Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/9b4530-76e4-4401-a87b-29f78c27989f/1/vatssugHrs69fgOoCAj6sj2cRxY.mft
File: vatssugHrs69fgOoCAj6sj2cRxY.mft (raw, json)
Hash identifier: qcwcIwIvwxyjoNeEHh8qNsdmhVlsS5RoGxqJjVRPmME=
Subject key identifier: 5B:87:D4:14:B1:C5:33:E4:39:54:0B:C2:42:41:D8:18:E0:2B:B2:E1
Authority key identifier: BD:AB:6C:B2:E8:07:AE:CE:BD:7E:03:A8:08:08:FA:B2:3D:9C:47:16
Certificate issuer: /CN=bdab6cb2e807aecebd7e03a80808fab23d9c4716
Certificate serial: 019921E7B419949D1E8FCE83384AAE1E1D71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vatssugHrs69fgOoCAj6sj2cRxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/9b4530-76e4-4401-a87b-29f78c27989f/1/vatssugHrs69fgOoCAj6sj2cRxY.mft
Manifest number: 0966
Signing time: Sun 07 Sep 2025 02:00:56 +0000
Manifest this update: Sun 07 Sep 2025 02:00:56 +0000
Manifest next update: Mon 08 Sep 2025 02:00:56 +0000
Files and hashes: 1: FiQ6326ULjytbcRmbnTQT53B6qI.roa (hash: oVfk3zFCZV+aJ9BHrRH3g14/uV9d1uVQ7Jx5xhv/0d8=)
2: P26iBMzDxpvH-LQZESUQTHncYxo.roa (hash: 3+DbSLlopFDVY7Piu2/Wt1KhQBxlA0+iBBO7seLQMiE=)
3: vatssugHrs69fgOoCAj6sj2cRxY.crl (hash: hQrhEXn0UY2qgFWubYrsWBKaHsBaij6BXdHUwi5Bcgs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/9b4530-76e4-4401-a87b-29f78c27989f/1/vatssugHrs69fgOoCAj6sj2cRxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/9b4530-76e4-4401-a87b-29f78c27989f/1/vatssugHrs69fgOoCAj6sj2cRxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/vatssugHrs69fgOoCAj6sj2cRxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:b4:19:94:9d:1e:8f:ce:83:38:4a:ae:1e:1d:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdab6cb2e807aecebd7e03a80808fab23d9c4716
Validity
Not Before: Sep 7 02:00:56 2025 GMT
Not After : Sep 8 02:00:56 2025 GMT
Subject: CN=5b87d414b1c533e439540bc24241d818e02bb2e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:13:8b:aa:2a:35:ca:c4:49:63:b8:44:48:9a:
95:4a:67:de:84:dc:ec:ea:1e:28:89:36:63:30:c6:
6f:e6:7d:0c:54:35:02:8f:fb:82:c4:89:85:39:71:
87:33:68:3c:13:4a:ef:b9:17:c1:3b:6b:9d:38:e4:
d0:aa:fd:52:04:3d:0b:30:40:1d:61:71:ea:78:56:
c4:e5:1e:a3:2c:70:af:12:cc:60:c3:9a:b0:8f:2f:
49:11:b7:44:66:45:42:a4:5e:db:12:bc:0e:6f:6c:
a9:b2:2b:71:86:4d:cf:c8:e6:3c:ee:65:0d:76:af:
8e:2d:a9:ac:19:0c:c3:a2:ae:77:0a:e7:99:81:23:
6d:fc:c5:a6:af:a3:a3:7b:8f:76:76:66:b1:17:32:
74:9d:3e:7b:09:55:a0:bf:dd:f4:42:71:74:61:2c:
aa:c9:1a:f3:9f:0f:70:b8:20:0e:6f:87:35:4f:b7:
84:61:c7:57:22:36:fd:0a:6a:47:b5:26:f3:86:9e:
7c:54:89:96:0b:41:9d:79:a3:d5:f5:99:89:55:11:
a6:dc:c0:9d:4b:8a:69:9a:e7:2c:21:ba:a3:6f:79:
e9:2f:f8:e8:10:be:e3:f1:0b:e5:61:65:26:53:0b:
04:be:ee:05:8e:b5:44:c1:e8:89:3b:00:8e:61:e7:
9d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:87:D4:14:B1:C5:33:E4:39:54:0B:C2:42:41:D8:18:E0:2B:B2:E1
X509v3 Authority Key Identifier:
keyid:BD:AB:6C:B2:E8:07:AE:CE:BD:7E:03:A8:08:08:FA:B2:3D:9C:47:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vatssugHrs69fgOoCAj6sj2cRxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/9b4530-76e4-4401-a87b-29f78c27989f/1/vatssugHrs69fgOoCAj6sj2cRxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/9b4530-76e4-4401-a87b-29f78c27989f/1/vatssugHrs69fgOoCAj6sj2cRxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:a3:26:19:7b:b0:32:68:fa:f8:1e:7b:3e:51:7e:c0:ae:7c:
d8:6c:cc:ba:a0:c4:4d:1d:63:8a:b2:de:35:03:97:36:90:62:
63:30:14:36:a7:be:a7:ec:a0:5f:66:b2:66:1c:18:7b:24:19:
5a:11:60:83:90:c3:c2:d8:95:6d:6d:46:48:e2:70:96:f8:3a:
f5:55:25:5b:cb:41:f8:33:41:e6:b1:01:27:9d:80:9d:bb:6d:
d1:99:ac:91:fe:f4:29:2c:fe:78:42:6b:65:f5:84:40:d9:c3:
f9:35:59:0a:1c:59:54:56:99:f2:6b:b9:2e:6f:40:55:27:e6:
59:50:7e:ad:21:73:ec:b9:70:c8:f4:ef:be:31:67:23:af:71:
0e:1d:38:2b:01:03:b5:be:ac:d0:b2:a7:e9:10:4b:90:89:a2:
43:43:fe:58:73:9b:57:c6:9f:12:b2:e2:e6:3e:4d:97:eb:14:
1a:1a:97:13:0c:8b:4f:3d:b1:5c:a8:0d:b3:b6:06:6d:62:d7:
fc:a1:5d:df:d3:8e:10:fc:02:72:a7:ff:c5:d0:d0:f7:c6:a8:
f3:70:e9:a3:b8:fb:12:56:ad:cf:4d:2c:ec:15:5b:3f:47:71:
51:39:dd:c9:27:40:8e:78:75:71:db:28:10:09:10:4e:95:74:
48:16:30:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:46:08 2025 by rpki-client