Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/VAavgE71pjb0ZOcajUHo1AGn9pc.mft
File: VAavgE71pjb0ZOcajUHo1AGn9pc.mft (raw, json)
Hash identifier: krqCCNiWY2m01BBH2aDNiG9folyHLw4aVIy9LCKrKxs=
Subject key identifier: 94:BD:6D:69:E1:D2:65:CA:AB:6B:6F:CA:FC:A2:D3:10:75:FD:E2:AE
Authority key identifier: 54:06:AF:80:4E:F5:A6:36:F4:64:E7:1A:8D:41:E8:D4:01:A7:F6:97
Certificate issuer: /CN=5406af804ef5a636f464e71a8d41e8d401a7f697
Certificate serial: 01993794A6380A6E60EEF553A855D85745FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VAavgE71pjb0ZOcajUHo1AGn9pc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/VAavgE71pjb0ZOcajUHo1AGn9pc.mft
Manifest number: 160F
Signing time: Thu 11 Sep 2025 07:01:52 +0000
Manifest this update: Thu 11 Sep 2025 07:01:52 +0000
Manifest next update: Fri 12 Sep 2025 07:01:52 +0000
Files and hashes: 1: IxyW73OMckCNett38gRruShmhsE.roa (hash: kwXxrh4BlKqwqWrrFQAbZ+7ZY9nBQf7G/9/mLoszBNE=)
2: VAavgE71pjb0ZOcajUHo1AGn9pc.crl (hash: 9OlaFp4gq8Hv5VaDXeez1F4oWs12iMv2HEbQccTeuxA=)
3: _FNz_oG2zcFLeFpovQJ_R2vg-vc.roa (hash: SUqY4ZQvD6jvXvZ8JF1d/vGljIMHXNiGDX2pW4O5ywc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/VAavgE71pjb0ZOcajUHo1AGn9pc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/VAavgE71pjb0ZOcajUHo1AGn9pc.mft
rsync://rpki.ripe.net/repository/DEFAULT/VAavgE71pjb0ZOcajUHo1AGn9pc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 05:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:37:94:a6:38:0a:6e:60:ee:f5:53:a8:55:d8:57:45:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5406af804ef5a636f464e71a8d41e8d401a7f697
Validity
Not Before: Sep 11 07:01:52 2025 GMT
Not After : Sep 12 07:01:52 2025 GMT
Subject: CN=94bd6d69e1d265caab6b6fcafca2d31075fde2ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d3:b8:03:22:39:ab:bb:ba:9d:79:92:79:e8:
5d:b3:4a:b8:ae:5e:84:e9:96:e1:a3:4b:f0:74:1e:
cf:41:c3:cc:0a:b6:4d:9d:6b:8a:6f:cf:5f:2c:29:
56:6a:56:ca:7a:20:42:20:3c:bc:48:c3:5a:a5:4d:
d2:fb:05:d1:7e:3e:1b:1e:eb:99:bf:67:ef:cb:26:
a4:2c:3a:50:a8:81:9e:3d:e3:f2:2e:89:40:58:ca:
5a:12:d6:31:b8:3d:2b:5c:ec:06:f0:df:cb:15:d5:
25:3e:2b:f1:f8:a9:da:69:96:78:19:1b:00:2c:96:
af:51:7c:c2:83:4b:da:7d:05:a6:21:a9:cb:ad:82:
22:e9:0e:7d:4a:18:2a:24:70:51:7c:ee:01:8c:31:
cc:83:13:b2:24:42:44:34:54:21:fd:9e:29:35:e4:
d0:30:72:b5:d9:62:f9:c7:ae:93:b0:4d:fd:49:14:
2b:d2:b0:73:2c:c4:3b:c6:8e:2e:d0:27:88:05:d4:
29:5a:37:c6:ad:96:9c:4d:03:1d:73:48:26:c5:e9:
db:fa:90:36:b2:92:5c:6e:79:be:7e:3e:fe:6e:77:
4e:ca:0c:26:1e:8d:70:b6:ce:cc:13:85:f4:63:93:
75:22:ea:a8:c7:a1:d6:cf:7d:99:92:93:7f:5c:67:
8e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:BD:6D:69:E1:D2:65:CA:AB:6B:6F:CA:FC:A2:D3:10:75:FD:E2:AE
X509v3 Authority Key Identifier:
keyid:54:06:AF:80:4E:F5:A6:36:F4:64:E7:1A:8D:41:E8:D4:01:A7:F6:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VAavgE71pjb0ZOcajUHo1AGn9pc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/VAavgE71pjb0ZOcajUHo1AGn9pc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/VAavgE71pjb0ZOcajUHo1AGn9pc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:f3:b1:d1:18:71:c7:bf:fb:2e:45:c1:74:5f:67:93:18:54:
01:bf:f1:0e:16:18:69:4c:5e:bd:54:7f:95:72:4a:fb:09:33:
27:1f:d5:34:bf:ad:47:79:4a:db:ba:14:6b:d1:84:db:ff:00:
e8:93:b6:fc:7f:63:00:1d:8e:f7:22:84:42:a7:d9:ef:fe:82:
19:2e:a9:19:32:a8:f4:ef:f5:3b:6e:71:f4:98:18:5f:66:87:
13:c7:47:40:24:3f:eb:18:2a:3f:60:f2:45:59:10:af:a6:3e:
bf:8c:2c:f4:fe:24:0f:ba:68:e2:79:a5:79:d5:a2:7b:88:3d:
fb:ba:c5:91:86:c1:ff:e5:2d:b2:4b:31:0c:30:25:d0:0c:15:
4c:9d:60:00:72:30:67:b9:56:37:47:33:0e:0f:da:6c:13:07:
89:b7:a0:51:a8:89:17:d0:cc:7d:4b:f7:5e:81:15:32:58:71:
ac:35:87:67:cf:75:8f:83:9e:bb:5f:1c:fa:ae:dc:56:c3:a4:
eb:e5:62:05:df:dd:8f:40:dd:df:b5:40:08:6e:12:88:46:af:
46:37:1b:cc:78:0c:6b:14:df:b7:48:ba:99:0c:02:ef:bd:b4:
75:1d:96:af:44:59:a2:b8:ad:eb:f7:b4:29:20:d7:18:e1:99:
ee:89:60:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 11:48:33 2025 by rpki-client