Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/9398b0-2fbb-4bd3-b9bc-1e89f9695d1b/1/VAQZQbFFDWuVtYyj8HfOII39-0s.mft
File: VAQZQbFFDWuVtYyj8HfOII39-0s.mft (raw, json)
Hash identifier: bXHEWsn71mlaDoSGOwhGPQzJZV8gnvV2vtvrVcs9iTE=
Subject key identifier: 27:8C:7F:99:4A:21:B7:21:69:02:43:A7:B6:5F:7F:07:3B:4C:C7:21
Authority key identifier: 54:04:19:41:B1:45:0D:6B:95:B5:8C:A3:F0:77:CE:20:8D:FD:FB:4B
Certificate issuer: /CN=54041941b1450d6b95b58ca3f077ce208dfdfb4b
Certificate serial: 01992CA1DE79FCED20B94D9E2DD6B885C37A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VAQZQbFFDWuVtYyj8HfOII39-0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/9398b0-2fbb-4bd3-b9bc-1e89f9695d1b/1/VAQZQbFFDWuVtYyj8HfOII39-0s.mft
Manifest number: 071B
Signing time: Tue 09 Sep 2025 04:00:29 +0000
Manifest this update: Tue 09 Sep 2025 04:00:29 +0000
Manifest next update: Wed 10 Sep 2025 04:00:29 +0000
Files and hashes: 1: VAQZQbFFDWuVtYyj8HfOII39-0s.crl (hash: RwMfyQtFfh9bu1iAGnx2mRRYpKHps6Ig5/kn6rnlFJE=)
2: _kct8kIbVboNtXmwY3sBZtxcNtM.roa (hash: T6JpWQH7nutNbYZnSGugyuq7ObfBwtPlbYrmzm3m20w=)
3: khPPmPdFt5NSW2cXj9IsrNyyMNA.roa (hash: YSUlml94r6G6gJB4NeI+X3NQi5Phdn1YlU4xpfbkY7I=)
4: ttIMVm2Qx6d-SaNfus5CP2PiSww.roa (hash: GIzKFX6ewkeY9UKKD+c3WgJblzIfMp9efYS5dFXHsaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/9398b0-2fbb-4bd3-b9bc-1e89f9695d1b/1/VAQZQbFFDWuVtYyj8HfOII39-0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/9398b0-2fbb-4bd3-b9bc-1e89f9695d1b/1/VAQZQbFFDWuVtYyj8HfOII39-0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/VAQZQbFFDWuVtYyj8HfOII39-0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2c:a1:de:79:fc:ed:20:b9:4d:9e:2d:d6:b8:85:c3:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54041941b1450d6b95b58ca3f077ce208dfdfb4b
Validity
Not Before: Sep 9 04:00:29 2025 GMT
Not After : Sep 10 04:00:29 2025 GMT
Subject: CN=278c7f994a21b721690243a7b65f7f073b4cc721
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:15:9e:c0:5d:0c:58:13:8c:88:c4:d4:08:b9:
cd:47:c3:1a:29:c3:cb:a8:f3:6c:91:eb:0a:91:7c:
d8:08:c8:a0:99:49:66:94:ba:6a:83:ed:03:4e:15:
c1:ee:2b:43:f2:7e:04:f8:57:04:97:51:5f:a3:f1:
40:cf:ba:50:f4:ef:fe:54:8a:89:fe:8a:ed:98:81:
73:10:46:37:32:79:4c:bf:2e:cb:cf:87:86:cc:59:
1f:70:af:87:01:14:b2:02:1f:af:6a:68:d7:e2:16:
d4:fa:3d:8a:8c:a0:3c:d7:1d:c0:9f:1f:13:f7:b9:
50:40:61:04:8d:3f:f9:48:18:d4:71:ec:31:bb:0f:
c2:b3:fb:db:79:1c:4c:d5:39:7f:7c:f6:3a:5c:48:
58:2a:0e:af:67:a8:aa:71:cc:e5:fe:b4:0f:f7:82:
da:41:c2:70:89:bb:d7:0b:fd:b5:c3:38:26:74:82:
43:2e:68:d5:26:d9:9f:17:66:00:46:53:a8:e8:cd:
75:e7:44:12:3e:3f:27:7f:be:76:f5:a9:b9:d6:3d:
ef:e1:b9:0b:a0:06:e4:06:18:9e:b7:15:07:c5:2d:
e9:f5:5c:b5:58:18:b8:e7:9c:93:70:06:61:e6:00:
1a:0f:72:3b:66:fa:a0:65:37:c7:b7:12:eb:07:aa:
0c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:8C:7F:99:4A:21:B7:21:69:02:43:A7:B6:5F:7F:07:3B:4C:C7:21
X509v3 Authority Key Identifier:
keyid:54:04:19:41:B1:45:0D:6B:95:B5:8C:A3:F0:77:CE:20:8D:FD:FB:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VAQZQbFFDWuVtYyj8HfOII39-0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/9398b0-2fbb-4bd3-b9bc-1e89f9695d1b/1/VAQZQbFFDWuVtYyj8HfOII39-0s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/9398b0-2fbb-4bd3-b9bc-1e89f9695d1b/1/VAQZQbFFDWuVtYyj8HfOII39-0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:23:67:59:92:b2:57:09:ec:b9:bb:4c:c2:00:32:af:b5:9b:
61:af:dc:37:77:1d:b5:39:66:fe:f7:5d:ea:a3:36:ee:77:d4:
9a:0d:f2:e8:30:84:fd:c5:b7:d9:27:30:cd:45:81:02:07:7a:
75:d8:e1:ba:eb:87:16:fe:b6:2e:c0:ce:2f:ee:73:00:09:ae:
bb:7a:2b:fd:28:0d:64:39:1a:c4:68:c0:7f:7a:31:f0:f6:c8:
60:42:66:05:65:b2:bd:b9:16:97:90:66:26:6d:32:16:a0:64:
3d:92:73:8e:78:59:7b:43:14:dd:51:03:2e:04:fd:cd:98:f5:
e5:2b:65:ef:3e:7c:26:4b:08:9b:60:fa:36:f6:45:a8:df:ef:
ca:a6:33:be:4c:85:1f:1b:d8:a9:06:a2:41:a9:c2:32:2d:d3:
b2:3f:dc:73:c4:9d:a2:b5:46:a9:79:f2:6d:c8:a5:a3:ef:7c:
ec:c2:23:c5:29:6b:a0:1d:57:a4:61:66:99:52:c7:f7:b8:8c:
ce:94:28:1a:3d:22:1b:b2:57:d4:93:4e:e4:3f:d0:47:fb:10:
1b:c2:77:97:16:9e:78:0e:09:07:92:7f:13:a6:aa:ca:66:a3:
ea:f2:21:cb:3f:4a:8f:f7:b5:1e:ec:0d:96:94:af:3b:83:8e:
63:ab:c0:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 07:57:24 2025 by rpki-client