Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.mft
File: vEQ_eq5H4Ks4vPjVNsymA1DRcnA.mft (raw, json)
Hash identifier: IxYoD7n5RLU6WbcPUBdWnc1DkoZE865tQz3ZSznWUvs=
Subject key identifier: B7:6B:C7:6A:84:CC:9A:48:C8:AB:F2:BA:19:76:3E:72:4A:11:CF:4A
Authority key identifier: BC:44:3F:7A:AE:47:E0:AB:38:BC:F8:D5:36:CC:A6:03:50:D1:72:70
Certificate issuer: /CN=bc443f7aae47e0ab38bcf8d536cca60350d17270
Certificate serial: 0198819DB98E6D7203C4EAF0B8097C1363DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.mft
Manifest number: 0A29
Signing time: Wed 06 Aug 2025 23:00:54 +0000
Manifest this update: Wed 06 Aug 2025 23:00:54 +0000
Manifest next update: Thu 07 Aug 2025 23:00:54 +0000
Files and hashes: 1: 4zZX5zJWUsfZ5zmG6bPbMr0lvbs.roa (hash: Qk/9tkVuHYR7bI8BB1K5v6WoVgCSt0kT7wqGusdLxvQ=)
2: Cd4rO-Hjh_1s-LE7zVhil5Tbff8.roa (hash: 1HerR65Yb0tTxX+akt3GL/BhgF51Uoa+ZBuv4yRBK4o=)
3: vEQ_eq5H4Ks4vPjVNsymA1DRcnA.crl (hash: /hW9k9s+PtkG/8BeFEod1UObrVhSjpqakTR7XR0St2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.mft
rsync://rpki.ripe.net/repository/DEFAULT/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:9d:b9:8e:6d:72:03:c4:ea:f0:b8:09:7c:13:63:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc443f7aae47e0ab38bcf8d536cca60350d17270
Validity
Not Before: Aug 6 23:00:54 2025 GMT
Not After : Aug 7 23:00:54 2025 GMT
Subject: CN=b76bc76a84cc9a48c8abf2ba19763e724a11cf4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e1:1d:dd:76:9b:14:ec:11:bb:75:f4:a6:d4:
68:98:47:c1:d2:f8:ec:98:47:68:1d:f2:8d:d6:74:
96:41:af:8c:53:b2:62:e2:95:04:07:6d:ae:5a:be:
f2:5f:1e:47:74:e4:9f:e1:af:a3:3f:57:be:8b:00:
f6:cb:57:e6:3d:17:ab:98:c1:d7:06:11:a3:19:6d:
08:7a:8c:da:b2:0b:d7:7e:c1:ad:b8:27:17:9b:1c:
90:36:e7:d4:70:a2:03:7f:71:17:f2:d3:23:29:3c:
71:bb:85:7a:93:54:9c:a0:bb:db:dc:f6:ce:03:fb:
c4:e7:c2:71:21:d4:91:70:e4:e6:52:2b:a7:ae:27:
33:c5:c1:b6:bf:16:20:64:a4:63:ce:7f:fc:83:13:
c2:23:89:53:fa:f4:21:f6:96:17:30:ab:e9:e4:6a:
a7:a1:96:fd:f1:7d:a6:20:79:7e:4f:10:95:5d:2c:
96:a0:68:8b:8f:9c:ab:df:93:83:91:e4:12:e2:a5:
c5:96:df:74:be:77:24:7a:26:80:ae:85:37:ae:01:
1f:19:8c:48:de:0e:db:e6:4a:df:13:1c:70:87:68:
2a:47:3c:25:70:8b:37:b3:a9:8b:74:bd:04:da:73:
61:b7:a2:8e:52:b9:05:c6:51:dc:da:5a:b9:c7:59:
29:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:6B:C7:6A:84:CC:9A:48:C8:AB:F2:BA:19:76:3E:72:4A:11:CF:4A
X509v3 Authority Key Identifier:
keyid:BC:44:3F:7A:AE:47:E0:AB:38:BC:F8:D5:36:CC:A6:03:50:D1:72:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:5e:3f:c1:16:db:77:0d:ca:82:2a:cc:a8:2d:43:e7:96:33:
b2:1c:c0:8b:83:83:9f:ed:56:a4:aa:ec:c4:88:85:17:c8:46:
9f:c7:6e:58:8e:5c:2b:b2:99:1c:48:f7:32:9f:b7:70:97:d2:
83:e2:25:ba:c7:e4:04:51:8d:ba:20:e2:59:17:53:bf:08:ef:
20:4f:42:f1:c5:7a:4c:aa:38:cb:e7:97:cb:50:53:1a:fa:ea:
d2:2e:95:00:ab:22:5b:09:85:1d:84:58:e4:34:25:cf:e9:1f:
ba:1f:b3:e1:35:c1:49:1e:06:61:ec:30:0e:4b:1d:07:54:f7:
1e:b3:69:cf:ba:a9:01:da:42:fd:b5:e8:d7:30:c8:80:e0:e7:
ad:61:01:7e:af:42:aa:c4:65:3d:ed:9f:13:98:08:69:b9:75:
4a:ea:10:c7:92:4b:4b:1c:54:6f:45:dd:9e:87:64:b9:e6:36:
23:30:78:4c:17:25:ac:35:de:eb:b9:e3:24:78:cf:b9:64:49:
c2:a8:69:f3:cd:77:b6:5f:50:59:a6:79:15:ed:a9:61:c7:eb:
20:76:7e:bf:9f:3a:96:5d:bc:b5:95:03:bd:68:a0:f4:0f:cd:
56:fd:51:ee:b9:e6:39:f2:0c:b1:16:23:22:ce:2d:e3:e7:70:
ff:12:07:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:20:30 2025 by rpki-client