Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/aaa77b-9a09-4f0a-a885-3176f0999dda/1/vqGJDDBbDy2kILAWl-O_I9SFq2Q.mft
File: vqGJDDBbDy2kILAWl-O_I9SFq2Q.mft (raw, json)
Hash identifier: 8K5uKhL+y/zR2Eb/BdfHT/yvI7dstw+yYQWWZbol5EY=
Subject key identifier: BE:5D:44:6D:8C:CB:96:35:C4:C3:CA:6A:17:2C:BB:4C:3D:6E:03:D1
Authority key identifier: BE:A1:89:0C:30:5B:0F:2D:A4:20:B0:16:97:E3:BF:23:D4:85:AB:64
Certificate issuer: /CN=bea1890c305b0f2da420b01697e3bf23d485ab64
Certificate serial: 0198D66112CD190B3996CB08533148194D30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vqGJDDBbDy2kILAWl-O_I9SFq2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/aaa77b-9a09-4f0a-a885-3176f0999dda/1/vqGJDDBbDy2kILAWl-O_I9SFq2Q.mft
Manifest number: 0E8A
Signing time: Sat 23 Aug 2025 10:02:22 +0000
Manifest this update: Sat 23 Aug 2025 10:02:22 +0000
Manifest next update: Sun 24 Aug 2025 10:02:22 +0000
Files and hashes: 1: kwNFG0wAspm4fsxR2YrPKVGk1Ig.roa (hash: Mk2aoCm4frK824+nr9MmscS3ypVOVo2+1jHAmjQT/qI=)
2: vqGJDDBbDy2kILAWl-O_I9SFq2Q.crl (hash: 0wpiFhhLW9W5GGbGRxaI7uPexdIfZIUUrxWk0pIqy64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/aaa77b-9a09-4f0a-a885-3176f0999dda/1/vqGJDDBbDy2kILAWl-O_I9SFq2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/aaa77b-9a09-4f0a-a885-3176f0999dda/1/vqGJDDBbDy2kILAWl-O_I9SFq2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/vqGJDDBbDy2kILAWl-O_I9SFq2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:12:cd:19:0b:39:96:cb:08:53:31:48:19:4d:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bea1890c305b0f2da420b01697e3bf23d485ab64
Validity
Not Before: Aug 23 10:02:22 2025 GMT
Not After : Aug 24 10:02:22 2025 GMT
Subject: CN=be5d446d8ccb9635c4c3ca6a172cbb4c3d6e03d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7b:ff:49:b3:d2:d1:4e:a0:e9:00:1c:d6:4f:
c4:49:4a:a1:8f:47:04:ae:16:d4:87:82:c6:2e:08:
14:76:d1:ff:98:18:dc:86:09:6f:ff:41:25:3f:ee:
49:fa:fc:f0:32:af:38:e8:3c:6d:6c:7a:1a:d3:48:
c4:2f:21:f6:4b:61:f5:5b:b6:78:d5:0c:4c:0c:44:
88:a5:56:dc:d7:32:06:32:27:f0:5c:d9:6a:46:db:
c2:d8:a6:86:23:d0:48:6b:e1:3c:84:1d:13:f8:d2:
96:6d:bf:ce:10:f9:af:31:9a:50:17:fa:8d:23:af:
43:f5:2d:dc:3f:18:35:9e:b4:0f:3d:6d:55:af:35:
76:fe:19:62:a5:29:1e:1e:e0:07:75:9f:0a:11:ce:
25:2b:db:4e:6b:f5:18:b1:22:cc:fa:c0:c3:cd:0d:
36:b4:c7:2f:a4:f7:3b:f3:7a:08:2d:f8:d4:87:f4:
dc:94:d1:9d:7c:1a:14:64:31:82:63:54:3e:1d:95:
3d:42:ea:d9:47:a7:8e:74:a1:60:9e:4e:fe:34:cb:
c3:6a:38:ba:f4:4b:b1:ac:92:0a:9e:08:e3:e3:c6:
99:ff:38:ad:82:f7:c1:87:89:3c:dd:6a:02:44:30:
0b:30:b8:a7:66:da:aa:c3:06:b4:6f:47:5d:f6:a7:
98:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:5D:44:6D:8C:CB:96:35:C4:C3:CA:6A:17:2C:BB:4C:3D:6E:03:D1
X509v3 Authority Key Identifier:
keyid:BE:A1:89:0C:30:5B:0F:2D:A4:20:B0:16:97:E3:BF:23:D4:85:AB:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqGJDDBbDy2kILAWl-O_I9SFq2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/aaa77b-9a09-4f0a-a885-3176f0999dda/1/vqGJDDBbDy2kILAWl-O_I9SFq2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/aaa77b-9a09-4f0a-a885-3176f0999dda/1/vqGJDDBbDy2kILAWl-O_I9SFq2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:db:a6:20:65:ef:83:61:34:97:09:90:75:fc:27:d6:28:03:
3f:0e:ce:78:9f:7e:54:3d:6e:f1:c7:c3:82:b6:6a:e5:8a:01:
a7:42:44:8b:47:76:d7:ce:29:02:96:78:02:d5:3c:81:18:9c:
9c:19:02:39:b4:24:d4:85:b7:90:c3:0b:bc:66:3d:91:f3:26:
3d:4c:25:ea:9d:dd:1b:2a:f6:73:86:52:8d:40:69:f0:f3:3f:
f4:b9:d1:66:d8:42:6c:a7:16:8b:94:d3:b3:b9:4c:c2:d4:03:
b4:35:ce:76:8a:77:aa:dc:57:b6:69:90:43:74:c2:b5:af:fa:
22:76:ea:45:df:60:b4:f2:4b:59:50:67:a3:1f:dd:14:b9:d2:
37:7a:b7:40:d9:6f:5d:1a:2b:e7:4d:8e:10:20:d0:8d:43:17:
07:5c:41:f6:51:ac:5c:bc:a9:79:ac:22:44:a7:e8:90:d7:94:
9d:71:f4:e0:06:da:59:4b:1e:f3:cc:c4:40:35:c6:c1:ac:f5:
da:81:c8:ad:76:85:10:11:2b:71:be:7a:30:9a:6a:ad:b4:f4:
74:4d:e3:42:e7:e6:8d:b1:e1:11:f4:34:7a:a8:e2:6e:83:a9:
55:9e:3c:37:68:8c:15:83:91:97:de:d6:b4:ed:cd:ed:45:fc:
38:4f:a0:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:34:49 2025 by rpki-client