Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/05e994-318d-4a54-b629-173f0096bd85/1/VdBq_SbSUiNCenoNX54xWQY_vKM.mft
File: VdBq_SbSUiNCenoNX54xWQY_vKM.mft (raw, json)
Hash identifier: VO50UWTyVkoc1ywehSjJqXHJCnC/9mSa0UEcMzdWrvM=
Subject key identifier: 14:A8:D6:6C:EE:35:CA:4B:3C:3A:8C:41:ED:66:89:D7:C7:E5:8E:76
Authority key identifier: 55:D0:6A:FD:26:D2:52:23:42:7A:7A:0D:5F:9E:31:59:06:3F:BC:A3
Certificate issuer: /CN=55d06afd26d25223427a7a0d5f9e3159063fbca3
Certificate serial: 0198D5838E16B1F689877E65A854105DAC56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VdBq_SbSUiNCenoNX54xWQY_vKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/05e994-318d-4a54-b629-173f0096bd85/1/VdBq_SbSUiNCenoNX54xWQY_vKM.mft
Manifest number: 1042
Signing time: Sat 23 Aug 2025 06:00:25 +0000
Manifest this update: Sat 23 Aug 2025 06:00:25 +0000
Manifest next update: Sun 24 Aug 2025 06:00:25 +0000
Files and hashes: 1: LGr3W12gg5B5iAQGS4LlAtKKquM.roa (hash: E6DrGRYtfy1QPOk4PfrfkhjZuBFDW5GfEmSOYSVlg/k=)
2: VdBq_SbSUiNCenoNX54xWQY_vKM.crl (hash: 7Ee6iCwzomL08rJsxo16BhxDhJiKznruZ731XIz7DKQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/05e994-318d-4a54-b629-173f0096bd85/1/VdBq_SbSUiNCenoNX54xWQY_vKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/05e994-318d-4a54-b629-173f0096bd85/1/VdBq_SbSUiNCenoNX54xWQY_vKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/VdBq_SbSUiNCenoNX54xWQY_vKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:8e:16:b1:f6:89:87:7e:65:a8:54:10:5d:ac:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55d06afd26d25223427a7a0d5f9e3159063fbca3
Validity
Not Before: Aug 23 06:00:25 2025 GMT
Not After : Aug 24 06:00:25 2025 GMT
Subject: CN=14a8d66cee35ca4b3c3a8c41ed6689d7c7e58e76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:cc:f6:45:00:c3:3e:c9:4e:35:db:00:b5:8a:
b7:ed:c4:b7:21:9b:0b:b9:39:16:38:37:dd:09:3e:
e0:51:b3:72:a4:13:ae:ad:78:49:5d:e3:e7:b1:ad:
a7:90:4f:2f:dd:17:b1:4c:5e:e1:2a:01:de:46:f4:
55:ce:da:99:0e:2d:f1:5c:d6:cc:c0:1c:89:14:33:
7c:37:4b:78:5c:e1:53:fe:50:d0:5d:4f:a5:14:7a:
5b:4f:bc:32:45:e6:19:53:0a:ab:b8:97:1c:4c:b5:
4a:31:f4:f0:92:51:2e:cf:17:f7:2c:d1:1c:05:14:
65:95:24:23:0f:f4:aa:6f:60:48:32:bf:1d:ea:64:
2e:37:40:73:32:43:b1:c3:2b:a9:e2:92:ee:40:8d:
f0:76:84:e6:bc:b1:3c:48:92:57:58:52:6b:fd:67:
c3:46:b3:d6:af:83:d8:40:45:4a:8d:fd:c2:4f:6d:
ed:6f:5d:01:9e:4d:69:75:31:d1:b7:1c:92:2a:93:
78:5f:4f:09:22:0c:f6:5a:d1:a4:89:6a:d5:05:75:
62:68:d2:35:40:20:eb:8a:61:56:32:f9:7f:16:6f:
bd:37:fa:0c:49:ae:ac:4b:ba:f8:d7:04:b4:72:9d:
92:7c:75:f2:e0:5b:7f:70:e7:9c:c0:bc:6d:22:d3:
77:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:A8:D6:6C:EE:35:CA:4B:3C:3A:8C:41:ED:66:89:D7:C7:E5:8E:76
X509v3 Authority Key Identifier:
keyid:55:D0:6A:FD:26:D2:52:23:42:7A:7A:0D:5F:9E:31:59:06:3F:BC:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VdBq_SbSUiNCenoNX54xWQY_vKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/05e994-318d-4a54-b629-173f0096bd85/1/VdBq_SbSUiNCenoNX54xWQY_vKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/05e994-318d-4a54-b629-173f0096bd85/1/VdBq_SbSUiNCenoNX54xWQY_vKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:62:ab:28:5a:a8:16:9c:5e:21:28:03:e6:91:59:05:d7:38:
ea:99:2e:f9:f6:96:38:03:12:9b:a0:37:fd:6f:02:47:89:62:
e8:6e:70:47:c5:e0:29:34:44:2a:48:0b:27:12:ed:17:75:b4:
f1:86:65:ac:30:74:9a:5d:15:d5:af:c9:c1:58:8a:52:d3:22:
d3:49:55:6a:b4:f6:89:fa:0d:df:06:73:93:08:7e:d4:17:b3:
1d:46:25:b9:27:03:be:db:a8:e6:0f:d7:7b:dd:f1:57:10:81:
75:b0:b8:4c:fb:74:a8:8b:3e:48:d7:13:0b:ee:79:0a:b7:c8:
c3:77:21:18:11:ce:fb:f0:49:ae:cf:02:5e:33:b7:c1:77:a9:
7c:60:42:a1:1b:9f:68:b3:e0:2c:1f:7b:4d:00:83:c0:64:c3:
d1:4c:1c:16:55:2f:91:08:a6:f7:62:dc:c6:56:c8:d8:0b:b3:
da:24:85:1f:bd:a2:d1:eb:a4:6b:e3:43:a4:8a:07:29:cb:54:
4a:cd:df:f2:de:dd:7b:86:28:b4:fb:7a:55:85:04:19:73:f1:
1c:8a:18:7e:85:d3:f2:b3:b4:66:b5:08:d7:36:15:7f:f6:8c:
2f:2b:61:d8:ab:ac:61:06:97:7b:83:0d:9a:15:f1:a8:a0:6f:
84:e9:0e:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:28:14 2025 by rpki-client