Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/490f3c-6f7c-4564-9c6b-66979a0480b0/1/VayAK4V_5CVyI6jlUIWlCzt3DsY.mft
File: VayAK4V_5CVyI6jlUIWlCzt3DsY.mft (raw, json)
Hash identifier: eVtT8B5VTcbbnGumr+TKqWGrVFT7EMsHEp3sQzXqdwY=
Subject key identifier: 3A:94:84:37:A9:ED:17:C3:FE:05:00:14:C8:3C:A9:6D:59:2F:F1:52
Authority key identifier: 55:AC:80:2B:85:7F:E4:25:72:23:A8:E5:50:85:A5:0B:3B:77:0E:C6
Certificate issuer: /CN=55ac802b857fe4257223a8e55085a50b3b770ec6
Certificate serial: 0198CACA670F98408F4A3B2AC046E04C3530
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VayAK4V_5CVyI6jlUIWlCzt3DsY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/490f3c-6f7c-4564-9c6b-66979a0480b0/1/VayAK4V_5CVyI6jlUIWlCzt3DsY.mft
Manifest number: 1642
Signing time: Thu 21 Aug 2025 04:01:58 +0000
Manifest this update: Thu 21 Aug 2025 04:01:58 +0000
Manifest next update: Fri 22 Aug 2025 04:01:58 +0000
Files and hashes: 1: 1INwuWU-BYXL6ew4aT-a1pXEbrQ.roa (hash: qzk46/IpEpqqazhTfDJLjV42Dwol04vFzCxQ5m0qkLc=)
2: VayAK4V_5CVyI6jlUIWlCzt3DsY.crl (hash: rlCWoZm0bJzijhER3Vmwi45hYrsYRF8q+VGx5QUZink=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/490f3c-6f7c-4564-9c6b-66979a0480b0/1/VayAK4V_5CVyI6jlUIWlCzt3DsY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/490f3c-6f7c-4564-9c6b-66979a0480b0/1/VayAK4V_5CVyI6jlUIWlCzt3DsY.mft
rsync://rpki.ripe.net/repository/DEFAULT/VayAK4V_5CVyI6jlUIWlCzt3DsY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 23:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:ca:ca:67:0f:98:40:8f:4a:3b:2a:c0:46:e0:4c:35:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55ac802b857fe4257223a8e55085a50b3b770ec6
Validity
Not Before: Aug 21 04:01:58 2025 GMT
Not After : Aug 22 04:01:58 2025 GMT
Subject: CN=3a948437a9ed17c3fe050014c83ca96d592ff152
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:15:c1:88:d7:8f:13:d3:df:31:dd:4d:45:0d:
2b:34:28:b9:c2:c3:72:64:04:13:50:30:f4:dd:ba:
40:d5:d9:67:e4:2d:3c:dd:50:7a:3a:e0:49:1b:99:
b7:0a:aa:50:95:58:d1:a7:1d:2a:a4:17:fd:b2:ff:
56:dc:1c:ce:ac:23:9b:3c:d2:29:01:1c:be:a5:2a:
12:de:0d:38:70:a7:94:33:7c:89:a4:3e:98:2e:4f:
14:32:f6:32:ae:8c:9c:15:45:18:c3:79:f9:ba:73:
f0:65:46:14:38:0d:8a:b5:51:e7:de:e7:6c:e6:32:
ee:8e:f2:12:64:4d:2c:20:fe:0b:db:ac:d5:0b:ef:
4d:7a:3c:a1:e3:84:a1:47:0f:f1:1c:a4:44:58:1c:
96:d1:95:06:7b:64:7a:fb:79:21:01:93:fa:57:f3:
cd:3f:4a:1c:e9:3c:93:91:1b:35:95:d1:65:8e:af:
61:ce:d3:e7:89:5c:9b:78:f9:7c:13:43:ab:36:78:
20:72:8f:6c:98:bf:93:2b:45:e5:7b:cf:5e:41:40:
f7:cb:e3:27:95:88:48:0f:d3:c3:26:2f:a8:40:d5:
9e:d2:6e:6d:a3:c4:e8:23:5f:12:01:e9:3a:f4:e3:
72:07:70:66:44:e6:8c:79:bd:9f:bc:75:7e:87:28:
27:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:94:84:37:A9:ED:17:C3:FE:05:00:14:C8:3C:A9:6D:59:2F:F1:52
X509v3 Authority Key Identifier:
keyid:55:AC:80:2B:85:7F:E4:25:72:23:A8:E5:50:85:A5:0B:3B:77:0E:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VayAK4V_5CVyI6jlUIWlCzt3DsY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/490f3c-6f7c-4564-9c6b-66979a0480b0/1/VayAK4V_5CVyI6jlUIWlCzt3DsY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/490f3c-6f7c-4564-9c6b-66979a0480b0/1/VayAK4V_5CVyI6jlUIWlCzt3DsY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:79:40:42:b9:b3:d5:80:3d:7d:d4:8a:55:21:5e:ef:e5:c9:
d4:05:5c:9d:ef:94:b8:06:78:af:82:84:14:ee:fc:9c:ac:6a:
48:fd:69:42:ab:2c:48:e2:bc:a2:e1:87:66:36:8b:6c:b2:4d:
5b:c9:2b:d5:1c:8e:c6:bb:fa:88:e1:1f:3f:a8:53:14:f9:40:
fb:62:a2:26:c2:33:bc:60:29:52:b7:f6:29:7e:38:c7:a9:5f:
bc:70:93:a7:29:73:88:f3:02:be:0c:07:ec:dc:ee:87:5f:86:
57:a7:5c:c5:8e:ce:fd:da:4e:75:f1:b6:b8:ca:ec:b5:69:14:
10:b9:8c:22:b9:ac:e8:b2:0e:c6:fb:59:1b:be:81:72:ca:3e:
e8:24:3a:d3:94:77:13:d7:52:f7:e7:3c:7d:ca:4c:88:2b:00:
e3:62:99:8d:08:44:5e:6f:9e:8b:63:14:2d:0c:6d:f2:b6:bf:
a1:2f:9f:30:7a:53:05:02:09:1b:49:18:ec:8b:96:09:7f:35:
3e:e6:d9:31:79:56:85:4b:4a:05:7d:24:c5:6a:12:97:c5:92:
c6:3f:cd:b7:f1:f0:f8:bb:30:69:aa:ca:72:c3:99:b5:23:d2:
4b:6d:9b:cd:20:c4:f4:83:08:5a:b1:19:48:c4:2f:32:af:49:
fd:cc:34:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 21 07:58:11 2025 by rpki-client