Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/8809dd-667a-4047-8104-de58698b6470/1/VqSYe_jGtM3WV7vC0KXhPptibLk.mft
File: VqSYe_jGtM3WV7vC0KXhPptibLk.mft (raw, json)
Hash identifier: I/X/n3RT+J7lIvN8PeGz+U8vnUf4hgZNEULQfKe2m5Q=
Subject key identifier: E7:A6:F8:B9:14:FF:C7:56:93:35:E1:10:76:9D:5C:5F:06:FE:E6:70
Authority key identifier: 56:A4:98:7B:F8:C6:B4:CD:D6:57:BB:C2:D0:A5:E1:3E:9B:62:6C:B9
Certificate issuer: /CN=56a4987bf8c6b4cdd657bbc2d0a5e13e9b626cb9
Certificate serial: 01992255B55E6EE18A56D1EA387EAC2719FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VqSYe_jGtM3WV7vC0KXhPptibLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/8809dd-667a-4047-8104-de58698b6470/1/VqSYe_jGtM3WV7vC0KXhPptibLk.mft
Manifest number: 1385
Signing time: Sun 07 Sep 2025 04:01:06 +0000
Manifest this update: Sun 07 Sep 2025 04:01:06 +0000
Manifest next update: Mon 08 Sep 2025 04:01:06 +0000
Files and hashes: 1: VqSYe_jGtM3WV7vC0KXhPptibLk.crl (hash: JmiZPQCUlyF0fZU8kOLeNfj7PfKR3eOkMpWvDsIwWjQ=)
2: jgA5-5m0UyuVWgnFyZNbLCOK9IQ.roa (hash: t5mhCTyUTy/bCRhrh8vt6CByWx1LXqZrxP4nWUFmAaA=)
3: nE_QwfUitMo59_GeTHUAGFmWaiU.roa (hash: t2Bgep4Co0ormJSkeJVCqufRE/GNmyY6yFg8KbHeDM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/8809dd-667a-4047-8104-de58698b6470/1/VqSYe_jGtM3WV7vC0KXhPptibLk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/8809dd-667a-4047-8104-de58698b6470/1/VqSYe_jGtM3WV7vC0KXhPptibLk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VqSYe_jGtM3WV7vC0KXhPptibLk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:b5:5e:6e:e1:8a:56:d1:ea:38:7e:ac:27:19:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56a4987bf8c6b4cdd657bbc2d0a5e13e9b626cb9
Validity
Not Before: Sep 7 04:01:06 2025 GMT
Not After : Sep 8 04:01:06 2025 GMT
Subject: CN=e7a6f8b914ffc7569335e110769d5c5f06fee670
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:d1:9a:00:9c:35:15:bd:f3:79:b6:b8:5a:fd:
3c:6e:b1:a8:55:f8:6b:78:27:e6:ea:2b:30:be:8c:
77:62:73:01:76:b6:00:05:2d:05:02:d7:4a:91:45:
58:d4:ce:d9:c2:ee:1f:e5:72:6d:8e:d5:fd:fc:54:
b6:b4:88:b0:0f:0f:0d:ef:9d:b8:9d:91:4b:30:d1:
f5:e0:a1:80:05:4d:fd:be:df:1d:c1:de:83:d9:f6:
2b:a0:e8:9e:7b:dc:3f:bf:f6:18:0f:ef:1d:8f:b5:
3d:21:42:37:ef:66:a3:44:f8:89:4b:1d:53:36:4f:
c6:23:e2:90:e5:29:50:14:ef:9d:af:3f:d8:c8:56:
31:63:ce:4e:6c:b5:b1:64:a5:5a:13:54:a8:14:4f:
f6:f5:9a:2b:f0:6d:ed:b2:e8:7e:0f:d3:41:c5:35:
26:3c:f5:4e:ab:d4:59:3e:81:28:07:51:8d:f1:3c:
1c:4a:ff:54:87:b9:2c:72:91:6f:10:1f:c6:de:13:
8a:bb:c5:99:2d:fa:89:5d:4a:39:19:23:65:59:17:
6e:54:ee:65:ef:64:b6:3a:d0:c4:1a:5e:ac:fb:f9:
b2:f3:98:e0:9a:28:81:7b:61:85:ad:04:e2:50:29:
a0:c8:64:3b:65:64:8e:2a:9e:5c:20:72:b8:9c:e0:
87:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:A6:F8:B9:14:FF:C7:56:93:35:E1:10:76:9D:5C:5F:06:FE:E6:70
X509v3 Authority Key Identifier:
keyid:56:A4:98:7B:F8:C6:B4:CD:D6:57:BB:C2:D0:A5:E1:3E:9B:62:6C:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VqSYe_jGtM3WV7vC0KXhPptibLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/8809dd-667a-4047-8104-de58698b6470/1/VqSYe_jGtM3WV7vC0KXhPptibLk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/8809dd-667a-4047-8104-de58698b6470/1/VqSYe_jGtM3WV7vC0KXhPptibLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:bf:25:99:10:f7:0b:e7:d3:9e:7b:31:81:c3:4b:22:b6:ff:
44:5d:2e:b2:d9:72:bf:1e:20:26:8c:75:fd:81:bc:71:8e:a7:
08:de:03:66:7b:21:c4:c1:2e:3c:8d:b0:12:46:91:07:a7:8d:
4b:54:29:1d:16:ce:8a:e4:49:21:b3:cc:d2:43:ff:22:ba:f7:
f8:67:e3:b3:db:76:f1:6d:54:73:50:09:f7:8d:37:60:c2:7f:
e0:c7:24:35:4c:fc:17:ea:1d:6e:62:4e:01:3d:ea:37:8d:36:
20:d8:14:a8:71:29:dd:45:46:a2:7d:50:f4:50:21:ac:6b:de:
2c:99:b9:eb:02:7c:6d:d4:f2:16:b6:f7:43:1e:86:d9:23:eb:
0b:b6:fb:9c:25:68:ac:23:3b:7a:a0:6d:a2:f0:69:3a:31:1d:
95:fc:7b:8c:7e:c1:27:d3:8f:ba:4d:4c:99:81:fe:06:78:0c:
a6:72:2f:08:14:c9:49:46:20:ea:bf:1e:24:71:3a:e9:98:18:
65:d8:0f:f6:93:88:9f:95:a1:8c:04:d6:6b:9b:b3:c8:90:a5:
57:a3:03:fb:7f:b3:8c:ea:64:69:84:31:3d:15:e8:3a:8f:8d:
58:01:83:47:71:e8:c3:63:6d:e5:f4:f2:d9:77:c3:3e:9c:31:
a7:2b:2a:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:22:00 2025 by rpki-client