Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/90c5be-2f6e-4441-9461-3bd79ffc6398/1/vdQmL2QrG7C1Oyptd5jAiZ0eTUM.mft
File: vdQmL2QrG7C1Oyptd5jAiZ0eTUM.mft (raw, json)
Hash identifier: k57uUo258z62C2A+tZVnxe/atkrcTwr55iPaH05Bc3o=
Subject key identifier: F1:63:3C:16:0B:27:94:46:49:48:27:96:3A:09:25:68:BC:0C:ED:3A
Authority key identifier: BD:D4:26:2F:64:2B:1B:B0:B5:3B:2A:6D:77:98:C0:89:9D:1E:4D:43
Certificate issuer: /CN=bdd4262f642b1bb0b53b2a6d7798c0899d1e4d43
Certificate serial: 01993537B6FF8924FC573ABC3F497AD00589
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vdQmL2QrG7C1Oyptd5jAiZ0eTUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/90c5be-2f6e-4441-9461-3bd79ffc6398/1/vdQmL2QrG7C1Oyptd5jAiZ0eTUM.mft
Manifest number: 0BDF
Signing time: Wed 10 Sep 2025 20:01:07 +0000
Manifest this update: Wed 10 Sep 2025 20:01:07 +0000
Manifest next update: Thu 11 Sep 2025 20:01:07 +0000
Files and hashes: 1: 3Vc8GAv3OdpXw-IEwIeY1NxUP6c.roa (hash: qDWay94UtnkH+WvsjYkj9wPwpR3+5E60OgC2LXVgLK8=)
2: hj3e4V3BcXmmC3J4J-LR8jJvgpQ.roa (hash: ajCXRDGbAHENq7O0wMkVKgSnARDHbWRHh8qUlDNLW3k=)
3: o3kVjVR-Bk2kY6NJIMAGFLe8Jgw.roa (hash: RhEyDbo5nJOAevwisCtwUttff0SfpdFcDo7LzXQNDoo=)
4: vdQmL2QrG7C1Oyptd5jAiZ0eTUM.crl (hash: wQV8iggOWs2IaaXqM0X6AHZ/Bg9WzW7mZarIn+3tCEE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/90c5be-2f6e-4441-9461-3bd79ffc6398/1/vdQmL2QrG7C1Oyptd5jAiZ0eTUM.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/90c5be-2f6e-4441-9461-3bd79ffc6398/1/vdQmL2QrG7C1Oyptd5jAiZ0eTUM.mft
rsync://rpki.ripe.net/repository/DEFAULT/vdQmL2QrG7C1Oyptd5jAiZ0eTUM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 20:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:37:b6:ff:89:24:fc:57:3a:bc:3f:49:7a:d0:05:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdd4262f642b1bb0b53b2a6d7798c0899d1e4d43
Validity
Not Before: Sep 10 20:01:07 2025 GMT
Not After : Sep 11 20:01:07 2025 GMT
Subject: CN=f1633c160b279446494827963a092568bc0ced3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b3:2a:cf:ee:c6:ea:e9:77:32:2c:ea:9d:36:
64:27:b0:bf:36:96:08:20:53:b0:7b:50:da:d3:a5:
99:94:e2:c9:a6:43:14:4a:97:b7:32:90:19:80:d3:
d7:3e:68:96:8d:c9:4f:9a:f8:22:cb:8b:0e:df:6a:
11:e0:71:79:02:3a:5f:2a:74:4b:44:cd:58:7b:9d:
47:d4:b2:fe:8d:04:8d:52:38:da:81:a0:eb:7a:5b:
f7:4d:8a:ca:cc:6d:e9:29:34:ec:be:99:16:44:0d:
e6:99:2c:98:80:23:3c:04:cf:c3:4c:1b:b1:bc:04:
37:a1:91:79:4c:e3:c8:2f:b8:3f:c6:59:8e:b0:72:
f8:c3:95:60:7a:30:94:66:ea:be:71:c1:06:49:69:
20:0c:85:8d:53:9e:b0:d4:91:a8:c5:73:64:62:19:
6f:3d:16:3c:6b:ba:ea:9b:cb:29:c5:a0:ad:9f:18:
6a:cd:45:d2:8a:1f:3b:dd:83:83:f3:3a:76:e7:25:
40:53:c1:86:6f:d3:89:e6:a2:92:e7:ba:25:32:e9:
48:19:21:85:c5:55:a5:28:f0:92:b0:28:9c:8d:3f:
b9:e7:ec:76:c2:3d:4e:44:1c:30:03:ce:7d:4a:5d:
aa:19:6a:77:51:13:ba:31:b2:f6:82:61:78:79:2e:
a5:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:63:3C:16:0B:27:94:46:49:48:27:96:3A:09:25:68:BC:0C:ED:3A
X509v3 Authority Key Identifier:
keyid:BD:D4:26:2F:64:2B:1B:B0:B5:3B:2A:6D:77:98:C0:89:9D:1E:4D:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vdQmL2QrG7C1Oyptd5jAiZ0eTUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/90c5be-2f6e-4441-9461-3bd79ffc6398/1/vdQmL2QrG7C1Oyptd5jAiZ0eTUM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/90c5be-2f6e-4441-9461-3bd79ffc6398/1/vdQmL2QrG7C1Oyptd5jAiZ0eTUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:29:44:98:92:1a:c3:d9:14:c5:3a:48:ff:5e:de:a0:3f:6b:
ad:86:24:18:9c:82:16:eb:b2:13:7e:ec:55:5a:bd:ea:6b:7c:
ec:13:af:0e:2f:29:4c:1f:8b:19:d8:6c:2f:9f:6d:1e:fe:38:
13:a6:24:30:9e:70:b8:01:3d:7d:00:f1:87:00:b4:fe:48:4b:
3e:6c:5d:25:59:49:12:06:5f:8d:e5:cf:71:5a:20:46:63:f9:
12:15:af:ed:a2:7b:a9:75:a5:84:90:43:35:eb:c9:ab:f3:22:
c0:e8:5f:7b:c0:12:21:4f:19:37:7d:3a:f4:d9:ce:3f:32:b8:
5e:e5:95:af:83:3a:33:d2:d6:82:bc:27:09:f0:be:2b:18:81:
fb:03:5f:0f:5a:48:d8:54:8b:b8:c4:08:08:19:f5:59:61:df:
7b:0e:f7:e1:57:05:a0:62:21:58:f7:d7:aa:43:f5:46:9c:fe:
c3:d4:15:2d:a8:a8:6e:8b:17:d7:dd:73:ad:b3:32:51:f6:1e:
23:ab:8f:e7:09:91:f1:ae:b2:c0:85:a5:25:6d:fb:ee:5b:e7:
7b:58:46:29:36:da:56:2e:1b:73:69:33:c2:37:ed:0e:9b:9d:
60:c7:07:bd:f3:6f:df:d4:ae:5e:48:0b:ea:c9:66:73:43:82:
ad:a4:34:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 22:52:49 2025 by rpki-client