Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/7732c0-86fa-4e3a-b652-8c4c6405251e/1/vqTtMeEp6Vu17P2FdXyddNO-42g.mft
File: vqTtMeEp6Vu17P2FdXyddNO-42g.mft (raw, json)
Hash identifier: Qh6fUbMWZRmPYxrYhlLVlg31022DWWD9TdO3dQhvIYI=
Subject key identifier: CA:84:8C:1E:B5:D8:72:47:8A:6E:D3:B7:21:02:23:A1:FF:58:F6:A1
Authority key identifier: BE:A4:ED:31:E1:29:E9:5B:B5:EC:FD:85:75:7C:9D:74:D3:BE:E3:68
Certificate issuer: /CN=bea4ed31e129e95bb5ecfd85757c9d74d3bee368
Certificate serial: 01984A0A0F05B8E4ADEC0EC92B192B499D39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vqTtMeEp6Vu17P2FdXyddNO-42g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/7732c0-86fa-4e3a-b652-8c4c6405251e/1/vqTtMeEp6Vu17P2FdXyddNO-42g.mft
Manifest number: 09FC
Signing time: Sun 27 Jul 2025 04:00:29 +0000
Manifest this update: Sun 27 Jul 2025 04:00:29 +0000
Manifest next update: Mon 28 Jul 2025 04:00:29 +0000
Files and hashes: 1: vqTtMeEp6Vu17P2FdXyddNO-42g.crl (hash: b3I6yR7Np++I9jBv8cHei8ijyXdy6uWCEy5551NGHbo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/7732c0-86fa-4e3a-b652-8c4c6405251e/1/vqTtMeEp6Vu17P2FdXyddNO-42g.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/7732c0-86fa-4e3a-b652-8c4c6405251e/1/vqTtMeEp6Vu17P2FdXyddNO-42g.mft
rsync://rpki.ripe.net/repository/DEFAULT/vqTtMeEp6Vu17P2FdXyddNO-42g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 04:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:0a:0f:05:b8:e4:ad:ec:0e:c9:2b:19:2b:49:9d:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bea4ed31e129e95bb5ecfd85757c9d74d3bee368
Validity
Not Before: Jul 27 04:00:29 2025 GMT
Not After : Jul 28 04:00:29 2025 GMT
Subject: CN=ca848c1eb5d872478a6ed3b7210223a1ff58f6a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ec:73:cd:d4:2f:e9:29:6d:27:9a:e3:13:ec:
ed:14:8f:64:2c:8a:f2:08:61:73:39:e8:6b:2e:f8:
fc:b9:85:dc:ca:01:74:71:47:eb:fb:a5:cf:26:07:
c4:d6:01:b6:f4:d4:46:95:74:82:4f:31:25:d6:5f:
ac:9e:6f:c1:76:ba:7b:30:dd:fe:ae:6e:e9:59:d4:
26:36:de:81:da:ea:f7:47:98:2f:48:30:56:5d:1a:
1d:6d:c3:c8:5f:8d:38:ee:54:18:9b:b7:6a:e7:3e:
c2:95:56:9c:fb:0c:8a:ad:2d:80:97:22:3a:db:21:
76:13:fc:bb:68:40:41:00:88:f0:19:84:c0:bf:b6:
c2:42:b8:95:06:65:75:af:6f:7f:17:e8:f3:f3:f1:
c5:1d:4f:00:3e:73:dd:bb:78:0b:35:6c:36:ef:c4:
7c:2b:04:84:c9:dd:e7:9b:30:56:38:c8:15:1c:82:
dc:04:70:4a:ea:2f:cd:fe:35:56:8f:72:c2:c2:45:
65:ef:1f:6f:8f:3b:cb:d4:b3:fb:8c:fe:46:48:24:
bc:58:f6:04:05:8e:59:09:90:32:ea:6b:21:ee:ea:
c3:e6:58:b0:ff:4d:51:dc:8e:67:47:37:16:d2:e3:
e9:a4:9c:c8:fa:1b:bb:2c:e4:aa:c1:29:f4:47:ce:
cb:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:84:8C:1E:B5:D8:72:47:8A:6E:D3:B7:21:02:23:A1:FF:58:F6:A1
X509v3 Authority Key Identifier:
keyid:BE:A4:ED:31:E1:29:E9:5B:B5:EC:FD:85:75:7C:9D:74:D3:BE:E3:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqTtMeEp6Vu17P2FdXyddNO-42g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7732c0-86fa-4e3a-b652-8c4c6405251e/1/vqTtMeEp6Vu17P2FdXyddNO-42g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/7732c0-86fa-4e3a-b652-8c4c6405251e/1/vqTtMeEp6Vu17P2FdXyddNO-42g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:0d:9e:49:e3:c2:07:f3:51:38:02:41:d7:2f:f8:4c:a2:ff:
02:01:39:72:d6:4d:6b:e8:f4:48:e8:c5:0a:4a:37:b2:2d:ea:
d9:8f:4c:ce:f4:7c:ee:d8:4b:12:ac:26:9d:db:7a:14:43:3c:
da:02:32:ce:10:3e:ed:24:87:0f:4a:29:57:f3:63:5b:a7:ad:
40:72:eb:40:9a:eb:82:a9:25:e8:8a:56:a9:42:01:d1:22:59:
d6:c1:c6:57:52:68:4a:43:ca:e0:24:30:3c:0d:c8:59:7a:5e:
56:1a:bf:4b:29:50:94:be:6a:a5:f8:4e:d4:42:71:ce:71:d8:
9c:77:2e:09:7f:3b:42:d3:42:d4:eb:f9:42:99:47:66:d3:8a:
3c:40:88:e7:71:2c:50:2e:38:5a:13:05:f1:46:13:f8:1f:98:
60:84:bc:f9:c3:4c:81:07:33:74:82:08:a4:fb:11:a7:d6:ff:
0f:f1:3a:18:81:54:a4:ac:dd:fd:a7:39:20:15:9a:ca:c1:77:
4c:24:5a:04:b9:c8:78:11:bf:c4:74:b9:f6:98:30:40:b4:81:
2d:79:68:84:87:d3:67:65:fd:a3:4c:56:b6:4c:2a:39:42:51:
7a:0b:f1:1a:6d:7e:91:76:68:11:9b:ca:24:d5:14:4a:ac:c7:
b7:e2:e4:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:31:04 2025 by rpki-client