Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/d4635f-2195-4d94-8d16-470a93b3d3e7/1/vttqTtOT2KO3UH-Wo4vuDEyLR38.mft
File: vttqTtOT2KO3UH-Wo4vuDEyLR38.mft (raw, json)
Hash identifier: hG/6jDzh9ZwTQaZEgfZcVKVHU4VoxcSmzzNjnqRFea4=
Subject key identifier: DA:38:02:E2:A8:2C:3A:D9:49:70:3A:D2:24:C0:AA:7D:1F:A8:B7:13
Authority key identifier: BE:DB:6A:4E:D3:93:D8:A3:B7:50:7F:96:A3:8B:EE:0C:4C:8B:47:7F
Certificate issuer: /CN=bedb6a4ed393d8a3b7507f96a38bee0c4c8b477f
Certificate serial: 01988EECAE0B8943CDE42C67E6F6824D320A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vttqTtOT2KO3UH-Wo4vuDEyLR38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/d4635f-2195-4d94-8d16-470a93b3d3e7/1/vttqTtOT2KO3UH-Wo4vuDEyLR38.mft
Manifest number: 1624
Signing time: Sat 09 Aug 2025 13:02:12 +0000
Manifest this update: Sat 09 Aug 2025 13:02:12 +0000
Manifest next update: Sun 10 Aug 2025 13:02:12 +0000
Files and hashes: 1: 70lNK5fBDtyKP1-Uoyim5AlDIhs.roa (hash: j96/AeWDc3evjhceJaK+DEno6uY4hCQMsDxAEfX1LUM=)
2: vttqTtOT2KO3UH-Wo4vuDEyLR38.crl (hash: 0kvf1qIYrd5npPOddRTfIt0ZC5Y1Iutra5sojtUohJk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/d4635f-2195-4d94-8d16-470a93b3d3e7/1/vttqTtOT2KO3UH-Wo4vuDEyLR38.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/d4635f-2195-4d94-8d16-470a93b3d3e7/1/vttqTtOT2KO3UH-Wo4vuDEyLR38.mft
rsync://rpki.ripe.net/repository/DEFAULT/vttqTtOT2KO3UH-Wo4vuDEyLR38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 13:02:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:ec:ae:0b:89:43:cd:e4:2c:67:e6:f6:82:4d:32:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bedb6a4ed393d8a3b7507f96a38bee0c4c8b477f
Validity
Not Before: Aug 9 13:02:12 2025 GMT
Not After : Aug 10 13:02:12 2025 GMT
Subject: CN=da3802e2a82c3ad949703ad224c0aa7d1fa8b713
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:4f:7c:cf:2d:ea:77:02:a2:38:80:c5:57:66:
20:25:75:73:fd:21:e7:95:c9:d7:2c:3a:1f:df:fb:
45:4d:b2:c6:72:4a:eb:b4:44:e1:21:77:96:da:10:
d7:e5:8c:26:50:7d:38:8d:cb:96:28:f0:e7:8d:c7:
e9:5a:71:0e:7f:a6:ec:ea:f7:5a:44:b8:aa:b9:d6:
bf:19:ec:fc:c9:c0:43:41:fd:eb:a9:7d:75:c8:59:
d4:d1:c1:d8:7c:69:71:5b:21:81:e1:13:32:d0:f7:
77:3d:47:d4:30:a0:e9:a2:a8:4f:cf:86:99:f5:75:
a0:48:53:15:bd:60:14:8a:a0:10:51:ef:68:2d:b2:
15:f3:c2:cd:dc:8a:dd:b2:05:c1:a3:4e:d1:02:a7:
aa:91:c1:83:45:ec:81:b6:a9:5a:1f:c4:a3:53:41:
86:fb:73:8f:c2:e0:9e:6f:63:00:31:e2:18:a4:a0:
7e:83:6b:55:b2:36:48:2a:55:a5:91:1b:b2:2a:51:
d6:62:83:29:48:7f:c4:17:3a:b4:74:98:b0:7f:99:
de:a7:7a:23:39:9c:86:31:bf:69:5d:31:92:12:b6:
80:3b:da:27:6f:c3:4e:64:3c:b1:b1:55:2b:e1:a6:
e2:ea:24:d0:63:ca:28:9f:14:aa:a6:a3:f5:e4:86:
00:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:38:02:E2:A8:2C:3A:D9:49:70:3A:D2:24:C0:AA:7D:1F:A8:B7:13
X509v3 Authority Key Identifier:
keyid:BE:DB:6A:4E:D3:93:D8:A3:B7:50:7F:96:A3:8B:EE:0C:4C:8B:47:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vttqTtOT2KO3UH-Wo4vuDEyLR38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d4635f-2195-4d94-8d16-470a93b3d3e7/1/vttqTtOT2KO3UH-Wo4vuDEyLR38.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d4635f-2195-4d94-8d16-470a93b3d3e7/1/vttqTtOT2KO3UH-Wo4vuDEyLR38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:7a:c6:19:0b:78:db:3d:8a:f6:53:2c:59:32:78:49:8d:34:
75:da:7b:7e:f4:a4:01:b8:ff:cc:cf:87:23:c6:2f:e4:48:cc:
6b:ad:1a:fd:93:f0:ef:92:74:87:f9:e5:31:87:08:a3:5f:e5:
d0:b2:48:41:ad:0d:f8:03:2c:fb:75:f5:81:94:26:14:d2:0a:
76:a2:9d:95:74:fd:02:f9:aa:23:09:a8:b2:9f:2e:5a:fd:5a:
ea:7c:2b:51:0a:db:0a:ec:01:34:8e:a3:1f:d4:f8:98:41:24:
58:52:58:03:7c:22:8f:0f:bc:23:ca:a1:30:b8:2e:7a:e4:6c:
55:c1:6e:f5:e7:05:81:c1:26:60:13:44:15:d0:d8:b0:ca:15:
6b:6c:a1:d8:ea:0e:09:e4:cb:d3:82:d0:19:37:92:db:08:29:
30:05:c5:de:6f:e0:6a:f3:db:99:97:ab:a7:14:44:fa:6b:2a:
5f:f5:0d:bc:3b:6c:f9:90:b4:54:b3:64:96:ba:cf:d8:2a:93:
07:f6:24:2f:6f:fd:4c:51:fa:5f:aa:78:b5:10:16:da:21:29:
a9:56:5c:44:3a:8a:c7:77:b8:06:a8:f8:3e:45:2b:d9:2b:3a:
19:e4:5d:b6:43:7d:48:15:e9:ea:53:87:45:b0:f1:20:c6:aa:
90:d4:c4:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 20:41:09 2025 by rpki-client