Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/aedb03-b04c-4212-813b-ff25ba599031/1/VQt8DIuuYQ9-UZwEhaR3O860jas.mft
File: VQt8DIuuYQ9-UZwEhaR3O860jas.mft (raw, json)
Hash identifier: uAGx5tHO4y3drsPwp8HTFZbs1b5ebPpHR6jhVKd/CYo=
Subject key identifier: CE:76:8E:23:AF:49:5D:66:F9:ED:97:2E:CD:29:56:3D:35:0E:86:52
Authority key identifier: 55:0B:7C:0C:8B:AE:61:0F:7E:51:9C:04:85:A4:77:3B:CE:B4:8D:AB
Certificate issuer: /CN=550b7c0c8bae610f7e519c0485a4773bceb48dab
Certificate serial: 01992F363240463EDBE04F7A1BDF9E0E4165
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VQt8DIuuYQ9-UZwEhaR3O860jas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/aedb03-b04c-4212-813b-ff25ba599031/1/VQt8DIuuYQ9-UZwEhaR3O860jas.mft
Manifest number: 167B
Signing time: Tue 09 Sep 2025 16:01:44 +0000
Manifest this update: Tue 09 Sep 2025 16:01:44 +0000
Manifest next update: Wed 10 Sep 2025 16:01:44 +0000
Files and hashes: 1: 3qH8ZS9wbp4ZckrapmstLsBtl4U.roa (hash: 15PfLViKUV8ieAONMSTBZ+uuNJdfqoHQHR26dEyF8eQ=)
2: 5puypGdPqGafWp1AyvNSb1EuBNw.roa (hash: qaaid804rsK3hU7FOxciCy5ptxREK/wMCBWzAUs6cK0=)
3: VQt8DIuuYQ9-UZwEhaR3O860jas.crl (hash: HQcrz9Dd4Dl4A9uDHhW0QMMvdAPic7f5UnSIJTJfC3o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/aedb03-b04c-4212-813b-ff25ba599031/1/VQt8DIuuYQ9-UZwEhaR3O860jas.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/aedb03-b04c-4212-813b-ff25ba599031/1/VQt8DIuuYQ9-UZwEhaR3O860jas.mft
rsync://rpki.ripe.net/repository/DEFAULT/VQt8DIuuYQ9-UZwEhaR3O860jas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 16:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2f:36:32:40:46:3e:db:e0:4f:7a:1b:df:9e:0e:41:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=550b7c0c8bae610f7e519c0485a4773bceb48dab
Validity
Not Before: Sep 9 16:01:44 2025 GMT
Not After : Sep 10 16:01:44 2025 GMT
Subject: CN=ce768e23af495d66f9ed972ecd29563d350e8652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:df:f7:52:ac:56:7c:0d:5c:5d:0e:f7:a1:51:
d7:ff:a5:3c:0a:80:66:73:6d:d0:ea:7a:27:fc:c8:
40:cf:60:91:39:c3:93:90:b0:10:61:d6:fa:74:4c:
67:03:d3:55:ed:82:1e:1d:0b:d5:d9:1a:9e:f8:4a:
8e:74:5a:e6:c8:c0:af:9f:07:f0:ec:e7:d9:ad:3f:
99:e4:47:45:22:0a:89:d4:ce:5f:52:d2:5f:29:da:
4e:29:bd:4d:fc:d3:76:c7:6b:0c:46:59:96:db:5e:
b9:ad:6f:a5:e7:1f:cb:3a:ae:2d:d6:4d:43:5c:a2:
ec:25:6a:1b:ce:12:c0:5d:61:43:bc:b3:47:f4:7c:
fc:91:89:43:45:76:1b:ec:b0:fc:86:a2:84:0c:fb:
7d:7c:25:eb:a4:04:2e:4e:ab:f5:7e:6b:47:9d:77:
0f:13:fc:dd:af:74:f7:1f:df:a7:ed:f0:c8:58:15:
6c:25:c0:88:c6:28:f9:66:d4:c1:89:ab:6a:65:21:
f3:2c:37:82:88:65:f2:91:a4:06:3f:d8:20:ce:26:
93:b0:54:20:ad:7a:65:ef:15:4f:1f:da:a0:cb:2f:
05:e7:26:18:20:0c:e2:d4:2e:89:b6:05:aa:2c:6e:
13:e5:7b:c7:f4:a6:af:65:c0:76:75:7a:ac:99:8f:
89:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:76:8E:23:AF:49:5D:66:F9:ED:97:2E:CD:29:56:3D:35:0E:86:52
X509v3 Authority Key Identifier:
keyid:55:0B:7C:0C:8B:AE:61:0F:7E:51:9C:04:85:A4:77:3B:CE:B4:8D:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VQt8DIuuYQ9-UZwEhaR3O860jas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/aedb03-b04c-4212-813b-ff25ba599031/1/VQt8DIuuYQ9-UZwEhaR3O860jas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/aedb03-b04c-4212-813b-ff25ba599031/1/VQt8DIuuYQ9-UZwEhaR3O860jas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:2e:72:a7:6e:f2:5c:39:80:8c:90:e1:2f:ee:8c:06:b4:ac:
50:97:5c:3e:bd:66:82:dd:3c:ed:7a:a8:fe:70:8b:ae:63:2c:
00:86:7e:72:f1:59:bc:33:e7:8d:67:94:10:2b:7e:b2:26:d9:
a7:98:85:ef:e4:73:77:38:d5:09:55:68:b7:3a:25:6d:91:03:
63:d9:9a:33:b2:86:3c:d1:38:67:59:74:58:d3:85:2d:ec:4e:
dc:1e:d1:d9:77:b4:87:e3:a9:01:e4:e0:4f:a8:f0:3e:f5:94:
ac:52:a0:0f:6b:0d:de:fd:00:8c:6a:14:92:ab:3b:56:3a:58:
40:2c:c4:86:6f:7c:6c:98:58:64:d6:12:64:dc:ce:99:ed:3a:
78:59:d2:74:f1:ca:66:6a:b0:8d:dc:1b:da:6e:20:63:40:c6:
c7:e2:19:21:6d:e1:eb:17:69:ea:05:a2:93:aa:48:9a:d0:27:
29:05:a2:b0:74:c5:11:30:bf:af:bf:05:2d:cd:df:5c:fb:94:
eb:e9:93:7a:6d:c6:73:1b:9a:fa:96:e7:4a:1e:15:83:92:57:
ff:5e:dc:c3:ab:fe:e6:21:60:09:3e:a9:82:7b:fe:a3:27:43:
2a:ba:f1:7d:e0:1f:4b:f0:0d:c4:a5:58:af:8d:a5:93:7d:e9:
b2:5f:70:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 22:55:09 2025 by rpki-client