
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/d61b33-abdf-4903-a82c-b5172597f73a/1/VYQ6GyCi2-Pk7VPnVI12iWeNWjc.mft
File: VYQ6GyCi2-Pk7VPnVI12iWeNWjc.mft (raw, json)
Hash identifier: l4UX1ptGM5eZAyZtR++73zwAV0oFIp7HCQ4WaIHwy+8=
Subject key identifier: C9:8E:ED:66:2A:E6:80:12:AE:63:34:15:9F:D8:9D:A3:77:E5:48:72
Authority key identifier: 55:84:3A:1B:20:A2:DB:E3:E4:ED:53:E7:54:8D:76:89:67:8D:5A:37
Certificate issuer: /CN=55843a1b20a2dbe3e4ed53e7548d7689678d5a37
Certificate serial: 01988BEAC44974DF9A9F5D13799E5DA0A8FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VYQ6GyCi2-Pk7VPnVI12iWeNWjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/d61b33-abdf-4903-a82c-b5172597f73a/1/VYQ6GyCi2-Pk7VPnVI12iWeNWjc.mft
Manifest number: 1626
Signing time: Fri 08 Aug 2025 23:01:15 +0000
Manifest this update: Fri 08 Aug 2025 23:01:15 +0000
Manifest next update: Sat 09 Aug 2025 23:01:15 +0000
Files and hashes: 1: VYQ6GyCi2-Pk7VPnVI12iWeNWjc.crl (hash: JP3BnRYkVAtlgpdDh1W4k/YOTFYCnqCfEZBskxYkHvg=)
2: ViwcSn5ZRd0_PQfWGy4jthVrawY.roa (hash: TCVE8gL/0uqzfZRMUKYxUNskH8cEgUmyJYuVh+KEfZM=)
3: r8eyn-TrAFLp_6mUjXoaqs5DTU0.roa (hash: /vknbDgQuhM62eluETPZRwPfDO3C56/MY/cEqhgERrQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/d61b33-abdf-4903-a82c-b5172597f73a/1/VYQ6GyCi2-Pk7VPnVI12iWeNWjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/d61b33-abdf-4903-a82c-b5172597f73a/1/VYQ6GyCi2-Pk7VPnVI12iWeNWjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/VYQ6GyCi2-Pk7VPnVI12iWeNWjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:ea:c4:49:74:df:9a:9f:5d:13:79:9e:5d:a0:a8:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55843a1b20a2dbe3e4ed53e7548d7689678d5a37
Validity
Not Before: Aug 8 23:01:15 2025 GMT
Not After : Aug 9 23:01:15 2025 GMT
Subject: CN=c98eed662ae68012ae6334159fd89da377e54872
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f6:6f:26:e2:fc:65:eb:6c:2c:3a:d0:ac:9f:
59:af:2a:c8:fa:75:f1:30:34:c5:9a:0d:c6:da:5e:
3f:87:4f:b4:59:b1:b0:bf:45:ad:96:8e:1a:44:42:
08:8a:57:29:01:78:fd:77:82:ec:94:57:de:a2:9e:
9c:bf:bf:a0:c4:f1:06:64:b1:1f:91:dc:31:cc:0b:
82:16:71:47:88:24:79:a1:96:d7:54:b1:34:95:7b:
36:28:dd:86:3d:52:46:0f:44:e8:05:26:8b:d5:45:
08:63:84:6f:7a:65:05:c8:89:04:05:f4:ac:38:3b:
88:11:dd:90:8f:3e:d7:6c:73:66:01:0b:e3:1c:5f:
18:48:66:12:74:98:4e:3c:de:52:30:7e:45:63:83:
46:a1:d5:36:7f:1e:34:3d:23:9c:27:5e:79:1a:8a:
38:b2:9d:5d:04:08:64:6a:de:64:41:12:64:ef:01:
d5:f1:0e:c0:0e:38:29:d9:f3:f2:92:0f:ee:b0:f8:
dc:46:d0:87:96:dc:8e:fc:da:f9:e9:1c:41:32:53:
31:51:8a:6f:e2:c5:f0:97:51:3f:36:15:2b:a5:a4:
80:f1:1f:d2:77:79:3d:e4:53:c9:4c:da:2c:4d:4e:
36:1c:2a:9a:46:3d:d9:29:a6:5b:fb:b3:e9:bf:37:
82:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:8E:ED:66:2A:E6:80:12:AE:63:34:15:9F:D8:9D:A3:77:E5:48:72
X509v3 Authority Key Identifier:
keyid:55:84:3A:1B:20:A2:DB:E3:E4:ED:53:E7:54:8D:76:89:67:8D:5A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYQ6GyCi2-Pk7VPnVI12iWeNWjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d61b33-abdf-4903-a82c-b5172597f73a/1/VYQ6GyCi2-Pk7VPnVI12iWeNWjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/d61b33-abdf-4903-a82c-b5172597f73a/1/VYQ6GyCi2-Pk7VPnVI12iWeNWjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:f9:8e:5e:30:49:19:ee:ee:81:5d:a4:c9:d4:c4:50:b3:62:
26:0e:e2:88:16:a6:32:dc:c2:e8:b9:5a:21:40:28:66:41:5b:
ae:38:0c:77:55:1f:36:91:7a:cf:d9:bf:77:3a:52:7b:9e:53:
2b:5c:57:d6:40:fa:5f:2f:79:0a:21:cf:0e:96:f3:4e:2b:6b:
47:d6:f0:b1:49:3a:09:2f:f9:fc:b7:5d:b6:3d:6a:94:03:49:
1d:b4:e8:0d:08:ef:00:53:22:86:ed:e9:17:b3:e5:17:d6:f6:
7c:1a:a2:96:32:7b:0b:d0:80:06:ea:41:63:84:a9:1a:a9:c8:
6b:b6:c8:a2:cf:5a:22:41:63:61:d6:05:d5:dd:87:aa:2b:b4:
37:fa:cc:be:ef:bb:35:55:c9:c8:c3:e1:4e:1e:83:73:e2:ec:
ac:30:c6:17:3c:0c:90:a4:8e:53:89:4b:b5:5b:4c:0c:a6:20:
f6:60:53:ac:e1:51:47:db:b0:6b:d4:2a:17:5a:08:c8:e9:53:
d7:c9:11:55:7c:66:b1:5f:44:81:1e:fa:5f:b9:c3:04:d1:c4:
fe:d4:08:3e:e8:b2:9b:4d:9a:3b:0c:2a:59:aa:3b:e4:e1:c8:
78:a1:c1:77:8c:62:67:58:57:0d:ee:c2:3f:89:b0:88:6e:85:
5f:f3:ac:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 05:34:52 2025 by rpki-client