Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/fdffe3-010f-4c6a-bd96-718b8c7c9335/1/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.mft
File: Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.mft (raw, json)
Hash identifier: tJ9AOudN2CVCHuMC+s99ebZxOUpvCY49tEQKNx0AxLA=
Subject key identifier: DB:CC:9A:5E:4C:09:49:E6:02:D9:9E:73:A9:E7:60:66:7A:19:3E:9B
Authority key identifier: 56:AD:9B:2C:22:7B:41:3C:50:58:13:29:4F:AA:DB:6D:BB:C2:DD:66
Certificate issuer: /CN=56ad9b2c227b413c505813294faadb6dbbc2dd66
Certificate serial: 01982E932DBB386BB5E1C0EC1875CE286233
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/fdffe3-010f-4c6a-bd96-718b8c7c9335/1/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.mft
Manifest number: 0AAE
Signing time: Mon 21 Jul 2025 20:00:54 +0000
Manifest this update: Mon 21 Jul 2025 20:00:54 +0000
Manifest next update: Tue 22 Jul 2025 20:00:54 +0000
Files and hashes: 1: Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.crl (hash: HAppxkg3DJxRuLA+3A376iXu2Hu/JZyCHdtZw4JFj8E=)
2: Vz7t1xxZS7Y8mi76AGQLhqb1ZQs.roa (hash: f5Op16EAB77dhVLhwIcxz3vKwaJVulfI7NYLkrJ/rQU=)
3: reLkqggetUctFOKXfyoXX7VB7AA.roa (hash: mWj2m9BfD30uCVlB2O3NlLuI0ufXtR+chyS8T5aSe4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/fdffe3-010f-4c6a-bd96-718b8c7c9335/1/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/fdffe3-010f-4c6a-bd96-718b8c7c9335/1/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Jul 2025 20:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:2e:93:2d:bb:38:6b:b5:e1:c0:ec:18:75:ce:28:62:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56ad9b2c227b413c505813294faadb6dbbc2dd66
Validity
Not Before: Jul 21 20:00:54 2025 GMT
Not After : Jul 22 20:00:54 2025 GMT
Subject: CN=dbcc9a5e4c0949e602d99e73a9e760667a193e9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:cc:2c:69:71:d7:31:cd:54:c3:86:c3:f6:ec:
7b:91:9a:18:ce:70:76:49:d9:49:b4:70:3c:28:f0:
f3:7a:f9:af:bc:06:15:aa:77:35:b5:ae:8e:44:eb:
5d:12:21:48:f6:21:0f:0c:d3:ae:3a:e7:ca:c2:e3:
d4:60:78:cb:78:27:c9:70:c2:b8:48:85:ca:17:f3:
63:1c:0f:32:4b:be:95:30:dc:27:a7:a6:be:1e:07:
a4:b3:1b:01:bc:f4:9e:3e:2c:54:ad:5b:a2:4e:ce:
47:9a:9d:de:2b:8a:75:04:85:75:c9:df:b5:47:ab:
31:1a:35:a1:40:95:0e:ca:22:11:49:ac:26:d3:57:
58:75:96:06:75:e8:ce:29:da:04:11:a4:b4:ca:6d:
07:73:f7:d9:84:64:4f:0f:6d:d2:96:21:8a:10:ea:
a5:b7:c6:ed:41:e5:2c:7d:eb:b5:cb:cf:7b:48:87:
b2:23:d1:fa:48:62:f1:cf:60:ac:77:96:07:93:70:
db:bd:6e:e7:29:21:92:91:fa:1b:26:3b:6f:2e:78:
c7:08:d4:6f:d3:bd:f0:97:30:83:24:8b:22:f2:a2:
d0:e3:e7:ae:80:8a:a1:f4:d5:76:8d:01:c8:d3:5b:
ed:d9:79:eb:3c:e3:a8:95:95:02:cc:a9:67:1f:32:
3a:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:CC:9A:5E:4C:09:49:E6:02:D9:9E:73:A9:E7:60:66:7A:19:3E:9B
X509v3 Authority Key Identifier:
keyid:56:AD:9B:2C:22:7B:41:3C:50:58:13:29:4F:AA:DB:6D:BB:C2:DD:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/fdffe3-010f-4c6a-bd96-718b8c7c9335/1/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/fdffe3-010f-4c6a-bd96-718b8c7c9335/1/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:87:0f:ac:2d:fa:8a:c6:eb:81:58:67:ca:63:7c:88:28:6a:
c2:60:c6:e0:9d:0b:ef:eb:2f:88:5a:cf:98:40:e1:33:2e:34:
71:2b:e1:bc:e2:4d:b7:a1:74:10:d1:a4:af:3e:08:97:e5:30:
97:c3:f9:d9:43:30:90:b7:38:56:a6:39:46:d4:8b:8e:bc:52:
7a:e1:da:a9:90:77:77:bc:82:eb:18:ca:f9:d0:c1:2a:2e:b1:
8e:5f:c2:f3:de:2f:e3:b5:5f:0f:69:fd:92:93:7b:e2:f0:6f:
64:9e:2e:8f:1e:1d:8a:e6:0d:d4:a2:84:56:21:f6:40:ba:3e:
13:fe:96:68:9d:00:c6:33:04:92:48:a0:cc:47:a1:71:7e:31:
7a:cb:01:8a:6f:ad:57:ce:44:63:13:fc:5f:61:cf:88:56:a3:
03:39:4f:21:f1:d4:07:1f:7e:9b:b3:0c:00:ae:05:41:ae:5b:
2a:b6:b1:d1:73:35:d6:83:ad:b1:40:f8:fa:3e:32:1a:1b:50:
de:3e:42:bd:33:9c:10:ce:94:5d:4f:90:fd:5f:53:ed:f1:9b:
25:1e:a5:81:a2:b4:ab:56:41:4c:ee:7d:3b:81:21:a1:67:48:
cb:22:36:99:bb:0b:f6:02:36:61:e4:2b:94:b2:11:94:38:71:
a3:1b:0d:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 04:58:24 2025 by rpki-client