Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/ebfc3d-54fc-4643-be56-ea70a29c76f0/1/vQY9lEu4H8McuhFJndAG607OliQ.mft
File: vQY9lEu4H8McuhFJndAG607OliQ.mft (raw, json)
Hash identifier: z1u8ieBONYtUGTNlXHr3qm5ZK4AVpmtP8WHb3nsAaOw=
Subject key identifier: 04:63:CD:C1:33:37:19:9C:96:55:AB:90:6A:2F:DB:84:25:1A:D2:E9
Authority key identifier: BD:06:3D:94:4B:B8:1F:C3:1C:BA:11:49:9D:D0:06:EB:4E:CE:96:24
Certificate issuer: /CN=bd063d944bb81fc31cba11499dd006eb4ece9624
Certificate serial: 0198499C566DADFA8115377943D6FFA8EEE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vQY9lEu4H8McuhFJndAG607OliQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/ebfc3d-54fc-4643-be56-ea70a29c76f0/1/vQY9lEu4H8McuhFJndAG607OliQ.mft
Manifest number: 0437
Signing time: Sun 27 Jul 2025 02:00:38 +0000
Manifest this update: Sun 27 Jul 2025 02:00:38 +0000
Manifest next update: Mon 28 Jul 2025 02:00:38 +0000
Files and hashes: 1: Nq1isTWXGFgDMfQsWjLkSFAz9YU.roa (hash: cOanxi0n0S0i8MlV6jtoZzMtSVudeCiiZSom6UuFfg0=)
2: vQY9lEu4H8McuhFJndAG607OliQ.crl (hash: /L66ov1vXFqOM999LG6HT7t5ET0y5zstjotakMGmRGM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/ebfc3d-54fc-4643-be56-ea70a29c76f0/1/vQY9lEu4H8McuhFJndAG607OliQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/ebfc3d-54fc-4643-be56-ea70a29c76f0/1/vQY9lEu4H8McuhFJndAG607OliQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/vQY9lEu4H8McuhFJndAG607OliQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9c:56:6d:ad:fa:81:15:37:79:43:d6:ff:a8:ee:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd063d944bb81fc31cba11499dd006eb4ece9624
Validity
Not Before: Jul 27 02:00:38 2025 GMT
Not After : Jul 28 02:00:38 2025 GMT
Subject: CN=0463cdc13337199c9655ab906a2fdb84251ad2e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:4c:ab:a0:fc:74:66:43:24:15:e1:b8:c3:a3:
a4:9c:46:34:b6:0a:51:3a:ac:db:58:01:56:09:b3:
4f:c5:4f:c8:d9:92:38:0c:4d:2e:f0:85:28:51:16:
9d:93:a7:08:37:b8:8f:30:01:f7:4c:c0:ae:bd:c5:
b3:07:ec:2d:0e:1e:08:9b:8c:d4:0f:b1:fb:06:d0:
68:31:b1:8b:16:23:d6:ad:91:92:e1:7f:6b:90:49:
25:3e:f4:ab:e9:bb:45:06:50:d8:7f:63:d8:d0:fe:
11:98:4e:a9:7e:b2:10:c4:d7:f3:50:eb:19:dd:14:
58:13:91:de:59:3b:b6:f5:64:ab:2b:bb:3b:e4:1f:
49:66:8b:36:2a:8a:7b:a5:8a:f7:65:9f:d7:03:ea:
79:48:8b:c8:f9:19:6c:9b:42:18:e9:1c:9f:62:d3:
5d:41:ea:ec:51:0a:d1:ac:20:09:cd:d2:fd:59:be:
03:44:48:56:58:ea:64:74:e9:21:22:60:c0:d2:6c:
77:0a:a6:09:a1:34:4f:bf:dc:60:13:d1:94:17:ab:
53:32:2f:c1:ad:5a:21:d1:16:0d:04:d8:fa:1f:7c:
ae:e6:26:13:97:13:97:5e:de:4b:fc:a4:43:ac:bb:
fe:5f:eb:b8:5a:e7:ec:26:96:00:af:85:b9:8b:78:
58:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:63:CD:C1:33:37:19:9C:96:55:AB:90:6A:2F:DB:84:25:1A:D2:E9
X509v3 Authority Key Identifier:
keyid:BD:06:3D:94:4B:B8:1F:C3:1C:BA:11:49:9D:D0:06:EB:4E:CE:96:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vQY9lEu4H8McuhFJndAG607OliQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ebfc3d-54fc-4643-be56-ea70a29c76f0/1/vQY9lEu4H8McuhFJndAG607OliQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ebfc3d-54fc-4643-be56-ea70a29c76f0/1/vQY9lEu4H8McuhFJndAG607OliQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:95:e0:f0:c8:50:d9:e9:2a:26:7a:cb:32:85:29:3b:0b:66:
42:e3:66:e6:de:4f:12:fa:b6:f7:69:92:6e:d5:9e:63:0d:68:
92:c3:77:eb:63:99:bc:32:78:1e:f7:cc:17:4c:9b:86:29:6c:
0d:7d:36:d8:3c:2a:17:d1:ff:07:0b:f5:80:d0:ff:56:db:da:
86:5a:58:68:c7:ae:bd:15:f4:e0:33:89:0a:7e:c7:ed:ab:b6:
6f:7b:ef:2f:02:51:6d:8c:dd:b1:c3:84:35:a8:d7:59:33:6c:
cf:cb:0c:72:4e:85:90:d1:b2:20:cb:b0:cb:18:0a:d5:d8:0c:
5a:71:a2:5b:01:23:72:a2:50:43:60:2e:d3:21:de:c5:ba:ae:
49:41:4b:35:c7:84:6a:6b:60:6a:30:ec:3a:39:58:bb:60:8f:
ac:b5:0a:62:93:87:8b:ae:32:9b:68:1d:ff:9f:b0:30:22:21:
7b:3b:04:65:38:d0:d1:23:c0:e2:95:bf:2f:d7:b9:f0:26:4b:
59:0d:18:1c:91:53:ec:be:93:1f:90:17:0f:45:fa:3b:e3:be:
4e:43:44:bd:47:05:9a:6d:19:82:10:8f:a4:a1:8d:3e:a7:72:
09:71:fb:fe:33:79:45:48:1f:35:3e:70:b4:ff:8e:2f:75:ad:
f6:86:11:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:48:03 2025 by rpki-client