Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.mft
File: VAxPdC_TKaNvzSnE65hOX0lRXZk.mft (raw, json)
Hash identifier: CjoC2/nvPWOi4HaMqBlWSSRgt0nZiWIYeTqJYVdy62Q=
Subject key identifier: 72:DC:F6:D3:FD:24:41:B9:BB:6E:55:3B:3F:2E:C6:21:D2:4A:A9:7F
Authority key identifier: 54:0C:4F:74:2F:D3:29:A3:6F:CD:29:C4:EB:98:4E:5F:49:51:5D:99
Certificate issuer: /CN=540c4f742fd329a36fcd29c4eb984e5f49515d99
Certificate serial: 0198D5164152138632C335CADF3A2363CC5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VAxPdC_TKaNvzSnE65hOX0lRXZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.mft
Manifest number: 103D
Signing time: Sat 23 Aug 2025 04:01:02 +0000
Manifest this update: Sat 23 Aug 2025 04:01:02 +0000
Manifest next update: Sun 24 Aug 2025 04:01:02 +0000
Files and hashes: 1: 6hSnRR0poSKLkgYbDLBwSreCHXw.roa (hash: 2LSwLZwlqMozkmvNpXnEPuZJylqRvk5GNtgnCAWWf9Y=)
2: VAxPdC_TKaNvzSnE65hOX0lRXZk.crl (hash: YK/ztNuAfLoGQLU1s9v2mFnG7u6r3GPdHpuzYGLjKIc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VAxPdC_TKaNvzSnE65hOX0lRXZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:41:52:13:86:32:c3:35:ca:df:3a:23:63:cc:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=540c4f742fd329a36fcd29c4eb984e5f49515d99
Validity
Not Before: Aug 23 04:01:02 2025 GMT
Not After : Aug 24 04:01:02 2025 GMT
Subject: CN=72dcf6d3fd2441b9bb6e553b3f2ec621d24aa97f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:72:83:b0:6d:d9:84:1d:eb:99:21:20:2e:4e:
4b:a6:c3:38:5b:75:63:05:09:80:cc:81:dd:c4:39:
89:d0:f9:51:7c:be:72:6f:5c:1e:e3:33:97:78:90:
28:ff:90:68:29:0b:16:da:11:9e:69:4e:cd:15:4a:
6e:0a:88:8c:04:5a:72:98:3a:77:9f:8c:fe:a6:cd:
db:79:c0:be:15:f3:43:b6:93:0f:7d:da:eb:b2:d2:
be:76:07:19:c2:6c:ce:c1:56:2d:d0:d2:03:e0:a8:
97:9f:2a:a7:2c:a9:bc:b6:bb:46:af:c7:7b:aa:4d:
67:95:dc:11:9f:7d:92:c9:82:b5:7d:06:3c:c4:3e:
9b:6b:c1:a6:ff:1e:99:8a:1f:4b:96:97:8a:83:34:
00:86:ea:b9:33:12:e6:6a:68:66:45:e4:85:32:6f:
7c:2f:5d:19:42:b8:9b:77:0d:ee:3b:37:37:63:02:
84:bb:18:27:6a:a9:8e:7d:7d:db:00:39:99:d6:f3:
33:de:2d:9c:dd:6d:23:ee:ec:13:83:ee:72:c4:a5:
c9:a2:40:b6:6a:78:b2:1a:14:a9:04:71:79:e6:92:
6c:f0:57:ca:5c:4e:fa:a8:64:93:e4:1b:44:a9:7a:
bd:23:7b:1c:56:dc:3b:99:40:2c:96:9e:3a:b4:8e:
63:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:DC:F6:D3:FD:24:41:B9:BB:6E:55:3B:3F:2E:C6:21:D2:4A:A9:7F
X509v3 Authority Key Identifier:
keyid:54:0C:4F:74:2F:D3:29:A3:6F:CD:29:C4:EB:98:4E:5F:49:51:5D:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VAxPdC_TKaNvzSnE65hOX0lRXZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:6c:7f:3d:79:32:71:ab:f5:8c:b1:8f:e2:be:52:15:b4:f2:
4f:5f:f2:8c:c1:2f:d5:e4:87:d8:5b:e7:44:05:c1:83:22:ad:
8b:7e:4c:34:0b:29:c3:02:f3:eb:2c:69:c2:cd:9e:c4:35:ef:
8e:4d:fa:ce:88:f4:bf:e1:71:4e:c4:76:a3:a9:b6:fc:69:c4:
d1:b4:69:44:26:c4:3a:d3:c8:19:8f:a1:e8:31:43:4e:c8:51:
3e:de:ab:59:d6:68:48:be:d0:54:b7:1b:08:ee:27:1c:e9:3b:
18:d0:c0:5c:e4:3d:c0:b0:48:c0:3a:27:1c:2e:7f:27:03:9f:
f5:6c:1e:61:df:20:3d:11:a5:60:1f:89:63:d3:6c:80:2a:de:
85:d6:a2:8b:54:50:bd:b4:4f:ce:83:13:d1:11:35:ff:2d:13:
5b:fc:ee:e4:a9:ca:b8:07:a9:00:12:bc:04:b1:c4:9e:18:dc:
5f:19:a1:b7:41:6d:f8:8f:ec:f6:b7:42:97:1f:bb:55:a3:30:
9b:d3:76:93:01:69:b3:a1:94:6e:f2:c8:0b:df:61:71:53:b8:
30:64:17:4f:6c:87:71:99:19:24:6f:83:d3:6b:58:fd:7b:33:
bd:14:1a:69:e8:2a:86:9b:f6:d2:54:07:f4:c5:12:26:57:01:
c4:90:28:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:25:51 2025 by rpki-client