Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/ebfc3d-54fc-4643-be56-ea70a29c76f0/1/vQY9lEu4H8McuhFJndAG607OliQ.mft
File: vQY9lEu4H8McuhFJndAG607OliQ.mft (raw, json)
Hash identifier: RRs4fqCiJVWy3ZwmDm9X5McmNWeyf288Zhb/IDkflec=
Subject key identifier: BC:96:8C:39:6A:2A:29:CB:76:03:08:83:23:D2:85:EE:20:43:FF:73
Authority key identifier: BD:06:3D:94:4B:B8:1F:C3:1C:BA:11:49:9D:D0:06:EB:4E:CE:96:24
Certificate issuer: /CN=bd063d944bb81fc31cba11499dd006eb4ece9624
Certificate serial: 019892FF1D774CEB1FB82277EEE40AA284E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vQY9lEu4H8McuhFJndAG607OliQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/ebfc3d-54fc-4643-be56-ea70a29c76f0/1/vQY9lEu4H8McuhFJndAG607OliQ.mft
Manifest number: 045D
Signing time: Sun 10 Aug 2025 08:00:49 +0000
Manifest this update: Sun 10 Aug 2025 08:00:49 +0000
Manifest next update: Mon 11 Aug 2025 08:00:49 +0000
Files and hashes: 1: Nq1isTWXGFgDMfQsWjLkSFAz9YU.roa (hash: cOanxi0n0S0i8MlV6jtoZzMtSVudeCiiZSom6UuFfg0=)
2: vQY9lEu4H8McuhFJndAG607OliQ.crl (hash: Ix8LougAmTb4xNmnPdq+fg6Q9EjtyPOIuxJeSlfHQsY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/ebfc3d-54fc-4643-be56-ea70a29c76f0/1/vQY9lEu4H8McuhFJndAG607OliQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/ebfc3d-54fc-4643-be56-ea70a29c76f0/1/vQY9lEu4H8McuhFJndAG607OliQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/vQY9lEu4H8McuhFJndAG607OliQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:ff:1d:77:4c:eb:1f:b8:22:77:ee:e4:0a:a2:84:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd063d944bb81fc31cba11499dd006eb4ece9624
Validity
Not Before: Aug 10 08:00:49 2025 GMT
Not After : Aug 11 08:00:49 2025 GMT
Subject: CN=bc968c396a2a29cb7603088323d285ee2043ff73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:75:96:41:2d:a7:7e:b7:d7:60:15:b2:9c:64:
50:eb:a3:4c:be:70:14:44:02:30:be:03:f6:fe:a4:
91:27:ca:e1:2e:48:26:85:8e:ba:fc:d0:54:c7:3c:
6e:12:89:f0:46:d6:52:f6:a1:f2:8c:78:64:59:94:
ec:0a:cb:02:ce:1a:fd:bb:02:04:71:b0:8b:12:ec:
1a:c0:e6:9f:80:f9:8e:e7:75:f5:54:84:f0:4d:3e:
b2:0d:3d:ee:51:71:36:f8:15:7c:53:c0:8d:0c:7b:
21:16:e0:a5:e2:e0:ee:f6:16:19:8c:da:1f:66:5c:
cd:f6:f0:26:64:24:82:26:ca:5f:60:49:57:f7:c4:
24:9a:f8:b7:1f:e3:bd:49:04:f1:ed:f2:c3:ae:0d:
b0:23:3c:1f:53:7b:65:6e:4c:f4:7e:80:b5:76:46:
f6:d9:a9:f4:2b:07:47:8c:cc:59:8f:1d:1b:77:55:
a4:88:51:8d:98:9c:8c:0b:d8:1b:1e:8a:5b:34:9a:
f8:b7:6a:fc:bd:be:45:b8:8c:28:c2:1e:3a:c0:e6:
f5:f7:54:e5:7c:2d:f8:2d:fb:70:07:1f:fa:d0:fd:
3b:88:e6:d4:e1:6d:1a:5b:89:69:29:55:b5:d7:53:
c3:a9:f4:2c:14:2a:4f:29:fb:1e:4b:6b:d2:4c:73:
2e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:96:8C:39:6A:2A:29:CB:76:03:08:83:23:D2:85:EE:20:43:FF:73
X509v3 Authority Key Identifier:
keyid:BD:06:3D:94:4B:B8:1F:C3:1C:BA:11:49:9D:D0:06:EB:4E:CE:96:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vQY9lEu4H8McuhFJndAG607OliQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ebfc3d-54fc-4643-be56-ea70a29c76f0/1/vQY9lEu4H8McuhFJndAG607OliQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ebfc3d-54fc-4643-be56-ea70a29c76f0/1/vQY9lEu4H8McuhFJndAG607OliQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
df:e1:d3:a9:50:42:1d:0a:c6:59:b9:5c:03:9b:3e:82:66:ad:
0b:5a:8b:f3:d8:4f:32:11:0a:2c:8f:4f:64:de:39:02:d3:39:
0c:79:f2:89:d2:d8:ec:cd:1b:87:36:9a:3f:82:a4:20:28:e1:
30:9c:c0:9b:68:86:db:73:61:45:10:88:8c:81:74:12:b5:87:
02:7f:71:e2:e7:73:8a:a5:38:4e:c0:b5:a7:54:28:d3:cf:1c:
7e:ae:72:15:f8:4e:de:d5:41:b9:28:0b:5f:33:e0:76:dd:50:
7d:5b:dd:ff:f8:b9:01:0f:92:92:04:b4:98:2b:1b:d8:25:09:
c6:40:b2:ad:55:c3:4b:cf:ed:d1:cf:5c:36:50:a8:fd:a1:69:
cb:5c:4e:5c:4e:9c:b5:05:9d:fe:e7:cb:1b:ce:7f:fd:73:6b:
da:70:56:aa:e4:e1:88:be:71:ba:90:16:bc:84:21:17:3e:56:
d8:8d:8f:7f:a0:9f:d1:3d:aa:82:63:ea:c6:5a:25:ee:62:72:
29:15:b1:98:09:6d:9e:06:49:34:b5:46:fd:2c:d2:81:16:6f:
6c:33:b5:8d:c2:99:85:65:f0:a6:48:3c:b8:f8:56:64:c5:62:
cc:6d:8b:d4:06:4c:b1:cc:ae:7b:45:95:7d:d2:9e:40:f0:11:
9f:f9:c5:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 15:59:07 2025 by rpki-client