Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/9398b0-2fbb-4bd3-b9bc-1e89f9695d1b/1/VAQZQbFFDWuVtYyj8HfOII39-0s.mft
File: VAQZQbFFDWuVtYyj8HfOII39-0s.mft (raw, json)
Hash identifier: KnTzf9u6nDd6pj/WhyGAOD8VNJU99RiVQY+SoAwO3BA=
Subject key identifier: 99:4C:0F:0E:42:10:DF:FF:21:52:A4:A7:CC:3A:F0:5E:61:A9:49:85
Authority key identifier: 54:04:19:41:B1:45:0D:6B:95:B5:8C:A3:F0:77:CE:20:8D:FD:FB:4B
Certificate issuer: /CN=54041941b1450d6b95b58ca3f077ce208dfdfb4b
Certificate serial: 019842F55ED2EEC71304B94612BAEEB05B6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VAQZQbFFDWuVtYyj8HfOII39-0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/9398b0-2fbb-4bd3-b9bc-1e89f9695d1b/1/VAQZQbFFDWuVtYyj8HfOII39-0s.mft
Manifest number: 06A2
Signing time: Fri 25 Jul 2025 19:00:33 +0000
Manifest this update: Fri 25 Jul 2025 19:00:33 +0000
Manifest next update: Sat 26 Jul 2025 19:00:33 +0000
Files and hashes: 1: VAQZQbFFDWuVtYyj8HfOII39-0s.crl (hash: RhXVHd3Jd96Y2U6yT1YxHo1LzHdwBWM/zWGR18IoVjY=)
2: _kct8kIbVboNtXmwY3sBZtxcNtM.roa (hash: T6JpWQH7nutNbYZnSGugyuq7ObfBwtPlbYrmzm3m20w=)
3: khPPmPdFt5NSW2cXj9IsrNyyMNA.roa (hash: YSUlml94r6G6gJB4NeI+X3NQi5Phdn1YlU4xpfbkY7I=)
4: ttIMVm2Qx6d-SaNfus5CP2PiSww.roa (hash: GIzKFX6ewkeY9UKKD+c3WgJblzIfMp9efYS5dFXHsaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/9398b0-2fbb-4bd3-b9bc-1e89f9695d1b/1/VAQZQbFFDWuVtYyj8HfOII39-0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/9398b0-2fbb-4bd3-b9bc-1e89f9695d1b/1/VAQZQbFFDWuVtYyj8HfOII39-0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/VAQZQbFFDWuVtYyj8HfOII39-0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 16:25:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:42:f5:5e:d2:ee:c7:13:04:b9:46:12:ba:ee:b0:5b:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54041941b1450d6b95b58ca3f077ce208dfdfb4b
Validity
Not Before: Jul 25 19:00:33 2025 GMT
Not After : Jul 26 19:00:33 2025 GMT
Subject: CN=994c0f0e4210dfff2152a4a7cc3af05e61a94985
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ac:fa:dd:19:26:a0:67:1d:08:9e:66:37:7f:
4b:92:a8:fe:0b:78:97:af:2d:12:42:65:37:b9:9e:
c0:44:da:fe:15:c0:c1:b2:48:ee:ee:0d:58:6e:96:
e9:5e:6b:ac:54:73:08:81:10:43:2d:4d:f9:63:6a:
8d:8c:5f:ef:01:bd:35:17:e1:04:ad:4b:30:45:ef:
9b:2e:c0:57:b1:d1:ec:17:23:0c:5a:24:49:fd:96:
1e:be:41:51:6f:21:3f:df:48:97:5f:16:48:de:e9:
03:c4:5b:81:87:6e:03:b6:f1:7d:7f:61:4e:62:5b:
28:3d:aa:21:69:75:32:e7:f6:cd:4e:38:d6:62:31:
74:0e:af:4f:30:54:8a:43:de:43:08:29:0c:b3:b8:
b0:71:82:e9:ea:78:d7:ef:77:0d:39:88:b6:57:f3:
c0:ad:d0:62:d9:7f:47:de:e8:f5:35:3a:b7:66:72:
e2:3b:6f:e8:c1:c3:62:ba:1b:bf:c0:16:59:2f:fd:
b5:57:32:96:70:5f:bc:d0:b1:e0:77:ee:bc:85:25:
29:90:c1:4f:24:51:c4:d7:4c:e1:e4:f5:5e:39:f5:
0d:2c:64:4e:18:e2:58:3e:31:4c:6a:00:fd:da:d4:
67:5a:d5:0b:72:13:8f:2b:44:1d:a4:7a:93:f7:53:
c8:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:4C:0F:0E:42:10:DF:FF:21:52:A4:A7:CC:3A:F0:5E:61:A9:49:85
X509v3 Authority Key Identifier:
keyid:54:04:19:41:B1:45:0D:6B:95:B5:8C:A3:F0:77:CE:20:8D:FD:FB:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VAQZQbFFDWuVtYyj8HfOII39-0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/9398b0-2fbb-4bd3-b9bc-1e89f9695d1b/1/VAQZQbFFDWuVtYyj8HfOII39-0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/9398b0-2fbb-4bd3-b9bc-1e89f9695d1b/1/VAQZQbFFDWuVtYyj8HfOII39-0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:69:3d:66:4a:6d:59:20:2c:f2:5b:3d:4f:6c:5e:c5:2d:80:
29:b1:63:dc:5d:43:f1:8d:8e:b8:06:dd:20:2b:b4:bc:54:ff:
c5:26:f8:39:69:59:c7:c4:d2:15:e6:74:a2:bd:f6:19:09:e2:
36:5d:d4:c1:a7:a9:09:a2:95:2b:91:fc:c6:60:5a:ca:fd:22:
f9:d7:43:59:b1:88:f2:61:bc:65:c0:f3:57:42:99:c7:08:42:
1b:08:6b:fc:bb:de:fc:5b:7a:58:c8:65:a3:c7:c5:63:ac:9c:
ef:5d:ff:32:2d:0b:83:f9:36:99:3f:72:73:28:3c:29:78:d1:
6d:60:95:7c:93:b1:ca:0f:18:fa:8b:f5:a5:8d:91:8e:8a:8c:
c6:5d:17:d0:97:2a:f6:a7:fb:60:75:a6:3c:3b:17:79:ee:db:
49:19:b9:4d:72:2f:2e:d2:18:b0:8e:b6:a5:95:0e:a1:61:13:
ff:4e:a7:1f:cc:0a:01:f5:5e:d3:a4:1d:17:89:a8:44:c7:27:
69:1b:0c:97:2d:52:26:f2:1b:89:90:fc:6a:9b:8e:02:d9:e3:
22:d4:6c:9d:3c:3d:e0:7a:5e:f9:77:af:4f:c9:49:04:90:31:
b1:cc:0e:ed:55:ed:d7:43:20:c8:cb:04:41:e4:61:0e:99:aa:
a8:63:bb:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 22:36:49 2025 by rpki-client