Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/9b50bf-4fbf-4680-8328-130f7f38f537/1/VvAaHpnqXU85lNMzCdCUMS3IVCc.mft
File: VvAaHpnqXU85lNMzCdCUMS3IVCc.mft (raw, json)
Hash identifier: ImlSQdRosNBLnXw4TzZfhNO8puQ3lNVLXNdfQ7iKD0Q=
Subject key identifier: 38:3D:01:48:52:B7:21:07:DA:6F:F7:04:46:5B:4A:C9:C6:F0:B5:21
Authority key identifier: 56:F0:1A:1E:99:EA:5D:4F:39:94:D3:33:09:D0:94:31:2D:C8:54:27
Certificate issuer: /CN=56f01a1e99ea5d4f3994d33309d094312dc85427
Certificate serial: 019922C2ED527690AB74C0B1E7595D045CE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VvAaHpnqXU85lNMzCdCUMS3IVCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/9b50bf-4fbf-4680-8328-130f7f38f537/1/VvAaHpnqXU85lNMzCdCUMS3IVCc.mft
Manifest number: 0304
Signing time: Sun 07 Sep 2025 06:00:23 +0000
Manifest this update: Sun 07 Sep 2025 06:00:23 +0000
Manifest next update: Mon 08 Sep 2025 06:00:23 +0000
Files and hashes: 1: VvAaHpnqXU85lNMzCdCUMS3IVCc.crl (hash: N2dRqFxddkYnOS4xwsrTIrYKoCvpJxm5r79b1Z44sYw=)
2: v_KzQYlvsCBO_i8yYO8HLxZWeDc.roa (hash: +uoQdMzOaHRMGuVFuouzf8EBLpuGaYxtN4+0W2dukzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/9b50bf-4fbf-4680-8328-130f7f38f537/1/VvAaHpnqXU85lNMzCdCUMS3IVCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/9b50bf-4fbf-4680-8328-130f7f38f537/1/VvAaHpnqXU85lNMzCdCUMS3IVCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/VvAaHpnqXU85lNMzCdCUMS3IVCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c2:ed:52:76:90:ab:74:c0:b1:e7:59:5d:04:5c:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56f01a1e99ea5d4f3994d33309d094312dc85427
Validity
Not Before: Sep 7 06:00:23 2025 GMT
Not After : Sep 8 06:00:23 2025 GMT
Subject: CN=383d014852b72107da6ff704465b4ac9c6f0b521
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c9:63:2a:6f:87:fe:7b:6b:c0:23:98:f1:5e:
c4:9d:8e:15:ab:27:dc:6c:9b:41:59:74:22:55:82:
7c:7f:31:19:36:35:a0:07:36:2c:37:61:7f:3a:0f:
58:b6:bf:8b:cd:97:d1:13:9d:f1:e5:ba:c8:3a:eb:
b0:e1:46:77:25:b1:4d:29:cf:c6:18:b3:f5:19:3b:
e0:51:a9:87:24:fe:ba:9e:e4:ca:34:42:5c:54:9a:
3a:89:c1:1d:56:05:3c:05:c1:1f:a5:5f:7e:8d:91:
26:30:b5:74:43:83:3a:09:48:9b:57:f2:da:e7:88:
56:d9:dd:11:04:7a:04:85:3b:ff:71:d0:de:d7:5c:
7a:03:86:40:94:7c:cd:ea:41:b9:01:4c:6b:33:bc:
97:21:94:f3:8a:da:2f:c5:e3:a8:f5:ea:25:17:6d:
86:fe:16:e4:31:82:fe:d0:3f:39:ce:84:33:96:7f:
0a:08:58:4a:87:1c:1e:09:7a:4b:2b:dd:69:cf:90:
a5:ea:fb:87:99:f5:f6:1e:44:8d:e6:eb:58:76:1d:
49:af:3c:7d:f8:18:38:a6:31:0f:b2:ba:50:58:8a:
76:25:5f:7a:2e:18:34:ce:40:07:f3:96:30:88:5b:
67:9a:b7:37:4d:39:84:ea:22:1b:ac:c3:07:e9:3f:
b2:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:3D:01:48:52:B7:21:07:DA:6F:F7:04:46:5B:4A:C9:C6:F0:B5:21
X509v3 Authority Key Identifier:
keyid:56:F0:1A:1E:99:EA:5D:4F:39:94:D3:33:09:D0:94:31:2D:C8:54:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VvAaHpnqXU85lNMzCdCUMS3IVCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/9b50bf-4fbf-4680-8328-130f7f38f537/1/VvAaHpnqXU85lNMzCdCUMS3IVCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/9b50bf-4fbf-4680-8328-130f7f38f537/1/VvAaHpnqXU85lNMzCdCUMS3IVCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:c6:4c:64:58:78:74:69:64:23:8e:3b:3b:12:0d:f9:9d:6d:
ca:1e:a5:b2:d0:96:86:b1:68:13:8b:ba:a2:e1:dd:0d:97:d5:
1f:0b:66:64:2c:74:95:3a:21:fd:2b:56:0e:0b:df:db:6e:91:
33:06:d4:24:94:d5:d7:59:58:49:38:7d:ef:38:ce:b1:2b:f0:
c3:dc:7e:f9:04:38:de:65:e3:69:d0:d8:77:8f:a7:7f:8e:89:
19:2c:bc:13:ef:94:52:d0:8b:37:be:6e:e1:9c:be:56:fd:1b:
9a:be:de:2c:00:2e:e7:da:28:74:a4:f9:31:5f:49:0c:f8:a7:
d0:20:c3:ed:43:fa:c2:96:d5:f9:63:3d:52:6d:9a:0c:a7:34:
d6:92:e9:1c:2b:e5:6e:c0:04:9b:41:d6:cb:d3:65:a7:2e:28:
08:f3:fa:ac:ee:28:43:83:af:bf:b4:08:7b:b9:d3:d2:64:c9:
d3:2c:30:f3:1c:3b:ac:db:0e:b3:f1:fe:2b:ff:d3:48:d4:6f:
0d:ca:7c:bb:e0:bc:6d:46:0a:7e:f9:4c:43:df:b6:31:a5:24:
97:3c:18:43:63:a3:64:6e:be:32:76:5f:99:f2:4a:c7:a6:61:
63:45:0c:99:7b:34:b2:28:b2:9e:83:b9:f0:56:f9:0f:bb:f0:
99:a1:e2:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:25:52 2025 by rpki-client