Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.mft
File: VHbDyngMxXdErb6QoPOU8dHNcvM.mft (raw, json)
Hash identifier: aU2A/7nzLAZhaPl3aq84YES2FbCl/rdOsiA1oQaa4Qk=
Subject key identifier: 1F:D2:3A:4F:65:17:14:47:2D:63:A8:66:00:5A:B7:9B:BE:AB:A0:1A
Authority key identifier: 54:76:C3:CA:78:0C:C5:77:44:AD:BE:90:A0:F3:94:F1:D1:CD:72:F3
Certificate issuer: /CN=5476c3ca780cc57744adbe90a0f394f1d1cd72f3
Certificate serial: 01988DD94553B8F0D04F8DBE96BBFC957846
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VHbDyngMxXdErb6QoPOU8dHNcvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.mft
Manifest number: 028D
Signing time: Sat 09 Aug 2025 08:01:23 +0000
Manifest this update: Sat 09 Aug 2025 08:01:23 +0000
Manifest next update: Sun 10 Aug 2025 08:01:23 +0000
Files and hashes: 1: J1F-UaHfYAClgmD-n-h_bemva1g.roa (hash: LkkLFeCVLkb+GZvSdm+hQS9Yt//NS73l5BEh3ajjGOM=)
2: Mzf3T5ZCYDRP9VJBsVQOjUFWDdY.roa (hash: fMfmlTHaxDxkKj4QIO7HlLPP5wMEtHiZKgYxRA6zmJA=)
3: VHbDyngMxXdErb6QoPOU8dHNcvM.crl (hash: eLOVMM8d0bwKMKPjRITHpZfCYY/5TJ+jVoPgg0+V+jE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/VHbDyngMxXdErb6QoPOU8dHNcvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:d9:45:53:b8:f0:d0:4f:8d:be:96:bb:fc:95:78:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5476c3ca780cc57744adbe90a0f394f1d1cd72f3
Validity
Not Before: Aug 9 08:01:23 2025 GMT
Not After : Aug 10 08:01:23 2025 GMT
Subject: CN=1fd23a4f651714472d63a866005ab79bbeaba01a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:90:06:96:17:ca:da:7b:1f:4b:c4:5e:da:72:
4c:77:f1:95:a7:fa:2b:e8:28:19:0a:d0:c9:c7:bf:
14:df:be:e6:9f:89:61:74:d3:77:41:79:c8:44:a1:
7d:bb:a7:b2:19:05:29:74:14:ab:e0:b4:cc:4b:a5:
dd:77:05:aa:37:c5:0f:0a:69:ef:31:4b:c7:53:02:
d8:2c:89:6f:8a:2d:b4:fd:8e:97:f9:2c:a3:f4:36:
4a:85:6b:df:34:a8:d2:cd:34:a4:c1:d9:8f:81:e7:
a6:76:57:d6:f6:6a:44:d0:03:84:68:41:b5:9c:5a:
4e:87:ea:4d:46:cf:3f:8f:ed:9d:c1:46:13:45:ef:
f6:43:e6:1d:a7:47:72:92:40:cb:82:8e:26:48:91:
55:1b:7a:3d:39:97:8c:88:0e:0c:be:84:e2:a3:ef:
5b:46:2f:95:31:5e:a2:15:b1:ad:78:be:c0:2f:37:
16:0e:9b:9d:91:75:b1:4a:7b:4f:7a:46:38:26:07:
20:54:f9:45:97:7e:8a:af:ef:17:ce:76:91:91:91:
3b:da:6b:7c:9f:4a:db:8c:74:c7:62:84:b3:8d:05:
4a:27:43:db:a0:7d:5c:85:5d:c2:a2:a9:9a:d6:3d:
5b:9f:e1:05:06:3e:1b:5c:6d:d0:be:8c:8b:c2:7d:
22:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:D2:3A:4F:65:17:14:47:2D:63:A8:66:00:5A:B7:9B:BE:AB:A0:1A
X509v3 Authority Key Identifier:
keyid:54:76:C3:CA:78:0C:C5:77:44:AD:BE:90:A0:F3:94:F1:D1:CD:72:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHbDyngMxXdErb6QoPOU8dHNcvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:e2:d2:72:65:73:14:8c:49:3a:43:6b:87:c7:8b:af:a0:e3:
c5:6d:72:86:25:54:b5:2a:e0:f1:48:01:d3:d7:04:79:91:c6:
10:65:62:66:47:2a:1c:ae:22:92:4d:eb:c9:46:a6:71:a7:3a:
04:37:ee:88:bb:e4:89:a5:3a:92:db:a6:21:b9:d4:75:c4:88:
ba:2b:89:47:0e:ff:c8:9f:46:c3:7a:fe:17:a2:df:f9:6a:c5:
9c:de:19:4f:2a:0e:4e:09:9d:ac:bd:54:a2:c7:13:f9:f8:8f:
c6:32:f9:08:46:44:1d:d9:7a:b7:95:a1:0d:eb:f4:62:d6:29:
13:fa:f2:ce:5c:36:11:37:fc:c7:08:b2:c8:69:d5:73:b2:b1:
ea:3f:c5:7c:35:b0:9e:bc:48:23:82:2a:c7:e0:b2:30:9a:7b:
85:78:e5:e2:8d:df:1e:c5:8f:19:bf:21:f7:1b:98:58:fb:a6:
6c:53:2d:28:0f:79:b0:d5:fe:62:3a:53:3d:f2:eb:3f:f9:4c:
df:e7:fb:19:c0:3d:74:f2:74:5f:b4:17:36:02:16:15:e2:5e:
29:bd:e5:6d:3c:52:2b:07:c2:81:c5:2c:11:7b:35:b1:b3:98:
20:82:b1:ac:f8:c4:f6:42:10:ed:e3:0c:8e:57:21:6a:c0:d5:
d2:99:b7:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 10:49:13 2025 by rpki-client