Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/c0878d-afc6-4e70-90d3-f53c5c1756d7/1/vqPSZTUbZfI58pl94eioBneTOl4.mft
File: vqPSZTUbZfI58pl94eioBneTOl4.mft (raw, json)
Hash identifier: 6/kv3Zyuj8tgBqP6YoD/Ivhn3oNeVKS1VM8ERoAtdVQ=
Subject key identifier: 56:31:0A:11:6B:1D:12:16:36:AE:05:CF:E8:B4:D4:21:8F:4C:77:0F
Authority key identifier: BE:A3:D2:65:35:1B:65:F2:39:F2:99:7D:E1:E8:A8:06:77:93:3A:5E
Certificate issuer: /CN=bea3d265351b65f239f2997de1e8a80677933a5e
Certificate serial: 0198D6CD680563B9B56247438BBCC18742C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vqPSZTUbZfI58pl94eioBneTOl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/c0878d-afc6-4e70-90d3-f53c5c1756d7/1/vqPSZTUbZfI58pl94eioBneTOl4.mft
Manifest number: 046F
Signing time: Sat 23 Aug 2025 12:00:42 +0000
Manifest this update: Sat 23 Aug 2025 12:00:42 +0000
Manifest next update: Sun 24 Aug 2025 12:00:42 +0000
Files and hashes: 1: qeUjFmDBXRanRORKytHhxi_chXY.roa (hash: BDfZzOuGAgs1F3dD55NRk4ttvCosc+ZV+zf9zuFmFos=)
2: vqPSZTUbZfI58pl94eioBneTOl4.crl (hash: YvZCdjFYjT3eHd3iRlZtRHl9jmlag3iPAgKNtiaCOCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/c0878d-afc6-4e70-90d3-f53c5c1756d7/1/vqPSZTUbZfI58pl94eioBneTOl4.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/c0878d-afc6-4e70-90d3-f53c5c1756d7/1/vqPSZTUbZfI58pl94eioBneTOl4.mft
rsync://rpki.ripe.net/repository/DEFAULT/vqPSZTUbZfI58pl94eioBneTOl4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:68:05:63:b9:b5:62:47:43:8b:bc:c1:87:42:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bea3d265351b65f239f2997de1e8a80677933a5e
Validity
Not Before: Aug 23 12:00:42 2025 GMT
Not After : Aug 24 12:00:42 2025 GMT
Subject: CN=56310a116b1d121636ae05cfe8b4d4218f4c770f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:69:63:fc:8f:95:b5:c4:12:20:80:d3:3a:1a:
40:75:ce:3c:c1:fb:5b:9d:6b:de:10:d2:b7:bc:b7:
1c:d7:ce:d2:30:fc:44:7c:ec:81:73:2c:ad:9d:5f:
af:56:15:a5:f3:98:33:47:06:af:e0:6c:39:79:59:
dc:be:23:d0:8c:37:76:11:5c:f3:2a:e5:d5:95:59:
8e:0e:63:a7:7a:5c:54:44:a5:a5:10:4c:f1:dd:3f:
3f:00:6a:24:03:fa:e3:ab:3d:32:0d:46:09:29:f3:
fd:a1:a3:3e:3c:f6:b9:ea:b0:c7:bf:bf:e9:cc:c3:
3b:b9:70:d3:52:fd:03:5d:b6:80:5e:41:1c:46:f9:
12:f7:7a:e3:5d:e0:f3:89:46:ce:b0:d1:ee:37:57:
a4:eb:13:dd:d9:f4:b1:41:af:d5:a7:f9:3f:c6:20:
c2:f8:51:ab:37:c6:b6:c6:b7:db:e9:af:44:d4:01:
94:25:7f:22:b4:78:fd:67:98:e2:41:6b:71:1c:c2:
ba:76:4e:74:a8:e1:1a:c5:04:8b:4b:b3:b9:15:73:
6e:1e:cb:26:24:9d:7f:98:3a:39:e1:72:ec:98:86:
b2:43:47:9d:ce:0b:39:2d:b2:75:48:f7:2b:82:f2:
dc:08:6a:e8:60:21:e2:74:e0:1c:0c:06:9f:ab:65:
60:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:31:0A:11:6B:1D:12:16:36:AE:05:CF:E8:B4:D4:21:8F:4C:77:0F
X509v3 Authority Key Identifier:
keyid:BE:A3:D2:65:35:1B:65:F2:39:F2:99:7D:E1:E8:A8:06:77:93:3A:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqPSZTUbZfI58pl94eioBneTOl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c0878d-afc6-4e70-90d3-f53c5c1756d7/1/vqPSZTUbZfI58pl94eioBneTOl4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c0878d-afc6-4e70-90d3-f53c5c1756d7/1/vqPSZTUbZfI58pl94eioBneTOl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:86:a0:21:d4:f5:65:b2:d2:9a:4d:60:51:d1:d4:81:36:0b:
b2:db:05:d6:34:0c:3e:5a:d3:10:38:52:88:8f:19:3a:e0:d9:
6a:55:bf:89:4e:15:50:7b:48:ab:6b:a5:a4:3d:07:3b:c0:82:
f1:d9:c4:3e:5b:4c:e5:61:02:22:a5:d3:ee:31:83:e0:1e:58:
a4:6d:19:24:b1:e0:de:2d:3c:ba:5d:b1:af:d3:47:c8:cc:b2:
b9:32:be:f6:a3:bf:4a:c7:67:13:49:94:6a:b3:68:1e:84:10:
e8:2b:fe:0a:5d:68:79:61:5b:6d:b9:5d:83:4b:86:53:18:25:
34:63:1e:75:df:ea:c8:f1:83:dc:65:fe:98:e1:6e:e9:71:86:
17:03:84:c0:9d:d6:6d:ac:2f:80:16:c6:64:3e:c9:5a:d3:02:
c8:6d:3e:a1:3a:5a:c7:30:a0:6f:df:fc:ff:3c:58:fe:28:b4:
24:b6:2e:4d:6b:90:08:b4:96:7d:28:72:b8:ec:56:19:4f:7e:
b5:a7:40:dc:60:51:05:8a:2e:14:02:59:66:18:98:8e:19:52:
f3:fd:78:36:cb:41:d4:78:0c:4a:a6:c2:d4:c8:de:e9:d4:fe:
5a:91:d6:a6:60:b0:3e:08:f8:fe:5a:9a:8e:41:14:8d:43:ea:
d3:7a:ca:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 20:46:13 2025 by rpki-client