Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.mft
File: VDxcNKYv--2PwPDsAbQsDFDufvc.mft (raw, json)
Hash identifier: M1suyEcwUuuEB8EU1xkpw0c4PmFbu/iqP2MMBl/hgYE=
Subject key identifier: D8:F7:CD:4A:C6:E1:85:A5:AD:58:D9:54:A4:DD:60:65:6C:E6:9E:0A
Authority key identifier: 54:3C:5C:34:A6:2F:FB:ED:8F:C0:F0:EC:01:B4:2C:0C:50:EE:7E:F7
Certificate issuer: /CN=543c5c34a62ffbed8fc0f0ec01b42c0c50ee7ef7
Certificate serial: 01987E2F11545998B8A331E970CC7FB6E23F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VDxcNKYv--2PwPDsAbQsDFDufvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.mft
Manifest number: 0836
Signing time: Wed 06 Aug 2025 07:01:10 +0000
Manifest this update: Wed 06 Aug 2025 07:01:10 +0000
Manifest next update: Thu 07 Aug 2025 07:01:10 +0000
Files and hashes: 1: 3OLIMizXOJwfjWRWiEBjpUKJwIU.roa (hash: QMFZT0i3XGS+MsKzCsZOmKPi7vfVCyuG5tTyqhdATNA=)
2: NPlJ_KhWtoEU85P6_bEw-JrQECw.roa (hash: +WKUN/INEKKaNIE4RDQgpQc6rCP9GRAzlztHhcY8Wc4=)
3: PVF7wnGzCTMj-DMi0Yh7tJoQV50.roa (hash: ifNzodbn64RIKDxyUKgvxQYTPT/TGzAFj9xlomWoMYM=)
4: VDxcNKYv--2PwPDsAbQsDFDufvc.crl (hash: sC60EucqQjoUwJ4xuIJOYPc7ZZ3zrYiGW8bR0nc48ro=)
5: aP1xgGw8H7jCOI-VSZ01nj8-4CM.roa (hash: tc+u6WTs4frUnC9+3IttTv0/u7Rmmf/DRJCt109dDEg=)
6: egWiNnqY9Vl0Wup08EirG2JX11M.roa (hash: cdwWkaZBw0jnB5ddN/k9GlCFftOqTidrPnaELenZvX8=)
7: lSBrUQBEKuTSY6AdNT1ZVvcTRx8.roa (hash: G+WOXA6z8Ino3VGaelG9h3UW5mZBPuWh+ANhGCA7MB0=)
8: tRNUe3Kk3eWia8VX_dKXZILdgjE.roa (hash: JStwVDR6ukqM/F9+GpHeAO0i8HlEBKkQBbaoGUyV6eY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/VDxcNKYv--2PwPDsAbQsDFDufvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 07:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:2f:11:54:59:98:b8:a3:31:e9:70:cc:7f:b6:e2:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=543c5c34a62ffbed8fc0f0ec01b42c0c50ee7ef7
Validity
Not Before: Aug 6 07:01:10 2025 GMT
Not After : Aug 7 07:01:10 2025 GMT
Subject: CN=d8f7cd4ac6e185a5ad58d954a4dd60656ce69e0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:bc:94:fc:60:ba:a5:94:94:64:12:5a:1d:a5:
eb:45:ba:bb:af:d2:b7:ea:1f:5d:62:9f:3b:d3:65:
67:f8:8a:88:ae:9d:76:4d:3b:aa:e3:e2:95:5e:48:
33:e0:a3:6a:c3:21:43:8c:79:65:c7:8c:05:2c:12:
d7:e2:31:cb:c6:1b:a8:4b:7f:00:4d:d6:5f:16:0e:
0d:2b:45:f1:a8:8a:5c:f1:96:ca:e0:de:02:d9:c5:
a7:3a:df:a1:8e:c1:e1:07:b8:5a:0c:f3:e9:e6:27:
02:80:8d:a0:c6:f8:61:92:b3:cc:31:3e:0e:f9:0a:
bf:86:e9:25:85:ef:4f:f1:6b:61:8f:e6:11:b1:35:
1a:b3:3c:2c:b7:fc:eb:30:d1:22:cf:46:44:52:7a:
e5:4a:68:79:ef:fc:77:09:f1:57:35:cb:1f:d2:f0:
45:90:08:b3:ce:14:97:5c:75:d7:ef:82:0c:13:c1:
4e:55:08:42:fe:4f:09:c6:9b:78:83:f7:af:8c:8a:
f0:47:40:f6:7c:a3:f1:17:69:64:88:51:85:3a:33:
6a:22:8a:55:35:e3:b6:3b:fb:09:ca:51:f3:1a:dc:
15:e1:32:bd:7e:5f:e0:16:9a:08:18:ff:01:4b:18:
88:c5:be:59:8b:60:3a:64:ae:5b:c4:0e:d1:9b:70:
21:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:F7:CD:4A:C6:E1:85:A5:AD:58:D9:54:A4:DD:60:65:6C:E6:9E:0A
X509v3 Authority Key Identifier:
keyid:54:3C:5C:34:A6:2F:FB:ED:8F:C0:F0:EC:01:B4:2C:0C:50:EE:7E:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VDxcNKYv--2PwPDsAbQsDFDufvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:3c:17:4b:c7:33:c2:80:c3:0c:47:9e:5e:7e:94:dd:ea:f7:
f9:0a:f0:cd:3a:01:0d:f0:18:e8:cf:6b:25:1e:97:da:63:af:
53:10:09:35:ab:99:5a:5d:3b:10:23:98:42:a5:a5:5e:cd:06:
46:04:c4:2c:dc:ca:e7:e5:0e:2b:93:bc:3a:f9:90:52:81:22:
24:66:d3:86:ce:d0:04:18:a6:21:82:f5:b8:24:59:1b:2a:09:
cf:bb:9f:9a:f3:ff:f8:57:d6:6b:41:9c:49:fd:a5:a8:03:8e:
08:12:7f:89:ad:6f:0c:cd:d8:74:42:29:13:32:aa:e5:cf:10:
26:83:9f:96:e3:cf:ac:ac:a9:74:9b:b7:8f:2e:30:c6:42:e5:
04:e9:f6:af:f6:17:40:a7:54:c1:f4:b0:61:22:86:d0:24:3b:
40:23:18:69:fa:73:58:b2:79:a4:a1:23:87:13:e6:2d:98:e1:
bd:23:c4:d1:4b:4e:24:78:88:5c:aa:b8:65:bd:5e:98:14:8d:
03:b6:64:a3:49:41:23:0f:d3:e4:32:38:bb:6d:58:bc:14:cb:
03:ff:b4:fe:6b:9a:60:2c:2f:e8:d8:ed:73:cf:b6:93:e1:bc:
fd:7d:c2:05:3a:15:3d:54:0e:b0:cb:b0:d1:c6:fa:ec:b6:96:
33:32:95:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:21:01 2025 by rpki-client