Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/61a693-836a-4122-b929-e2a9205a9d2a/1/vqse58Ta0p0SfVZdG5N5RlwoiTc.mft
File: vqse58Ta0p0SfVZdG5N5RlwoiTc.mft (raw, json)
Hash identifier: zL+Ken74kFyJCCHnjXibUk53/mYpW0goCg9e29R3qoA=
Subject key identifier: 68:F1:4F:05:A5:58:89:8B:4D:71:2C:76:DE:1A:5C:05:22:A4:3A:4F
Authority key identifier: BE:AB:1E:E7:C4:DA:D2:9D:12:7D:56:5D:1B:93:79:46:5C:28:89:37
Certificate issuer: /CN=beab1ee7c4dad29d127d565d1b9379465c288937
Certificate serial: 01984A40D9A873BECAA2AAB4B7160C77490E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vqse58Ta0p0SfVZdG5N5RlwoiTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/61a693-836a-4122-b929-e2a9205a9d2a/1/vqse58Ta0p0SfVZdG5N5RlwoiTc.mft
Manifest number: 1600
Signing time: Sun 27 Jul 2025 05:00:20 +0000
Manifest this update: Sun 27 Jul 2025 05:00:20 +0000
Manifest next update: Mon 28 Jul 2025 05:00:20 +0000
Files and hashes: 1: M6HhHlPpshdNz9eD4RpZo054CNI.roa (hash: Oj0e4uW1W20zki7xK3pquycyEqfpqSDKDUOaElxS5vM=)
2: vqse58Ta0p0SfVZdG5N5RlwoiTc.crl (hash: Bslh/akTZZdZq6tWbztDwJ634prn/bzfsGqkFlz0ASU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/61a693-836a-4122-b929-e2a9205a9d2a/1/vqse58Ta0p0SfVZdG5N5RlwoiTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/61a693-836a-4122-b929-e2a9205a9d2a/1/vqse58Ta0p0SfVZdG5N5RlwoiTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/vqse58Ta0p0SfVZdG5N5RlwoiTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:40:d9:a8:73:be:ca:a2:aa:b4:b7:16:0c:77:49:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=beab1ee7c4dad29d127d565d1b9379465c288937
Validity
Not Before: Jul 27 05:00:20 2025 GMT
Not After : Jul 28 05:00:20 2025 GMT
Subject: CN=68f14f05a558898b4d712c76de1a5c0522a43a4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:1b:af:5a:f2:23:61:02:94:4f:40:43:ca:7f:
79:f7:72:72:02:52:e5:0f:bb:cc:54:bb:19:b5:3d:
2e:e6:f3:20:9b:cf:c9:fa:4d:8c:c0:23:15:f3:c6:
a5:66:31:15:19:7d:79:5b:af:79:66:66:de:78:09:
70:66:19:41:67:e6:58:24:ee:81:d5:7a:31:87:48:
b1:0f:d9:20:dc:e9:3e:f0:14:d4:4a:6b:29:fb:68:
90:ce:96:c5:a4:ad:bf:62:bb:e2:91:99:03:07:a2:
a5:44:fd:ac:03:0c:28:27:e7:b0:bd:e3:73:4a:3c:
0f:eb:16:21:54:32:57:7d:14:45:36:c4:29:8e:cf:
98:2b:ba:39:62:5d:47:b3:ed:57:c3:ec:52:ed:d9:
78:98:e9:d2:b0:13:29:26:cb:bf:ce:c3:7c:52:e4:
5e:ce:ff:6e:52:59:cf:db:24:8a:e2:82:43:d8:71:
13:b8:43:56:27:d5:fe:6b:5b:ff:07:68:0a:cf:39:
3b:9c:64:d8:c1:28:91:5c:c8:59:03:31:22:71:75:
e5:c2:0b:4b:20:24:89:57:cb:a4:b0:32:2f:25:3f:
49:fd:df:2a:f4:c1:b0:91:0a:9c:2e:c6:07:c7:ad:
20:d6:69:ff:52:e4:f2:9e:ff:48:24:d3:bb:93:7c:
e0:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:F1:4F:05:A5:58:89:8B:4D:71:2C:76:DE:1A:5C:05:22:A4:3A:4F
X509v3 Authority Key Identifier:
keyid:BE:AB:1E:E7:C4:DA:D2:9D:12:7D:56:5D:1B:93:79:46:5C:28:89:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqse58Ta0p0SfVZdG5N5RlwoiTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/61a693-836a-4122-b929-e2a9205a9d2a/1/vqse58Ta0p0SfVZdG5N5RlwoiTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/61a693-836a-4122-b929-e2a9205a9d2a/1/vqse58Ta0p0SfVZdG5N5RlwoiTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:da:96:43:9d:30:80:57:27:9e:94:cc:e9:f2:50:23:ea:3d:
42:d4:c7:8b:37:d7:e5:23:1b:36:62:79:67:c1:54:51:56:82:
35:8b:b2:a1:a2:da:b6:b2:28:51:6f:0a:7e:43:5e:33:89:bf:
4d:95:79:9d:c7:cd:55:a0:e5:dd:74:21:14:c8:dd:ed:dc:63:
27:09:cb:70:0c:69:d7:8c:8f:13:d4:f2:18:5a:f3:bf:ef:97:
8d:40:66:06:6b:eb:2a:0e:21:a6:b8:37:80:a7:06:fa:54:66:
6c:2d:a3:a8:77:10:54:7c:58:d7:bf:9f:10:fa:4c:59:9f:00:
6d:b4:6b:f8:d6:ff:17:1d:40:e2:ba:6a:f4:aa:7b:11:6e:ee:
ec:43:ee:6f:d6:ab:4e:5b:33:13:c8:bf:12:72:9c:64:a8:cc:
c6:5c:f8:55:bd:ad:b3:dc:2d:98:8e:36:0b:b4:f3:fc:f3:aa:
a3:46:25:7f:35:88:50:eb:d8:d3:8b:f3:94:b0:63:fd:fe:68:
ad:fd:42:39:24:1d:fb:4d:6b:2a:47:f4:eb:42:94:66:61:5b:
c8:81:36:e1:05:38:3c:a1:22:a8:7c:3b:a3:f0:78:02:a4:47:
c2:f3:93:96:95:f6:1a:40:f4:51:b3:f7:88:50:65:fd:b5:cd:
47:9d:ac:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:42:58 2025 by rpki-client