Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/7caae5-03af-47f8-b29e-e951a74346f9/1/VSQj7ZBQAPaa2T7vxma7mxrdyzc.mft
File: VSQj7ZBQAPaa2T7vxma7mxrdyzc.mft (raw, json)
Hash identifier: rhL7YMgVzyI2seu+jSmAH9Ahj/SooHcZRUDqE1GfSrw=
Subject key identifier: 9C:9E:17:11:38:BF:4B:A7:53:C3:3F:E5:FF:E5:B5:E6:48:F2:25:E5
Authority key identifier: 55:24:23:ED:90:50:00:F6:9A:D9:3E:EF:C6:66:BB:9B:1A:DD:CB:37
Certificate issuer: /CN=552423ed905000f69ad93eefc666bb9b1addcb37
Certificate serial: 0198518C798D2B7329E8C0A97B5202892C49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VSQj7ZBQAPaa2T7vxma7mxrdyzc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/7caae5-03af-47f8-b29e-e951a74346f9/1/VSQj7ZBQAPaa2T7vxma7mxrdyzc.mft
Manifest number: 1608
Signing time: Mon 28 Jul 2025 15:00:17 +0000
Manifest this update: Mon 28 Jul 2025 15:00:17 +0000
Manifest next update: Tue 29 Jul 2025 15:00:17 +0000
Files and hashes: 1: 2mQ_q8-dGNGRe3nqpXkavXNspDg.roa (hash: /3YCHcej9bstt2T6B00QHN8/IPSuEaJEhcwHBYjcdtw=)
2: 5SSOCLgHzcxdzYdGNpYRPqovl-A.roa (hash: PUdiBPSqRZwnkbR0oFATrv5zTfcNr+UqMdxjxEau1ew=)
3: VSQj7ZBQAPaa2T7vxma7mxrdyzc.crl (hash: g3mBNUyHJl3naOvpqUSyziRzxXkUN/q3g2AZyfLfMS4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/7caae5-03af-47f8-b29e-e951a74346f9/1/VSQj7ZBQAPaa2T7vxma7mxrdyzc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/7caae5-03af-47f8-b29e-e951a74346f9/1/VSQj7ZBQAPaa2T7vxma7mxrdyzc.mft
rsync://rpki.ripe.net/repository/DEFAULT/VSQj7ZBQAPaa2T7vxma7mxrdyzc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:51:8c:79:8d:2b:73:29:e8:c0:a9:7b:52:02:89:2c:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=552423ed905000f69ad93eefc666bb9b1addcb37
Validity
Not Before: Jul 28 15:00:17 2025 GMT
Not After : Jul 29 15:00:17 2025 GMT
Subject: CN=9c9e171138bf4ba753c33fe5ffe5b5e648f225e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:34:d0:67:d3:9f:4f:bb:34:af:dc:ca:2f:2a:
5a:19:2a:11:f4:15:b5:42:01:c8:c4:a2:e5:dc:fd:
00:e2:84:58:de:3b:c7:8d:07:4f:5d:e1:64:11:09:
9e:c8:4f:38:26:0c:14:6b:39:5d:39:33:f7:0c:e7:
0e:76:65:01:97:11:01:02:58:a3:8a:c0:e9:e7:69:
98:52:29:36:5f:41:0e:c6:74:76:1f:72:38:14:ba:
58:c9:81:c7:95:ef:68:a0:94:db:ae:ae:42:10:2a:
4e:45:e7:b1:6a:8f:fd:a0:2d:33:40:2c:8c:91:0c:
b6:4e:0d:4b:f3:2b:11:94:56:e5:01:a4:ba:bc:5e:
e7:8d:b2:da:ea:b6:4d:5e:a0:5d:cb:03:65:6a:68:
ba:ae:d8:ce:aa:e7:47:7e:ff:b1:dc:8f:2b:80:fc:
a2:b8:3d:a8:45:aa:f7:09:93:51:06:9b:af:58:96:
58:dd:fc:39:8f:dd:79:ea:19:be:c8:b9:2e:97:0c:
f4:0d:43:4a:bf:b1:ca:14:ed:99:cd:aa:e1:4e:ac:
a2:9a:60:6d:81:e7:83:26:ac:77:77:09:8a:15:00:
d6:fe:d0:9c:fa:72:e2:8b:08:94:76:8d:dd:59:74:
f9:49:aa:35:4b:42:b4:08:18:02:1f:98:e1:0a:0b:
32:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:9E:17:11:38:BF:4B:A7:53:C3:3F:E5:FF:E5:B5:E6:48:F2:25:E5
X509v3 Authority Key Identifier:
keyid:55:24:23:ED:90:50:00:F6:9A:D9:3E:EF:C6:66:BB:9B:1A:DD:CB:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VSQj7ZBQAPaa2T7vxma7mxrdyzc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7caae5-03af-47f8-b29e-e951a74346f9/1/VSQj7ZBQAPaa2T7vxma7mxrdyzc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7caae5-03af-47f8-b29e-e951a74346f9/1/VSQj7ZBQAPaa2T7vxma7mxrdyzc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:00:ae:e7:fe:89:ee:ac:a3:bc:61:a6:56:95:b5:d6:77:96:
fb:4d:6e:f5:80:8d:3e:d7:e3:b7:d6:6b:b8:01:91:5d:77:b7:
12:22:66:ee:4f:3b:da:ea:f7:69:1b:6f:e3:fa:6a:5a:9d:7a:
83:ae:1d:01:a2:e8:03:22:02:8f:22:91:81:74:26:a3:a6:7e:
d6:75:5e:cf:67:be:dd:7a:b5:c4:29:e5:76:a8:6e:df:d1:e5:
63:6e:e3:36:a2:d3:ce:07:c5:c0:f5:36:a6:5f:e6:ba:d8:9d:
b3:5a:76:6b:c4:34:5d:65:e9:6d:ab:dd:d7:3b:83:39:f1:40:
6a:07:06:2b:2f:38:fe:12:ba:7f:2e:77:2a:6c:38:05:bd:43:
03:a0:c3:67:00:71:6c:2c:a2:40:ab:4c:b5:08:2f:37:f4:28:
79:14:d4:db:b0:a8:ac:e3:b5:52:37:88:e2:e0:4e:92:08:4c:
c1:a6:fb:72:a2:8b:c3:f7:cc:24:9e:24:84:40:46:c7:13:c1:
27:18:98:0b:f1:dd:ab:f2:6f:ef:aa:4a:ae:2c:09:d7:1b:43:
ed:52:88:f0:50:95:c6:59:1b:d7:58:34:1c:3c:44:fa:79:1e:
63:60:00:8d:ce:42:97:dd:ed:1d:83:b7:7b:3f:a2:43:6a:5a:
35:96:bf:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 00:43:07 2025 by rpki-client