Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/3cd45f-0b79-43b7-a9e6-c0bcedb34274/1/vaHlX3ROFBK9dT_Sd7d0CNzfjLQ.mft
File: vaHlX3ROFBK9dT_Sd7d0CNzfjLQ.mft (raw, json)
Hash identifier: zgi+npw8Ju4AJ+dr1qxHS9y//yKMD8ltNWnRfUbExqE=
Subject key identifier: 08:83:30:34:4E:64:B9:D5:34:78:BA:E9:B0:4C:62:EA:55:9C:02:DD
Authority key identifier: BD:A1:E5:5F:74:4E:14:12:BD:75:3F:D2:77:B7:74:08:DC:DF:8C:B4
Certificate issuer: /CN=bda1e55f744e1412bd753fd277b77408dcdf8cb4
Certificate serial: 019916F5EDACB44D23A89D54F5AA6669FBA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vaHlX3ROFBK9dT_Sd7d0CNzfjLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/3cd45f-0b79-43b7-a9e6-c0bcedb34274/1/vaHlX3ROFBK9dT_Sd7d0CNzfjLQ.mft
Manifest number: 1056
Signing time: Thu 04 Sep 2025 23:00:39 +0000
Manifest this update: Thu 04 Sep 2025 23:00:39 +0000
Manifest next update: Fri 05 Sep 2025 23:00:39 +0000
Files and hashes: 1: A6rb1dzlDcV8JbvloxjZ9srng9Y.roa (hash: p6jxR8xYwMN0t2VYMZkdONNHxcFxVga3IwawawK72KQ=)
2: vaHlX3ROFBK9dT_Sd7d0CNzfjLQ.crl (hash: aBJR3zseK/ZS7ff7RqGcigVY2yTWdBGDkO/p1Jhc0c0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/3cd45f-0b79-43b7-a9e6-c0bcedb34274/1/vaHlX3ROFBK9dT_Sd7d0CNzfjLQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/3cd45f-0b79-43b7-a9e6-c0bcedb34274/1/vaHlX3ROFBK9dT_Sd7d0CNzfjLQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/vaHlX3ROFBK9dT_Sd7d0CNzfjLQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 19:46:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:16:f5:ed:ac:b4:4d:23:a8:9d:54:f5:aa:66:69:fb:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bda1e55f744e1412bd753fd277b77408dcdf8cb4
Validity
Not Before: Sep 4 23:00:39 2025 GMT
Not After : Sep 5 23:00:39 2025 GMT
Subject: CN=088330344e64b9d53478bae9b04c62ea559c02dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:89:20:3c:b3:d2:84:94:24:3a:0c:f5:8f:4d:
6a:97:9a:8f:79:e6:24:68:5e:ef:85:dc:e4:94:ff:
78:55:d4:79:cb:6d:24:0a:c4:ff:7e:af:61:7c:bd:
a6:b1:9f:be:dd:a5:39:cf:16:b3:e2:0b:08:2c:0c:
f1:5e:62:fd:4a:f1:9c:40:26:81:05:5f:48:4c:11:
31:b8:d9:db:fa:13:71:bf:f5:7f:aa:02:39:14:fc:
02:ae:a5:a8:6c:e9:c4:71:2a:2a:3a:90:e7:88:3e:
f3:fe:3b:89:63:8a:12:e7:ed:13:f8:75:3a:6f:ba:
84:08:79:b1:6a:87:78:d5:06:7b:f8:4f:0b:e6:08:
95:59:60:6e:42:4c:4a:d7:8a:13:f3:51:71:ed:c8:
6d:45:98:85:59:1c:6f:af:0c:5d:ec:a8:9e:d6:ae:
db:ee:ae:e2:18:aa:d4:c5:2e:7f:4d:e9:66:ce:51:
dd:4c:93:23:62:00:77:30:68:ca:ed:df:e9:95:52:
f4:24:c9:01:3b:ae:dc:6a:fc:14:25:9b:42:d4:58:
d3:a4:46:e0:7a:d2:25:f0:7b:78:63:7f:09:83:a4:
4b:34:4a:8d:82:ba:b2:63:04:9d:ae:1a:83:0c:ec:
19:04:e8:a8:7f:66:67:a4:b1:f3:7d:ca:16:16:fb:
69:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:83:30:34:4E:64:B9:D5:34:78:BA:E9:B0:4C:62:EA:55:9C:02:DD
X509v3 Authority Key Identifier:
keyid:BD:A1:E5:5F:74:4E:14:12:BD:75:3F:D2:77:B7:74:08:DC:DF:8C:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vaHlX3ROFBK9dT_Sd7d0CNzfjLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3cd45f-0b79-43b7-a9e6-c0bcedb34274/1/vaHlX3ROFBK9dT_Sd7d0CNzfjLQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3cd45f-0b79-43b7-a9e6-c0bcedb34274/1/vaHlX3ROFBK9dT_Sd7d0CNzfjLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:50:c5:ac:c5:aa:b0:89:7e:6d:1b:06:fa:60:53:cd:af:e3:
7e:e9:94:e3:d2:79:40:bc:53:0d:da:fa:77:ec:ed:b8:39:50:
1e:34:c6:ff:ec:9e:d5:70:1a:68:89:fe:df:96:aa:36:0a:79:
38:b5:32:04:18:f5:d7:c9:4a:a3:e6:2b:72:43:86:a2:68:97:
6f:8c:cb:22:9e:ed:c3:f2:78:c3:d8:7a:ff:3c:64:cf:ea:b7:
b7:af:36:4d:86:ea:f7:8f:d5:a6:a0:e0:17:63:c2:88:9f:fd:
6a:fb:c0:31:e1:6c:b3:89:6b:10:0e:4c:59:e1:2e:27:11:4e:
5a:c4:15:ba:76:f8:03:4b:75:8f:1c:24:58:3b:7d:25:dc:03:
c1:69:0c:7d:19:06:73:4a:50:4c:4c:5d:f2:8f:b7:b6:dd:12:
a3:3c:ab:22:01:c0:3d:fa:f2:e3:8d:b4:c7:fd:c0:9e:d6:94:
6d:c0:c3:02:0d:4f:08:89:d4:69:33:f2:ef:76:b1:32:8b:0f:
87:b7:19:21:2c:b1:02:0b:72:57:c2:17:b9:41:f0:e4:44:18:
b6:f8:92:a2:c7:63:cf:3c:5a:94:75:00:b5:23:ae:ad:75:6b:
68:af:75:d5:02:28:dc:56:3e:fc:21:00:91:cc:e4:f0:58:6e:
9d:36:07:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 04:27:25 2025 by rpki-client