Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/24c324-a15e-4cd0-94c1-73ff40959348/1/VnGQhUeGoWr6aw7HjfsGIKuqz-8.mft
File: VnGQhUeGoWr6aw7HjfsGIKuqz-8.mft (raw, json)
Hash identifier: mcjrmG4+DfFV94itLZEzdWt3ouo+qjZHJZDXYCpypE0=
Subject key identifier: 07:CC:82:F3:7D:A3:B4:4B:63:31:71:FE:7E:A4:0C:D9:7B:45:F0:9F
Authority key identifier: 56:71:90:85:47:86:A1:6A:FA:6B:0E:C7:8D:FB:06:20:AB:AA:CF:EF
Certificate issuer: /CN=567190854786a16afa6b0ec78dfb0620abaacfef
Certificate serial: 019847E4F68282BC92E70D3C7B161EE5F4AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VnGQhUeGoWr6aw7HjfsGIKuqz-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/24c324-a15e-4cd0-94c1-73ff40959348/1/VnGQhUeGoWr6aw7HjfsGIKuqz-8.mft
Manifest number: 1606
Signing time: Sat 26 Jul 2025 18:00:44 +0000
Manifest this update: Sat 26 Jul 2025 18:00:44 +0000
Manifest next update: Sun 27 Jul 2025 18:00:44 +0000
Files and hashes: 1: GQ1DSO1of_qyrqxkPQTC0ENKnfg.roa (hash: nTd0zjLE6XtOMPZyttCDWktzUnkCfLfuxFOPmZBOHEs=)
2: VnGQhUeGoWr6aw7HjfsGIKuqz-8.crl (hash: Lw7Qm9cf/7wpzKwHmMUEhBP0UJ6XqjguVEb+GyYr5xI=)
3: qdba9XlB-cPjFIeLPK89fH4z7YE.roa (hash: 1JK31mC2SxxDKOuDPCP+7Ar2oTz/PPCsc7D4ztv27uI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/24c324-a15e-4cd0-94c1-73ff40959348/1/VnGQhUeGoWr6aw7HjfsGIKuqz-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/24c324-a15e-4cd0-94c1-73ff40959348/1/VnGQhUeGoWr6aw7HjfsGIKuqz-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/VnGQhUeGoWr6aw7HjfsGIKuqz-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 18:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:e4:f6:82:82:bc:92:e7:0d:3c:7b:16:1e:e5:f4:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=567190854786a16afa6b0ec78dfb0620abaacfef
Validity
Not Before: Jul 26 18:00:44 2025 GMT
Not After : Jul 27 18:00:44 2025 GMT
Subject: CN=07cc82f37da3b44b633171fe7ea40cd97b45f09f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:6b:4b:8a:1a:62:aa:05:a7:04:0c:71:9e:c2:
f0:d2:b8:36:68:94:6e:a4:fd:0c:b6:24:5d:e6:df:
df:a7:47:98:a8:7f:26:f7:7c:4c:3d:c3:df:40:d3:
ad:c5:5e:b1:ae:ce:b6:6e:a8:e0:d9:08:ff:8e:92:
89:6e:bd:1d:a1:75:9c:55:f5:8a:39:04:d7:30:86:
29:50:e5:6d:ca:c6:11:c7:9c:e9:77:b4:bb:f9:02:
30:92:47:5f:0e:bb:23:ef:9a:bb:2e:21:c0:8f:80:
e7:de:51:02:b2:42:2c:ef:10:ee:e3:13:53:0d:72:
2d:ee:9c:b9:15:5f:7f:33:e7:2d:39:10:a6:45:43:
23:c1:e7:13:45:a7:0f:78:f9:28:c0:c9:b7:af:c1:
63:e4:c8:ed:b3:82:50:bd:43:56:cf:01:a4:1a:5f:
cf:cd:ba:72:b6:d9:a0:2d:29:19:b7:2e:92:2a:a6:
d7:eb:48:ae:a7:d5:92:91:80:31:d1:e3:7b:7d:a6:
66:a0:2b:ea:cf:6f:de:6d:6d:9c:b0:45:fb:5f:1b:
e6:cf:e0:c2:d5:ab:b9:d5:0d:3d:c4:d2:18:a3:72:
f2:44:57:63:8e:21:96:dd:31:4d:16:d4:b5:e2:9d:
a2:87:08:68:d8:6f:33:7d:ed:39:e4:a6:20:84:4a:
a1:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:CC:82:F3:7D:A3:B4:4B:63:31:71:FE:7E:A4:0C:D9:7B:45:F0:9F
X509v3 Authority Key Identifier:
keyid:56:71:90:85:47:86:A1:6A:FA:6B:0E:C7:8D:FB:06:20:AB:AA:CF:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VnGQhUeGoWr6aw7HjfsGIKuqz-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/24c324-a15e-4cd0-94c1-73ff40959348/1/VnGQhUeGoWr6aw7HjfsGIKuqz-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/24c324-a15e-4cd0-94c1-73ff40959348/1/VnGQhUeGoWr6aw7HjfsGIKuqz-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:c8:cc:5b:65:7e:b4:0c:85:f6:f0:b5:69:cc:16:21:b9:4e:
c3:71:d9:4b:fd:30:a7:e1:ca:51:2f:2d:8d:45:e7:e9:81:02:
02:df:57:fb:a7:8c:ad:d3:3a:95:29:1b:54:bc:ec:1f:53:3a:
c7:7f:3b:17:ee:08:60:3c:00:5d:65:8b:ff:44:33:3d:91:ca:
be:b7:51:7a:4e:e0:e6:61:88:12:f9:f0:77:5d:1d:26:de:fd:
5f:dd:86:0b:c4:89:8f:fc:f1:a7:09:fe:ae:16:5b:a4:97:cd:
79:5b:97:de:09:c0:db:0a:49:d1:10:dc:b2:c3:0b:37:2c:26:
21:69:61:fb:35:88:a4:78:cd:dc:b1:90:03:d6:c9:d0:46:2a:
d6:8c:bf:51:62:8b:45:cb:73:9e:0c:ba:a4:c4:81:69:67:fe:
a7:09:d5:2d:02:40:4a:ba:67:15:e0:59:6f:a8:bc:6f:dd:42:
80:a9:7c:b2:2e:e5:f4:21:13:d2:f8:46:f7:a2:48:ee:73:33:
fa:a1:55:4b:a8:ba:62:c3:58:93:28:50:07:df:9f:37:39:ba:
5e:b4:28:06:e9:d3:d7:ed:5b:86:32:5c:13:ee:40:b2:df:0b:
10:a5:bc:f2:a8:bb:c2:ad:5c:0a:8a:3c:d8:42:01:d8:31:6a:
c5:8e:aa:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 00:59:55 2025 by rpki-client