Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/cc66d4-7d98-43b5-b209-b8487fe96149/1/vQM98D7VHOeSSkgBg7z_208EJTc.mft
File: vQM98D7VHOeSSkgBg7z_208EJTc.mft (raw, json)
Hash identifier: 3kCibu8xdUPRsJZWob8tGrMPYlUhfDNSKuB4cZczggk=
Subject key identifier: D6:61:A6:A9:4A:4D:80:2C:33:57:27:8B:C6:AA:91:B2:70:F6:B4:0F
Authority key identifier: BD:03:3D:F0:3E:D5:1C:E7:92:4A:48:01:83:BC:FF:DB:4F:04:25:37
Certificate issuer: /CN=bd033df03ed51ce7924a480183bcffdb4f042537
Certificate serial: 019879E4444090D4502313997AD5DD980347
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vQM98D7VHOeSSkgBg7z_208EJTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/cc66d4-7d98-43b5-b209-b8487fe96149/1/vQM98D7VHOeSSkgBg7z_208EJTc.mft
Manifest number: 020E
Signing time: Tue 05 Aug 2025 11:00:59 +0000
Manifest this update: Tue 05 Aug 2025 11:00:59 +0000
Manifest next update: Wed 06 Aug 2025 11:00:59 +0000
Files and hashes: 1: vQM98D7VHOeSSkgBg7z_208EJTc.crl (hash: r7ctm/AgPwHMPZRZyia4/I5rdx9rXvsEL6dLWLcWykI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/cc66d4-7d98-43b5-b209-b8487fe96149/1/vQM98D7VHOeSSkgBg7z_208EJTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/cc66d4-7d98-43b5-b209-b8487fe96149/1/vQM98D7VHOeSSkgBg7z_208EJTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/vQM98D7VHOeSSkgBg7z_208EJTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:79:e4:44:40:90:d4:50:23:13:99:7a:d5:dd:98:03:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd033df03ed51ce7924a480183bcffdb4f042537
Validity
Not Before: Aug 5 11:00:59 2025 GMT
Not After : Aug 6 11:00:59 2025 GMT
Subject: CN=d661a6a94a4d802c3357278bc6aa91b270f6b40f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:52:bf:c0:23:25:dc:20:81:2c:bc:db:52:6f:
f5:9f:1e:fe:52:59:a3:a9:67:69:76:e5:6c:8b:0e:
f3:ef:09:49:85:3d:db:82:96:05:f5:25:94:d3:ff:
18:d8:54:46:47:74:4f:d7:90:63:5e:f2:f8:73:d2:
5b:98:d9:28:d9:ba:d7:84:19:90:c8:bb:c4:ca:3a:
a0:08:bb:a4:af:83:91:3b:21:80:22:38:ef:1f:cf:
9a:a6:77:13:3e:f8:7f:f6:44:55:ee:67:de:ad:4b:
b5:e5:90:b0:19:73:d4:03:59:c4:ba:9d:91:ad:95:
f2:34:85:df:c6:5b:3f:c7:db:cf:73:cc:82:87:2b:
c8:a9:6b:89:a4:67:71:38:24:52:9e:17:dc:f7:95:
ab:d2:4b:ce:8c:d2:90:eb:88:c2:fe:b2:c2:0c:fa:
7f:ec:56:81:67:33:af:8d:a0:f5:e9:43:6a:4e:23:
a0:7e:29:6d:db:ff:5e:a4:37:ba:e9:1c:93:a1:1e:
90:0e:27:93:f8:8f:0f:2f:b8:4b:c9:98:67:48:71:
cb:f0:5d:6c:53:da:05:46:ed:1f:05:32:90:76:81:
28:2a:4e:b5:8f:8d:4b:e9:63:a1:0b:7a:2b:2e:9c:
f0:30:15:c5:ec:67:4b:9e:2f:72:57:95:ad:0b:f9:
33:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:61:A6:A9:4A:4D:80:2C:33:57:27:8B:C6:AA:91:B2:70:F6:B4:0F
X509v3 Authority Key Identifier:
keyid:BD:03:3D:F0:3E:D5:1C:E7:92:4A:48:01:83:BC:FF:DB:4F:04:25:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vQM98D7VHOeSSkgBg7z_208EJTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/cc66d4-7d98-43b5-b209-b8487fe96149/1/vQM98D7VHOeSSkgBg7z_208EJTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/cc66d4-7d98-43b5-b209-b8487fe96149/1/vQM98D7VHOeSSkgBg7z_208EJTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:91:cb:a6:5d:0c:a1:92:d0:0b:19:d4:41:d3:45:ef:cb:99:
bf:c3:32:d0:8f:49:50:62:47:08:b7:4b:6d:3a:c7:2e:46:b8:
d9:a5:56:27:3a:a5:96:b8:35:be:a2:30:b5:ce:fc:90:3a:d0:
b0:1d:26:3c:66:54:69:07:4c:20:ef:d0:19:75:e5:a4:03:65:
33:9f:58:39:6e:d4:41:ba:84:12:3a:79:87:4e:a6:bf:10:4b:
65:62:cb:74:41:95:79:71:56:8e:44:26:d5:00:4a:20:61:a1:
a4:57:1d:e9:20:36:39:dd:6d:d4:dd:5c:0b:3b:57:1f:71:11:
e0:1d:42:07:70:1f:ed:b3:cb:90:e1:dc:7a:af:90:11:ca:ca:
57:c4:37:61:d2:6f:c2:90:75:d0:b3:bd:de:b8:76:f6:1d:bb:
7b:76:80:3b:a1:21:ca:cd:b2:a9:d0:43:8d:f0:43:b4:6d:95:
6d:7b:d5:95:09:3e:33:04:65:58:71:41:db:56:c7:2a:d1:a3:
ee:62:a2:1f:a5:d6:b5:1b:7c:0f:01:90:c3:f7:14:64:2e:e8:
50:45:9c:0d:58:17:7c:95:f1:c8:5a:2c:41:97:84:35:0f:b3:
70:14:0b:eb:70:d8:df:a7:38:1f:d6:6b:ad:d4:bd:67:88:cd:
40:55:71:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 16:43:29 2025 by rpki-client