Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/17e567-9e44-444a-ac64-18b34bea9b06/1/VHkd3iyb3qNmzn7GxagAxdpjNFQ.mft
File: VHkd3iyb3qNmzn7GxagAxdpjNFQ.mft (raw, json)
Hash identifier: UNYuH3KeTFVbMVuDKndqYzhdKv/07ODufCFkoap9Z2Q=
Subject key identifier: DD:38:1A:2B:D9:B3:86:05:59:E7:7F:5D:BE:7C:A8:8C:A6:EA:28:11
Authority key identifier: 54:79:1D:DE:2C:9B:DE:A3:66:CE:7E:C6:C5:A8:00:C5:DA:63:34:54
Certificate issuer: /CN=54791dde2c9bdea366ce7ec6c5a800c5da633454
Certificate serial: 019859EAFE259DC40FCD1CF65AD88B49AD98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VHkd3iyb3qNmzn7GxagAxdpjNFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/17e567-9e44-444a-ac64-18b34bea9b06/1/VHkd3iyb3qNmzn7GxagAxdpjNFQ.mft
Manifest number: 13C5
Signing time: Wed 30 Jul 2025 06:00:29 +0000
Manifest this update: Wed 30 Jul 2025 06:00:29 +0000
Manifest next update: Thu 31 Jul 2025 06:00:29 +0000
Files and hashes: 1: 45perw_w1j6f13fS2dhRsqX1J5M.roa (hash: DYBg8sY6Y3Ov/VU9uOEBk40lHTsP43PpQZFd0Uj3ouA=)
2: VHkd3iyb3qNmzn7GxagAxdpjNFQ.crl (hash: aTzV2iP4ihCed+kH8zL0Hcn2PsrocOwLKDABmF5lh40=)
3: lVcXLet5xDC9hx49fSzHNMkhKuQ.roa (hash: yDDXEEZlcdjv6pPGItKtHPkxBZnpxpZ1NCia9fyNgYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/17e567-9e44-444a-ac64-18b34bea9b06/1/VHkd3iyb3qNmzn7GxagAxdpjNFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/17e567-9e44-444a-ac64-18b34bea9b06/1/VHkd3iyb3qNmzn7GxagAxdpjNFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/VHkd3iyb3qNmzn7GxagAxdpjNFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 31 Jul 2025 06:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:59:ea:fe:25:9d:c4:0f:cd:1c:f6:5a:d8:8b:49:ad:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54791dde2c9bdea366ce7ec6c5a800c5da633454
Validity
Not Before: Jul 30 06:00:29 2025 GMT
Not After : Jul 31 06:00:29 2025 GMT
Subject: CN=dd381a2bd9b3860559e77f5dbe7ca88ca6ea2811
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:e7:75:12:0c:4d:3a:20:bb:ae:58:09:c8:c3:
76:62:ce:91:53:6a:24:9f:f9:bd:6a:ad:8d:5a:a9:
fc:b4:8a:75:4c:57:9f:27:b0:23:7d:5c:d5:f0:ce:
34:21:82:8d:60:1d:7a:8a:4b:66:e4:5a:cb:b7:11:
c8:d9:c6:98:98:af:16:6d:d6:33:a0:18:f6:7c:c1:
61:59:f6:a4:b1:64:6d:83:8d:e3:68:f8:cd:b6:98:
32:3e:0d:e3:17:1b:23:1f:ff:8a:8c:41:ad:9a:a1:
f8:af:07:3b:26:9d:5e:fb:25:fa:0e:06:4a:51:69:
3d:9c:39:a4:56:26:4e:8a:37:eb:7d:80:8d:37:94:
c4:69:97:96:38:39:fb:62:55:12:5c:de:39:16:5b:
59:a1:6d:43:05:8e:e5:a6:a3:18:cc:df:12:83:16:
c1:95:c4:04:2e:dc:83:2a:28:a7:fa:5f:c3:9d:3a:
0a:87:3d:a1:48:1e:5a:04:90:d5:b5:e4:7a:8d:3b:
9a:17:1c:19:de:b0:87:7d:2c:85:32:d4:c9:15:b0:
f1:33:3a:4f:04:1b:7a:18:19:6f:1e:c4:bd:cc:c2:
98:87:e5:d1:06:c2:9d:b9:fd:28:0e:ba:b9:d2:ef:
98:df:91:49:d8:ef:34:40:ec:36:49:90:07:80:1e:
0b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:38:1A:2B:D9:B3:86:05:59:E7:7F:5D:BE:7C:A8:8C:A6:EA:28:11
X509v3 Authority Key Identifier:
keyid:54:79:1D:DE:2C:9B:DE:A3:66:CE:7E:C6:C5:A8:00:C5:DA:63:34:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHkd3iyb3qNmzn7GxagAxdpjNFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/17e567-9e44-444a-ac64-18b34bea9b06/1/VHkd3iyb3qNmzn7GxagAxdpjNFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/17e567-9e44-444a-ac64-18b34bea9b06/1/VHkd3iyb3qNmzn7GxagAxdpjNFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:70:c5:0c:5b:8d:17:eb:3b:3d:b1:29:41:31:66:ed:46:bb:
a6:bd:cf:99:67:83:12:a5:b3:bb:36:c4:6d:82:3a:b2:06:47:
9c:0b:00:fc:59:c0:42:e4:52:34:23:e8:e7:c5:cc:1a:c1:7c:
91:29:d5:41:e3:47:6a:c4:e5:6d:cb:80:77:d1:d1:86:95:ff:
d7:21:54:c2:68:e7:0f:88:22:ab:8d:8b:0e:7f:fe:51:ab:67:
bc:1c:9a:73:80:84:c8:c7:b9:64:89:1d:70:09:d3:fe:5e:9d:
b8:69:d0:2f:4c:fb:c0:77:16:bc:55:87:67:15:a2:8b:08:64:
bd:90:48:af:ff:97:a8:e0:45:da:ba:89:f9:49:18:b9:50:55:
39:66:ca:ca:7d:0d:17:59:c9:d3:65:bc:f4:4e:6f:31:fc:e4:
20:db:f4:46:b6:07:c0:a6:f2:e9:7f:e2:26:f3:67:9a:cb:e3:
6c:39:ce:b8:98:bf:04:9e:67:98:9a:2a:70:7f:55:d9:25:8b:
ed:17:8d:ac:bd:c9:92:2a:1e:f5:40:62:d7:94:c6:3d:34:32:
26:d8:97:85:58:a3:05:f7:fb:cd:bc:44:c5:59:23:65:4c:38:
ed:e9:f7:92:f7:af:30:45:9b:e9:b0:d2:c0:15:ac:34:50:a0:
fe:66:13:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 16:08:47 2025 by rpki-client