Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/d8ed41-71f6-4bb7-a3ee-a0bb140a596e/1/VdXcniIBEqJ8FSvDI4kDiXSuRXI.mft
File: VdXcniIBEqJ8FSvDI4kDiXSuRXI.mft (raw, json)
Hash identifier: lQv6dyu4J4WQiHNGlkayPsnqlBrwIAlYx0EKdlH9TNU=
Subject key identifier: EA:C0:CC:3A:BA:D8:09:3C:01:88:03:3E:AF:98:EB:AD:AB:A4:81:83
Authority key identifier: 55:D5:DC:9E:22:01:12:A2:7C:15:2B:C3:23:89:03:89:74:AE:45:72
Certificate issuer: /CN=55d5dc9e220112a27c152bc32389038974ae4572
Certificate serial: 019847ADDC0D543939CB70845DB64EFE8E33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VdXcniIBEqJ8FSvDI4kDiXSuRXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/d8ed41-71f6-4bb7-a3ee-a0bb140a596e/1/VdXcniIBEqJ8FSvDI4kDiXSuRXI.mft
Manifest number: 1318
Signing time: Sat 26 Jul 2025 17:00:32 +0000
Manifest this update: Sat 26 Jul 2025 17:00:32 +0000
Manifest next update: Sun 27 Jul 2025 17:00:32 +0000
Files and hashes: 1: NgMUQ0h4d6oIArcMJtSW703L-Zc.roa (hash: TJW4OaMrgaRj7E3uX9xVvPrYH4h+lcuQwLF2jUPlChA=)
2: VdXcniIBEqJ8FSvDI4kDiXSuRXI.crl (hash: rWq9BmVmy8ZRMBPAQ8sCUFMCSW3NdlDfT8t8KzNSkeg=)
3: h9epvE3XZbxuQFOC07DHje9oldc.roa (hash: dmaD3wbg4kagfJA96eYctyQPytlbvLwfUnrstuptdyw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/d8ed41-71f6-4bb7-a3ee-a0bb140a596e/1/VdXcniIBEqJ8FSvDI4kDiXSuRXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/d8ed41-71f6-4bb7-a3ee-a0bb140a596e/1/VdXcniIBEqJ8FSvDI4kDiXSuRXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/VdXcniIBEqJ8FSvDI4kDiXSuRXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 17:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:ad:dc:0d:54:39:39:cb:70:84:5d:b6:4e:fe:8e:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55d5dc9e220112a27c152bc32389038974ae4572
Validity
Not Before: Jul 26 17:00:32 2025 GMT
Not After : Jul 27 17:00:32 2025 GMT
Subject: CN=eac0cc3abad8093c0188033eaf98ebadaba48183
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:24:52:3a:33:cb:d8:00:3a:94:af:d0:02:f5:
66:86:5e:87:b2:41:43:46:e6:75:ec:ae:28:bb:68:
79:6e:d2:ad:52:0a:a5:3b:ff:95:72:98:a1:45:17:
aa:36:64:e2:8e:ea:fb:c0:b3:f0:2d:55:d3:77:a6:
38:d4:6f:bc:23:82:d6:cf:0b:9c:09:2d:a5:c2:e9:
e3:3f:30:be:27:81:f0:c8:8a:81:73:d0:f0:eb:ee:
76:9e:4c:49:67:0e:8c:4c:85:bd:10:43:89:1c:20:
41:58:40:f0:f5:eb:35:95:50:6f:6b:28:7a:1d:0f:
64:c3:c6:95:7b:4c:71:8b:73:be:16:5b:44:ba:8e:
d7:72:fa:77:20:66:f2:76:20:dc:f5:af:40:c0:43:
92:8f:bc:5d:f0:57:3a:94:f3:5c:6e:b2:5c:23:b5:
12:4d:4d:e0:7e:f5:5e:67:78:5f:e7:a7:2d:eb:f0:
b5:0d:9a:11:60:11:16:97:9a:5f:c9:b2:ff:ca:43:
fc:a9:9f:a3:24:63:b5:a5:93:27:1a:a9:93:ca:c5:
f3:8c:f2:c7:62:15:9e:92:d4:4b:df:14:26:00:ba:
e5:3a:a3:f6:b7:84:72:d1:26:a9:b7:0c:56:ee:bf:
bd:ad:d8:a6:77:fc:a1:3b:b5:1d:db:57:e3:d5:72:
2e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:C0:CC:3A:BA:D8:09:3C:01:88:03:3E:AF:98:EB:AD:AB:A4:81:83
X509v3 Authority Key Identifier:
keyid:55:D5:DC:9E:22:01:12:A2:7C:15:2B:C3:23:89:03:89:74:AE:45:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VdXcniIBEqJ8FSvDI4kDiXSuRXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d8ed41-71f6-4bb7-a3ee-a0bb140a596e/1/VdXcniIBEqJ8FSvDI4kDiXSuRXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d8ed41-71f6-4bb7-a3ee-a0bb140a596e/1/VdXcniIBEqJ8FSvDI4kDiXSuRXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:00:78:56:4d:f4:48:e4:76:02:1a:a1:70:51:40:12:d6:fa:
c6:22:75:d6:19:e4:12:bd:e5:8a:f8:01:61:78:88:34:77:80:
e7:cb:42:29:47:70:0c:e0:77:aa:8a:c8:fe:bc:5b:38:43:4f:
3a:18:4f:00:8a:1b:b5:e9:0f:bb:37:85:0f:0b:86:f7:86:19:
a6:ff:c7:fa:e3:89:e9:0f:a8:c8:00:fb:02:90:44:87:96:8c:
a5:40:1f:6d:e8:bc:44:e1:be:15:3d:17:0f:cf:5d:af:c4:41:
b5:58:41:59:24:5f:ac:b8:2d:09:23:04:97:0c:1f:12:0f:aa:
25:d9:6d:d2:15:81:36:51:d1:57:a3:92:95:07:97:94:3c:b5:
e0:5c:58:ee:51:83:2a:93:0b:8f:b2:6a:24:be:7c:da:35:16:
cc:bb:26:7d:ad:9e:74:43:ca:f6:8c:3e:10:6c:f2:d0:2e:6a:
45:fe:01:dd:63:59:c2:83:8b:b7:a2:9f:92:17:ec:04:90:06:
40:1a:84:92:79:86:44:67:01:d7:90:da:82:23:7a:d7:ba:fe:
e3:82:e0:40:67:ae:9d:12:5f:c3:53:95:a6:9f:09:ce:64:f1:
27:2a:c6:7f:21:7e:8e:07:9d:8b:8a:1d:9f:4d:f7:e1:9d:65:
c9:63:66:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 02:36:05 2025 by rpki-client