Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/9b4530-76e4-4401-a87b-29f78c27989f/1/vatssugHrs69fgOoCAj6sj2cRxY.mft
File: vatssugHrs69fgOoCAj6sj2cRxY.mft (raw, json)
Hash identifier: F7DWdx8ZmmPgvSl2o20yOyOehDmWhZUvTeGmnXzpOX4=
Subject key identifier: F0:1D:57:8A:CD:17:55:0E:C3:BC:47:77:31:77:AD:17:82:29:3E:87
Authority key identifier: BD:AB:6C:B2:E8:07:AE:CE:BD:7E:03:A8:08:08:FA:B2:3D:9C:47:16
Certificate issuer: /CN=bdab6cb2e807aecebd7e03a80808fab23d9c4716
Certificate serial: 0198A083AED874734296AF28469CAAC3255C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vatssugHrs69fgOoCAj6sj2cRxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/9b4530-76e4-4401-a87b-29f78c27989f/1/vatssugHrs69fgOoCAj6sj2cRxY.mft
Manifest number: 0923
Signing time: Tue 12 Aug 2025 23:00:41 +0000
Manifest this update: Tue 12 Aug 2025 23:00:41 +0000
Manifest next update: Wed 13 Aug 2025 23:00:41 +0000
Files and hashes: 1: FiQ6326ULjytbcRmbnTQT53B6qI.roa (hash: oVfk3zFCZV+aJ9BHrRH3g14/uV9d1uVQ7Jx5xhv/0d8=)
2: P26iBMzDxpvH-LQZESUQTHncYxo.roa (hash: 3+DbSLlopFDVY7Piu2/Wt1KhQBxlA0+iBBO7seLQMiE=)
3: vatssugHrs69fgOoCAj6sj2cRxY.crl (hash: AdXtwX0/xGEhbfQvELyuqb0APZIGY+FsWE3stBQwqQQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/9b4530-76e4-4401-a87b-29f78c27989f/1/vatssugHrs69fgOoCAj6sj2cRxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/9b4530-76e4-4401-a87b-29f78c27989f/1/vatssugHrs69fgOoCAj6sj2cRxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/vatssugHrs69fgOoCAj6sj2cRxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:83:ae:d8:74:73:42:96:af:28:46:9c:aa:c3:25:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdab6cb2e807aecebd7e03a80808fab23d9c4716
Validity
Not Before: Aug 12 23:00:41 2025 GMT
Not After : Aug 13 23:00:41 2025 GMT
Subject: CN=f01d578acd17550ec3bc47773177ad1782293e87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:26:3f:88:ec:f2:3e:54:1f:8f:a1:12:9c:cb:
4a:f0:36:04:5a:fc:97:a8:9f:04:14:75:2e:88:49:
e3:29:51:c4:c5:b6:5f:58:cf:5e:c0:d0:1c:90:0e:
5a:4c:cf:99:b8:08:2b:45:f8:14:1c:0d:4c:82:3d:
66:42:56:86:44:e1:47:a0:ce:57:3d:75:b0:cd:9b:
63:07:42:c7:f8:18:40:b5:2c:52:73:f7:bf:34:79:
36:60:c9:eb:94:ce:c0:a2:b8:10:8e:f4:fe:e0:98:
cf:4b:ab:a8:16:fd:3c:12:a6:b1:a6:d7:4c:d0:b8:
f8:cf:17:5d:45:75:b8:59:2a:2c:06:c7:31:c0:0a:
5a:32:db:96:4e:9f:aa:e7:5f:f9:df:79:a3:61:d5:
40:ec:33:14:11:ae:8c:ac:b0:f3:bc:89:2f:d3:5f:
55:74:41:7b:36:8c:bf:be:be:cd:46:f7:3d:d1:2f:
88:86:c6:d9:50:7e:db:b9:ed:8e:b7:75:df:c0:f8:
17:9c:8b:3c:4a:69:3b:7d:89:bc:b9:8a:48:79:36:
79:31:82:1f:2a:c4:65:2a:3a:cf:a2:a6:8a:34:85:
9a:5c:08:51:86:08:ff:ed:10:ac:c8:0e:62:86:71:
74:f5:01:37:a8:28:d5:da:02:79:86:d4:35:21:70:
21:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:1D:57:8A:CD:17:55:0E:C3:BC:47:77:31:77:AD:17:82:29:3E:87
X509v3 Authority Key Identifier:
keyid:BD:AB:6C:B2:E8:07:AE:CE:BD:7E:03:A8:08:08:FA:B2:3D:9C:47:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vatssugHrs69fgOoCAj6sj2cRxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/9b4530-76e4-4401-a87b-29f78c27989f/1/vatssugHrs69fgOoCAj6sj2cRxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/9b4530-76e4-4401-a87b-29f78c27989f/1/vatssugHrs69fgOoCAj6sj2cRxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:fe:b2:40:1d:03:f5:13:cd:53:48:41:28:4e:37:1d:61:9c:
a4:2f:22:8d:f1:5e:fd:70:06:7d:e1:2f:9e:85:c4:8f:d2:11:
a8:4a:60:ec:c0:f1:a5:ff:10:27:60:96:99:c5:fa:56:7a:06:
dd:c4:ab:69:64:af:86:2e:6c:08:6b:be:09:08:40:a8:62:d3:
2e:5c:e0:eb:2e:90:9b:77:b7:25:96:87:a2:f3:ae:4a:9f:b5:
1a:8f:9b:b7:a2:e1:6f:5e:e5:1d:fb:29:e2:89:28:fa:52:11:
0a:2a:ae:44:fe:f2:ab:76:91:a4:d0:3f:a0:d8:32:9b:1e:2f:
bd:9a:75:92:97:ed:83:0f:ca:3c:2d:e4:2f:51:0d:83:23:d7:
78:a6:b1:57:79:b5:54:16:8b:dc:6c:c2:ea:8b:ad:99:77:0f:
16:2e:f3:64:10:a0:a8:0d:74:e8:c9:13:29:71:d5:8f:9d:f5:
fb:0d:3d:38:3a:5e:36:a4:5f:cb:0e:d4:ac:64:68:ba:e7:d8:
ff:67:4d:8e:1e:41:f5:40:7c:1f:8e:2b:41:70:17:32:90:07:
48:e7:04:a7:84:e7:bd:7c:9f:25:5a:2f:2f:18:02:50:f3:24:
4e:98:b8:69:81:98:be:76:94:b7:1e:ac:83:b2:b5:66:19:03:
23:d3:8f:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 02:43:07 2025 by rpki-client