Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/deeb4c-99d6-4a9e-8200-7caa97927142/1/VVDgbuAsWjLlTciYU7SqN4-GBPc.mft
File: VVDgbuAsWjLlTciYU7SqN4-GBPc.mft (raw, json)
Hash identifier: nrkp7syJSPLBtlHNfrPaT0DPaY6hZ36u3mEAreGkDLw=
Subject key identifier: 2B:7A:DB:6B:52:D5:5B:92:88:81:C2:A0:4B:B4:86:7C:4F:DB:B8:D7
Authority key identifier: 55:50:E0:6E:E0:2C:5A:32:E5:4D:C8:98:53:B4:AA:37:8F:86:04:F7
Certificate issuer: /CN=5550e06ee02c5a32e54dc89853b4aa378f8604f7
Certificate serial: 0199315AB2269129D7A204A66E2EFA496E35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VVDgbuAsWjLlTciYU7SqN4-GBPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/deeb4c-99d6-4a9e-8200-7caa97927142/1/VVDgbuAsWjLlTciYU7SqN4-GBPc.mft
Manifest number: 0BBF
Signing time: Wed 10 Sep 2025 02:00:51 +0000
Manifest this update: Wed 10 Sep 2025 02:00:51 +0000
Manifest next update: Thu 11 Sep 2025 02:00:51 +0000
Files and hashes: 1: 5SQUdjWeY9PdQ3b1GR4L3yx_VJ4.roa (hash: VQXaoCtg+0JbslSnqFe7W7gX+zMPO93yVdM1v7U3tJ8=)
2: MPnVMUDELwRT1_LHbrcJgd4NmwE.roa (hash: +uiYqzvO4MwwXvvIKhlCHsQt5+OwmIQB9Ijy/fYg7A8=)
3: VVDgbuAsWjLlTciYU7SqN4-GBPc.crl (hash: nvIEMI3Bdi1V/rMLT/LZSEWsbV5xC6caMermtJnoNFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/deeb4c-99d6-4a9e-8200-7caa97927142/1/VVDgbuAsWjLlTciYU7SqN4-GBPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/deeb4c-99d6-4a9e-8200-7caa97927142/1/VVDgbuAsWjLlTciYU7SqN4-GBPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/VVDgbuAsWjLlTciYU7SqN4-GBPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 21:45:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:31:5a:b2:26:91:29:d7:a2:04:a6:6e:2e:fa:49:6e:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5550e06ee02c5a32e54dc89853b4aa378f8604f7
Validity
Not Before: Sep 10 02:00:51 2025 GMT
Not After : Sep 11 02:00:51 2025 GMT
Subject: CN=2b7adb6b52d55b928881c2a04bb4867c4fdbb8d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:de:66:0e:26:8c:56:95:df:6c:95:d0:31:6c:
e0:3c:63:8b:14:7d:c1:f2:6b:99:47:0a:1b:72:c8:
a1:08:9d:09:7a:87:07:48:3c:88:75:03:e6:ed:73:
b6:53:1b:9b:c4:c0:5f:5b:75:0d:00:a8:ea:ff:df:
e4:8b:63:04:f8:b5:d7:4d:4a:43:65:c8:8c:9f:f1:
d8:c4:8d:8e:ba:e4:35:e3:f8:99:fc:64:e3:37:87:
a2:2c:62:fa:e3:d7:8e:a3:0d:16:59:07:ca:0c:88:
0d:5c:3a:2e:f3:a8:81:d7:a3:b5:d6:32:33:2a:94:
00:11:91:b9:33:e5:53:5d:fe:a8:1f:93:ea:7d:fc:
50:e4:45:7f:b8:d4:55:a3:04:66:8c:a2:0f:f9:f3:
d8:ef:a6:81:7e:7f:02:ab:01:62:13:61:23:3b:e4:
31:f7:a8:70:f3:12:91:9b:0d:b1:a0:2f:51:05:00:
02:7f:43:24:b3:f9:a1:b1:c1:7e:36:dc:65:53:0d:
20:43:69:bc:c1:c6:02:0b:4a:35:36:5e:da:ad:87:
b6:d0:e2:96:e3:73:d2:b7:30:ed:54:5f:bc:44:89:
e7:e9:ff:ee:a1:0a:df:80:09:1c:02:05:04:b9:30:
17:e6:5b:19:95:a7:42:f2:35:2f:88:8b:d7:ca:1b:
38:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:7A:DB:6B:52:D5:5B:92:88:81:C2:A0:4B:B4:86:7C:4F:DB:B8:D7
X509v3 Authority Key Identifier:
keyid:55:50:E0:6E:E0:2C:5A:32:E5:4D:C8:98:53:B4:AA:37:8F:86:04:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VVDgbuAsWjLlTciYU7SqN4-GBPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/deeb4c-99d6-4a9e-8200-7caa97927142/1/VVDgbuAsWjLlTciYU7SqN4-GBPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/deeb4c-99d6-4a9e-8200-7caa97927142/1/VVDgbuAsWjLlTciYU7SqN4-GBPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:6f:05:bc:2d:25:9c:52:d3:52:a5:f9:06:07:d5:65:97:6d:
39:fd:7d:e3:0c:06:5b:c0:2d:33:4b:61:af:94:9d:e7:85:8b:
01:0b:a9:45:87:13:95:57:28:93:16:be:c7:88:d1:f7:ee:af:
f4:7a:bc:ce:cc:e2:ab:92:af:32:ee:c0:67:f1:07:17:1e:c7:
91:84:f7:05:8a:fd:48:a7:a2:ec:7d:41:46:02:77:30:26:da:
cf:fb:a7:a9:84:83:57:a5:b6:41:4f:1d:ac:e9:55:67:dc:6e:
1c:c2:f5:05:f5:75:12:20:cf:7a:b9:da:f4:c0:bc:84:f3:f6:
7d:ce:fd:0d:08:e3:8c:1d:8f:c5:39:5e:44:8d:e7:a8:5a:78:
f1:09:06:1a:3d:55:21:e8:b4:b8:3a:aa:53:75:b8:45:7c:ba:
19:14:3b:72:15:fe:7e:6a:01:9a:05:c2:b5:f9:42:5a:bd:b9:
6d:ea:2a:b0:fb:d1:d1:3d:2a:29:fb:b8:38:40:d5:9f:ba:4e:
81:32:98:e4:05:ec:15:e4:cf:3d:2c:47:99:89:49:a9:6c:30:
a2:7e:19:54:d9:4b:e6:99:68:ba:17:23:4c:75:fa:f5:a0:42:
65:b8:8e:94:4a:6a:d2:64:2d:31:f6:c8:42:8e:77:96:ce:e4:
de:a7:1e:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 05:13:32 2025 by rpki-client