Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/cc66d4-7d98-43b5-b209-b8487fe96149/1/vQM98D7VHOeSSkgBg7z_208EJTc.mft
File: vQM98D7VHOeSSkgBg7z_208EJTc.mft (raw, json)
Hash identifier: Nfw1W5JCb9OKTPIKEHaj1vZPjaUVXdacxwWb2HpIiJ8=
Subject key identifier: 32:C4:FC:02:B5:7B:4F:50:1D:44:99:F5:CF:1C:70:7D:28:72:ED:D8
Authority key identifier: BD:03:3D:F0:3E:D5:1C:E7:92:4A:48:01:83:BC:FF:DB:4F:04:25:37
Certificate issuer: /CN=bd033df03ed51ce7924a480183bcffdb4f042537
Certificate serial: 019923D648107D2CC0A7B0C150424AF53E66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vQM98D7VHOeSSkgBg7z_208EJTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/cc66d4-7d98-43b5-b209-b8487fe96149/1/vQM98D7VHOeSSkgBg7z_208EJTc.mft
Manifest number: 0266
Signing time: Sun 07 Sep 2025 11:01:09 +0000
Manifest this update: Sun 07 Sep 2025 11:01:09 +0000
Manifest next update: Mon 08 Sep 2025 11:01:09 +0000
Files and hashes: 1: vQM98D7VHOeSSkgBg7z_208EJTc.crl (hash: vF9bcevK9LlrICOLUYjsqUc/gjLFitRwBogDcfAeT6E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/cc66d4-7d98-43b5-b209-b8487fe96149/1/vQM98D7VHOeSSkgBg7z_208EJTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/cc66d4-7d98-43b5-b209-b8487fe96149/1/vQM98D7VHOeSSkgBg7z_208EJTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/vQM98D7VHOeSSkgBg7z_208EJTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:d6:48:10:7d:2c:c0:a7:b0:c1:50:42:4a:f5:3e:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd033df03ed51ce7924a480183bcffdb4f042537
Validity
Not Before: Sep 7 11:01:09 2025 GMT
Not After : Sep 8 11:01:09 2025 GMT
Subject: CN=32c4fc02b57b4f501d4499f5cf1c707d2872edd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:11:eb:6c:e5:2e:a1:41:02:af:29:e6:d8:5e:
a6:48:81:1f:3a:e2:b4:d9:cb:c8:cd:84:e5:54:cf:
5d:ee:31:e7:7b:3f:25:d7:cc:f1:5d:7c:38:23:c1:
c4:cd:45:05:09:8c:e9:bc:55:04:64:01:a3:85:2f:
c1:ed:6b:2d:2c:d9:2e:b4:21:03:81:a6:01:23:42:
b5:d3:76:0b:16:5b:73:0e:c5:97:38:9f:fc:2f:5a:
c3:b6:21:05:27:36:72:eb:f0:5e:b3:58:4f:6c:a9:
9e:87:8b:3f:b3:e3:d7:33:93:29:3d:7d:85:f8:c8:
47:fc:24:d3:f8:2b:0c:98:7c:53:40:1a:a6:35:38:
f7:60:bf:09:06:26:f2:0d:f9:e6:03:0f:d9:ec:ab:
97:1f:52:02:8f:ea:e2:d9:5d:d3:7f:03:6f:1d:97:
fb:d3:12:4b:8b:9c:96:e9:e8:c0:ea:66:58:e6:6e:
4a:f0:d8:ce:dd:f8:87:c2:e8:78:5a:7f:42:6e:a7:
4f:8c:4a:8c:f4:68:05:0b:68:c3:d6:59:16:77:97:
91:36:28:78:4c:04:8b:f6:86:88:0f:16:f9:3d:4b:
f8:03:6b:b6:7b:c1:d8:0c:ee:5d:9b:c2:f3:b4:1b:
cd:97:cf:fc:33:cd:c6:b5:2b:43:cc:a7:84:30:66:
b7:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:C4:FC:02:B5:7B:4F:50:1D:44:99:F5:CF:1C:70:7D:28:72:ED:D8
X509v3 Authority Key Identifier:
keyid:BD:03:3D:F0:3E:D5:1C:E7:92:4A:48:01:83:BC:FF:DB:4F:04:25:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vQM98D7VHOeSSkgBg7z_208EJTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/cc66d4-7d98-43b5-b209-b8487fe96149/1/vQM98D7VHOeSSkgBg7z_208EJTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/cc66d4-7d98-43b5-b209-b8487fe96149/1/vQM98D7VHOeSSkgBg7z_208EJTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:72:59:d8:62:2c:6f:08:87:64:62:72:7b:1e:8d:1a:39:f1:
a9:b2:fc:21:b9:94:5a:2c:fc:01:b1:69:c8:62:ca:93:a5:5a:
b4:9e:69:87:8a:f2:7d:43:e8:9d:85:cf:be:04:70:f6:18:6d:
91:97:88:c2:5b:8c:ef:4a:b8:0a:89:12:fc:7e:c9:31:ea:08:
43:33:58:07:58:2c:e8:15:8b:75:f8:41:5c:99:9d:59:83:95:
79:15:41:50:84:78:d3:9a:38:59:27:4b:ae:7b:ff:28:9f:9b:
17:cb:c2:7f:21:d9:c2:6c:a5:32:3b:9f:6b:4c:d6:7a:f6:f6:
65:94:58:b4:a3:ac:fd:d0:8d:7c:0a:4b:8b:64:42:fa:04:8b:
a9:ee:55:82:e1:94:4f:7f:d5:e6:2d:b3:c7:a1:63:80:6f:09:
83:27:b4:3a:76:25:71:c1:66:54:6d:35:58:a1:c7:49:be:68:
17:0a:85:fb:7e:e8:c5:54:11:76:d9:7c:b6:95:0e:df:a6:9b:
24:e5:b8:eb:bd:14:ba:6e:98:93:07:71:29:08:8e:06:67:4f:
90:09:46:c9:f0:80:f7:52:b2:48:60:9c:18:6b:b5:e7:d1:d8:
1a:71:3d:c0:39:40:e9:64:76:17:1c:21:6e:e1:77:c3:81:26:
be:a8:41:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:56:49 2025 by rpki-client