Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/90c5be-2f6e-4441-9461-3bd79ffc6398/1/vdQmL2QrG7C1Oyptd5jAiZ0eTUM.mft
File: vdQmL2QrG7C1Oyptd5jAiZ0eTUM.mft (raw, json)
Hash identifier: 4svhMAxBFt7aEBf3YT1KYn3BbvuO5kHX0rU8wfpgDQY=
Subject key identifier: 54:E7:66:B9:52:DC:76:5D:F3:26:07:BD:A0:67:75:DD:40:E0:01:B5
Authority key identifier: BD:D4:26:2F:64:2B:1B:B0:B5:3B:2A:6D:77:98:C0:89:9D:1E:4D:43
Certificate issuer: /CN=bdd4262f642b1bb0b53b2a6d7798c0899d1e4d43
Certificate serial: 0198D4A7A169552526E2289B8AC8FEB3F5B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vdQmL2QrG7C1Oyptd5jAiZ0eTUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/90c5be-2f6e-4441-9461-3bd79ffc6398/1/vdQmL2QrG7C1Oyptd5jAiZ0eTUM.mft
Manifest number: 0BAD
Signing time: Sat 23 Aug 2025 02:00:12 +0000
Manifest this update: Sat 23 Aug 2025 02:00:12 +0000
Manifest next update: Sun 24 Aug 2025 02:00:12 +0000
Files and hashes: 1: 3Vc8GAv3OdpXw-IEwIeY1NxUP6c.roa (hash: qDWay94UtnkH+WvsjYkj9wPwpR3+5E60OgC2LXVgLK8=)
2: hj3e4V3BcXmmC3J4J-LR8jJvgpQ.roa (hash: ajCXRDGbAHENq7O0wMkVKgSnARDHbWRHh8qUlDNLW3k=)
3: o3kVjVR-Bk2kY6NJIMAGFLe8Jgw.roa (hash: RhEyDbo5nJOAevwisCtwUttff0SfpdFcDo7LzXQNDoo=)
4: vdQmL2QrG7C1Oyptd5jAiZ0eTUM.crl (hash: i5/xrrgvdSp8cKeCvitkvUHbZPNLebUNTOesn2nk2S0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/90c5be-2f6e-4441-9461-3bd79ffc6398/1/vdQmL2QrG7C1Oyptd5jAiZ0eTUM.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/90c5be-2f6e-4441-9461-3bd79ffc6398/1/vdQmL2QrG7C1Oyptd5jAiZ0eTUM.mft
rsync://rpki.ripe.net/repository/DEFAULT/vdQmL2QrG7C1Oyptd5jAiZ0eTUM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:a1:69:55:25:26:e2:28:9b:8a:c8:fe:b3:f5:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdd4262f642b1bb0b53b2a6d7798c0899d1e4d43
Validity
Not Before: Aug 23 02:00:12 2025 GMT
Not After : Aug 24 02:00:12 2025 GMT
Subject: CN=54e766b952dc765df32607bda06775dd40e001b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3e:3b:55:fd:7d:a9:75:b1:9c:70:e5:6e:e0:
fd:26:f3:b6:cb:2b:9e:55:f9:a7:ae:9e:10:70:60:
de:5b:f9:dc:7a:b9:a0:6f:cf:65:9b:da:d7:55:b3:
52:3a:26:95:76:f4:d8:d0:54:f3:ef:7b:9e:f9:55:
17:6d:08:37:26:86:7c:4a:e6:7d:55:34:83:b1:a3:
38:54:59:f3:97:73:a5:76:fc:e7:d4:bc:00:45:01:
86:60:bc:16:40:c7:fc:83:80:4f:f7:51:37:3d:99:
96:46:7d:f2:3e:d1:43:14:90:39:41:d0:27:46:c2:
e4:78:ca:b3:dc:7b:b4:e0:6f:bb:09:0c:a4:2d:f8:
77:c0:50:37:72:1a:39:6c:c2:28:b2:2b:a2:aa:17:
17:9d:72:c1:b5:69:cb:c1:15:af:54:77:ab:7a:17:
8e:18:31:13:08:0b:55:47:02:a3:20:03:fd:67:72:
69:5f:91:fb:52:19:23:64:56:00:3b:cd:ef:15:e4:
62:d3:ab:27:55:9b:e2:92:b0:ca:77:c0:5c:d1:73:
15:45:9e:df:4a:20:bd:42:72:21:ac:ff:57:62:d9:
de:7d:e8:95:4e:5c:f7:81:35:ba:ab:e9:b2:dc:5c:
62:10:a9:79:e2:4e:77:13:f1:04:02:25:86:6e:34:
d3:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:E7:66:B9:52:DC:76:5D:F3:26:07:BD:A0:67:75:DD:40:E0:01:B5
X509v3 Authority Key Identifier:
keyid:BD:D4:26:2F:64:2B:1B:B0:B5:3B:2A:6D:77:98:C0:89:9D:1E:4D:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vdQmL2QrG7C1Oyptd5jAiZ0eTUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/90c5be-2f6e-4441-9461-3bd79ffc6398/1/vdQmL2QrG7C1Oyptd5jAiZ0eTUM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/90c5be-2f6e-4441-9461-3bd79ffc6398/1/vdQmL2QrG7C1Oyptd5jAiZ0eTUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:d6:2d:29:96:92:0f:21:24:62:3f:16:72:10:02:7f:bc:a0:
26:da:b4:63:2c:54:c7:4b:a8:a8:15:2f:86:85:27:75:87:06:
b8:06:fb:5b:03:5a:cf:62:62:df:2f:38:3c:6e:bf:f3:8f:65:
20:5d:b1:7c:b3:2c:f5:97:d1:69:1b:3e:6d:e8:1d:4e:7e:d6:
b0:f4:b7:2b:2b:fe:e5:bd:0e:2c:86:ef:96:0b:0e:71:3b:de:
68:cb:b6:ed:e0:f5:9d:50:05:a9:13:d9:e9:23:cf:c6:ee:9d:
0a:81:6d:63:66:5e:4d:21:5f:58:bd:45:bf:25:0b:b9:0d:aa:
e6:c0:c2:48:1c:28:84:d2:03:84:45:32:1b:a8:2c:38:e6:11:
77:b0:67:73:8c:d5:07:55:62:aa:06:de:0d:74:20:3a:2b:f2:
4e:d7:4f:77:10:be:ef:e5:25:40:7b:bc:97:68:26:ec:26:a1:
13:db:1f:16:53:c1:f0:b7:1e:b8:4b:22:10:6f:ab:dd:79:78:
fd:a3:a2:04:37:c2:c0:2c:f6:6e:8b:c0:41:53:3e:f4:83:35:
e3:5b:1e:12:9f:f7:82:14:e7:de:fc:92:2e:50:d5:50:6a:46:
dc:23:8d:df:26:8e:d3:e4:fe:e8:0e:6b:bb:1b:fb:4d:60:f1:
07:85:9d:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:30:53 2025 by rpki-client