Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/41c111-6505-41a4-9e67-3b91ff9a1acd/1/vqe2d3e5poMpM1dkl7RqmxYwTNk.mft
File: vqe2d3e5poMpM1dkl7RqmxYwTNk.mft (raw, json)
Hash identifier: c0k4QrfXGNMck+WLC0PwhfWcSVVFxR0T7b+OlMQY57w=
Subject key identifier: AA:9F:A2:AB:53:99:E0:94:40:69:50:B6:20:02:71:89:45:AD:A3:B4
Authority key identifier: BE:A7:B6:77:77:B9:A6:83:29:33:57:64:97:B4:6A:9B:16:30:4C:D9
Certificate issuer: /CN=bea7b67777b9a6832933576497b46a9b16304cd9
Certificate serial: 019847091BDF534E547F876FEAC9BB9365F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vqe2d3e5poMpM1dkl7RqmxYwTNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/41c111-6505-41a4-9e67-3b91ff9a1acd/1/vqe2d3e5poMpM1dkl7RqmxYwTNk.mft
Manifest number: 1441
Signing time: Sat 26 Jul 2025 14:00:35 +0000
Manifest this update: Sat 26 Jul 2025 14:00:35 +0000
Manifest next update: Sun 27 Jul 2025 14:00:35 +0000
Files and hashes: 1: sf1KX3-278D909_VQvgz_1jkfVI.roa (hash: zN2i6GvyNGlDViFzbVFFZ6ISLkchZMIvYNFAKpwZnH0=)
2: vqe2d3e5poMpM1dkl7RqmxYwTNk.crl (hash: 89khXvt55nuCZdvuOIAeeGWDaUXaIzLgGSDKqRk7avI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/41c111-6505-41a4-9e67-3b91ff9a1acd/1/vqe2d3e5poMpM1dkl7RqmxYwTNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/41c111-6505-41a4-9e67-3b91ff9a1acd/1/vqe2d3e5poMpM1dkl7RqmxYwTNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vqe2d3e5poMpM1dkl7RqmxYwTNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:09:1b:df:53:4e:54:7f:87:6f:ea:c9:bb:93:65:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bea7b67777b9a6832933576497b46a9b16304cd9
Validity
Not Before: Jul 26 14:00:35 2025 GMT
Not After : Jul 27 14:00:35 2025 GMT
Subject: CN=aa9fa2ab5399e094406950b62002718945ada3b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:82:5f:c0:e8:71:7f:08:2a:1e:48:94:d9:ca:
98:83:de:bc:4b:3a:eb:d0:7e:05:1b:c0:44:cb:6a:
00:7e:57:a8:c8:ea:2b:12:e8:17:d2:5b:49:7b:fd:
af:0f:7e:a2:18:61:57:f7:93:56:16:d5:64:95:31:
c5:3a:21:d2:fb:8c:5d:e2:14:d7:ab:04:72:4e:85:
be:48:50:87:41:b6:ac:e0:1c:e4:84:0f:82:7e:d8:
12:eb:3b:74:96:c6:18:69:79:af:2a:2a:bb:6f:2c:
b9:32:61:94:9c:b0:b9:4d:cd:bb:91:89:b0:57:a2:
25:89:67:cb:bb:28:a8:cd:c4:d0:76:50:5d:ab:97:
95:02:44:66:49:4b:33:5a:81:d5:c5:5e:be:2e:56:
af:b3:d8:58:94:31:28:1a:e9:2f:e0:81:1c:e9:b2:
37:f1:82:f8:37:d9:dc:dd:4d:c7:74:cd:4e:37:76:
a5:47:45:28:6f:11:d9:28:dc:28:56:36:c6:56:3b:
e5:29:29:5b:a6:84:72:05:ae:d9:5f:7c:12:7f:21:
9c:d7:3a:f6:3f:95:16:75:df:f6:1b:70:10:1c:af:
53:25:1e:89:a3:17:03:ec:3e:42:f5:c0:48:ba:26:
95:34:24:16:48:91:f5:15:60:31:f3:da:dc:83:a9:
bf:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:9F:A2:AB:53:99:E0:94:40:69:50:B6:20:02:71:89:45:AD:A3:B4
X509v3 Authority Key Identifier:
keyid:BE:A7:B6:77:77:B9:A6:83:29:33:57:64:97:B4:6A:9B:16:30:4C:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqe2d3e5poMpM1dkl7RqmxYwTNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/41c111-6505-41a4-9e67-3b91ff9a1acd/1/vqe2d3e5poMpM1dkl7RqmxYwTNk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/41c111-6505-41a4-9e67-3b91ff9a1acd/1/vqe2d3e5poMpM1dkl7RqmxYwTNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:c5:98:c9:d0:07:1f:35:f2:7d:fa:79:d9:99:9b:6f:e1:4d:
b7:5c:6c:11:b5:f5:7e:f1:ba:4f:27:52:c1:5d:d0:4a:ae:c0:
e1:55:09:85:0d:de:36:b6:2d:0d:4a:c4:34:78:2b:f4:a1:1a:
65:8c:16:00:de:8b:50:9c:aa:75:51:84:6a:7b:5b:37:78:22:
1a:f7:93:6f:e3:90:b3:fa:cc:d0:24:08:90:25:2d:b3:e1:0e:
c6:60:be:72:a5:e3:c2:e6:0a:9e:b9:e7:06:26:04:9c:d4:56:
e5:7b:05:6f:a8:39:bf:80:76:af:e0:f1:00:b8:71:3c:76:08:
cc:db:0d:a7:c1:88:a7:a1:c5:da:9e:c8:12:48:8c:48:11:92:
5e:25:1f:3a:38:39:a3:77:d4:c2:6c:69:de:9f:a1:f3:33:59:
e3:8c:12:d9:81:89:f9:8d:bb:07:de:02:73:4a:0d:15:ee:60:
f3:a1:31:27:f7:9e:3c:75:19:c1:a8:59:63:0f:bc:76:0c:ee:
c5:9f:b1:a1:c5:d5:52:f4:84:07:31:72:41:36:e5:5a:5b:b8:
45:3c:6e:b4:11:ad:14:80:47:75:5b:1e:36:e5:4c:eb:5c:3e:
49:2d:26:e6:bf:15:81:08:51:d0:5d:54:1a:0e:b2:75:ab:fc:
22:3a:4a:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:23:21 2025 by rpki-client