20:8E:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VDxUBnOFp2Wx1WF8QzMZVvsgjok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/63fbf8-5cff-4991-8f27-a41a4834ecaa/1/VDxUBnOFp2Wx1WF8QzMZVvsgjok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/63fbf8-5cff-4991-8f27-a41a4834ecaa/1/VDxUBnOFp2Wx1WF8QzMZVvsgjok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:f7:b7:93:90:4e:b4:e4:f1:bf:de:82:be:98:a0:9e:23:05:
0f:c8:c3:91:d7:fc:3e:3c:0b:74:e1:28:85:b1:f1:7b:8c:65:
23:3b:36:cb:d4:99:1c:12:92:7d:7d:32:39:c6:6f:de:de:69:
12:72:6a:f1:22:c5:56:3e:f4:eb:f2:7f:5e:56:4a:76:d6:63:
ef:88:6a:76:cc:c4:3d:1f:95:c5:ee:1c:b0:39:db:59:8e:b3:
b1:e2:59:0b:ca:29:e2:c7:76:25:7f:69:fb:73:b9:43:c2:42:
24:6c:cf:26:0a:03:05:f6:90:72:4f:d9:cc:27:e4:a4:e6:f0:
da:68:fc:84:49:73:e8:bd:5d:8c:d2:9e:c9:4c:39:a5:f4:8e:
5e:dd:81:c3:9b:c2:60:41:2f:62:64:bf:16:6d:f7:0a:ca:5c:
f4:dd:c9:7b:00:ca:79:21:93:8e:9b:89:2e:c2:ef:e8:ad:ef:
83:db:ff:eb:6f:45:38:f8:5c:1f:4c:30:8c:3e:cd:8a:71:e3:
7d:07:0a:06:a9:f8:a0:70:3a:5a:2f:97:23:99:c3:ea:3e:35:
05:1f:e0:df:a9:e0:88:1c:b8:5c:b3:ca:05:57:cd:4c:cf:51:
3a:36:3a:9e:bc:00:cf:21:d9:bb:22:f8:89:ef:a1:c0:fc:eb:
a9:25:b4:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:52:41 2025 by rpki-client