Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/24c324-a15e-4cd0-94c1-73ff40959348/1/VnGQhUeGoWr6aw7HjfsGIKuqz-8.mft
File: VnGQhUeGoWr6aw7HjfsGIKuqz-8.mft (raw, json)
Hash identifier: FiZn6MUz5mB9pIZpoMQ1wndn0JdmqDkQ7XKHyi/NjQo=
Subject key identifier: B0:A3:B8:80:68:03:BE:B4:8B:3A:A7:00:2F:2B:45:3F:41:54:95:F4
Authority key identifier: 56:71:90:85:47:86:A1:6A:FA:6B:0E:C7:8D:FB:06:20:AB:AA:CF:EF
Certificate issuer: /CN=567190854786a16afa6b0ec78dfb0620abaacfef
Certificate serial: 0198D6CD96B24A8BC6A45B5DCF7B334BD28D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VnGQhUeGoWr6aw7HjfsGIKuqz-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/24c324-a15e-4cd0-94c1-73ff40959348/1/VnGQhUeGoWr6aw7HjfsGIKuqz-8.mft
Manifest number: 1650
Signing time: Sat 23 Aug 2025 12:00:54 +0000
Manifest this update: Sat 23 Aug 2025 12:00:54 +0000
Manifest next update: Sun 24 Aug 2025 12:00:54 +0000
Files and hashes: 1: GQ1DSO1of_qyrqxkPQTC0ENKnfg.roa (hash: nTd0zjLE6XtOMPZyttCDWktzUnkCfLfuxFOPmZBOHEs=)
2: VnGQhUeGoWr6aw7HjfsGIKuqz-8.crl (hash: mwLjaW0qi+GvWbnh66WfRv0lNIh3ClKi0+j4ePFgXzI=)
3: qdba9XlB-cPjFIeLPK89fH4z7YE.roa (hash: 1JK31mC2SxxDKOuDPCP+7Ar2oTz/PPCsc7D4ztv27uI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/24c324-a15e-4cd0-94c1-73ff40959348/1/VnGQhUeGoWr6aw7HjfsGIKuqz-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/24c324-a15e-4cd0-94c1-73ff40959348/1/VnGQhUeGoWr6aw7HjfsGIKuqz-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/VnGQhUeGoWr6aw7HjfsGIKuqz-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:96:b2:4a:8b:c6:a4:5b:5d:cf:7b:33:4b:d2:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=567190854786a16afa6b0ec78dfb0620abaacfef
Validity
Not Before: Aug 23 12:00:54 2025 GMT
Not After : Aug 24 12:00:54 2025 GMT
Subject: CN=b0a3b8806803beb48b3aa7002f2b453f415495f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:2a:35:3f:62:5e:40:54:3f:17:67:7b:4d:51:
1e:80:23:6e:ba:e7:73:52:3d:b3:1f:a0:56:75:e7:
cb:16:19:85:b0:bd:bc:83:1e:04:26:f7:af:01:13:
be:e7:c1:17:0b:be:38:1a:e4:83:cd:c3:0a:10:86:
93:08:1d:92:63:fa:ef:d9:64:bc:d6:d4:cd:62:f6:
0b:4e:67:a5:cb:0b:ea:f8:5f:a7:89:fe:ec:ce:d9:
07:7b:37:b5:c0:95:36:98:f6:19:9e:b4:79:80:08:
b5:b9:0b:17:57:2c:ef:2a:d4:11:e9:5d:d3:60:fc:
0c:ed:42:06:ca:a7:7e:1f:55:1e:7f:7c:dd:e9:30:
62:89:37:9e:ea:13:4b:76:0d:df:ab:e4:f0:00:80:
e2:64:36:21:c2:ce:93:f4:16:f8:70:4f:51:87:8b:
05:d4:3e:84:10:86:0f:3b:66:78:28:98:7b:cd:d0:
c1:fa:ec:ac:89:89:36:b1:87:bb:ba:56:df:5b:b9:
bc:f4:a7:09:c0:3c:24:e4:73:b9:51:22:a5:11:97:
c1:05:2e:42:fa:6d:b9:e5:26:e2:3b:e2:12:7a:60:
8f:d9:2d:84:82:6b:ee:b7:aa:cf:0e:0a:19:30:36:
b4:55:f1:5d:62:a0:db:30:90:f3:e7:ee:14:5e:76:
6a:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:A3:B8:80:68:03:BE:B4:8B:3A:A7:00:2F:2B:45:3F:41:54:95:F4
X509v3 Authority Key Identifier:
keyid:56:71:90:85:47:86:A1:6A:FA:6B:0E:C7:8D:FB:06:20:AB:AA:CF:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VnGQhUeGoWr6aw7HjfsGIKuqz-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/24c324-a15e-4cd0-94c1-73ff40959348/1/VnGQhUeGoWr6aw7HjfsGIKuqz-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/24c324-a15e-4cd0-94c1-73ff40959348/1/VnGQhUeGoWr6aw7HjfsGIKuqz-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:51:c3:52:6a:76:f0:69:ee:28:ec:fc:3d:02:63:38:40:c3:
a8:86:ba:7b:f1:62:42:9e:2f:c3:9e:c3:1b:54:cb:2c:1c:b9:
7d:fb:11:3f:28:c0:94:a6:3c:c3:b3:83:43:7a:e6:bc:cb:40:
ce:19:09:40:21:8a:82:32:d2:b9:87:f7:40:0d:49:46:96:32:
16:e8:e3:cb:53:02:31:4c:37:ea:b7:ac:ec:d5:0b:98:58:f0:
7d:d4:22:68:78:32:aa:1d:c3:02:4e:3d:ae:60:8a:6b:f9:88:
82:c2:49:02:bd:bb:5e:5f:31:cc:bc:57:ae:cf:ee:6b:cd:94:
a7:6f:a9:e4:9d:54:83:f3:b4:7f:eb:f5:3d:9a:29:7c:50:56:
f3:c4:d1:6b:90:3a:ce:7a:62:5b:b0:ae:cc:09:3b:31:fd:1d:
03:12:72:c4:d3:8e:b4:09:a9:36:52:28:23:6b:9d:28:a3:6c:
43:e0:4f:d7:e5:97:6d:12:00:67:b9:02:cd:8c:c2:2f:69:77:
21:ff:cc:5b:36:06:77:dc:19:5d:1a:25:0a:b9:5a:f9:23:d0:
41:77:8d:f5:33:f8:28:ec:8d:3e:a0:95:1f:d9:f7:61:a5:d9:
da:db:b4:96:a6:d8:02:f8:d9:83:d5:10:99:be:a8:bb:99:2d:
92:06:ff:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:33:23 2025 by rpki-client