Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/7bb207-f471-4b67-8cb7-e15a6c3e4ea6/1/VqAi3rCSj10aCl-wDpbK1MfZEdg.mft
File: VqAi3rCSj10aCl-wDpbK1MfZEdg.mft (raw, json)
Hash identifier: a43c+/bM6TPcKfSVgJ1OL65oPhMHm2GoGtemldPQq0o=
Subject key identifier: 3F:73:60:15:E9:F2:DD:23:5D:E1:76:4A:27:77:7F:A6:7C:C2:1B:1D
Authority key identifier: 56:A0:22:DE:B0:92:8F:5D:1A:0A:5F:B0:0E:96:CA:D4:C7:D9:11:D8
Certificate issuer: /CN=56a022deb0928f5d1a0a5fb00e96cad4c7d911d8
Certificate serial: 0198D4A7FD4546F0E0DCBDA9FB8E3F1F8EFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VqAi3rCSj10aCl-wDpbK1MfZEdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/7bb207-f471-4b67-8cb7-e15a6c3e4ea6/1/VqAi3rCSj10aCl-wDpbK1MfZEdg.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 02:00:35 +0000
Manifest this update: Sat 23 Aug 2025 02:00:35 +0000
Manifest next update: Sun 24 Aug 2025 02:00:35 +0000
Files and hashes: 1: 3boydbqbtwhdZ5CEmeaE1nZurKs.roa (hash: mbSzXY+NpIFX8W+6ZeObuPOdikS5E/3lRNbdaeW4oXA=)
2: VqAi3rCSj10aCl-wDpbK1MfZEdg.crl (hash: 6qttyeWewfgFkvQ9Q1YsTFm2LVBZRTJylq17ZvjXcA4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/7bb207-f471-4b67-8cb7-e15a6c3e4ea6/1/VqAi3rCSj10aCl-wDpbK1MfZEdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/7bb207-f471-4b67-8cb7-e15a6c3e4ea6/1/VqAi3rCSj10aCl-wDpbK1MfZEdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/VqAi3rCSj10aCl-wDpbK1MfZEdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:fd:45:46:f0:e0:dc:bd:a9:fb:8e:3f:1f:8e:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56a022deb0928f5d1a0a5fb00e96cad4c7d911d8
Validity
Not Before: Aug 23 02:00:35 2025 GMT
Not After : Aug 24 02:00:35 2025 GMT
Subject: CN=3f736015e9f2dd235de1764a27777fa67cc21b1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:cc:22:2c:03:e2:50:5f:dd:36:3f:22:90:ba:
64:9f:26:9a:7a:5e:bf:b2:bd:cd:2e:33:83:b5:18:
f5:3c:be:37:7f:5f:cd:f1:dc:71:27:eb:b2:eb:a9:
8f:0b:19:23:bc:13:aa:b8:13:86:0c:d2:14:da:c5:
36:09:31:e0:b0:84:75:ec:2e:bc:8b:cc:25:82:16:
f0:1e:c1:2a:41:f4:96:b5:08:13:96:01:41:92:3b:
30:4a:d3:69:16:60:a9:11:6f:34:50:f8:30:f0:69:
9b:cb:6c:a6:ff:5b:58:e3:f3:1e:0c:b8:da:4c:59:
a8:75:f0:9d:f7:20:f5:67:fc:5c:46:6e:29:c0:79:
7d:4b:74:f5:84:92:d0:88:99:7a:8c:02:fb:1d:bc:
f5:1f:47:33:c7:08:3d:33:de:62:3a:1a:6b:b0:2d:
15:fb:44:e2:ae:fb:bf:9a:12:e8:ad:eb:97:16:6c:
bf:98:35:4e:9f:3a:c9:31:9b:b5:48:c7:22:99:e7:
39:64:32:c7:10:bc:ad:c5:ff:95:f8:ba:c2:60:ca:
a1:45:f8:de:8a:d5:98:b6:b2:63:09:f1:30:f3:55:
4e:12:b3:99:f3:ca:8e:eb:0a:fd:50:6a:22:b7:e2:
1f:2f:27:e3:96:26:fe:21:f5:4b:ec:5f:88:d5:59:
3b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:73:60:15:E9:F2:DD:23:5D:E1:76:4A:27:77:7F:A6:7C:C2:1B:1D
X509v3 Authority Key Identifier:
keyid:56:A0:22:DE:B0:92:8F:5D:1A:0A:5F:B0:0E:96:CA:D4:C7:D9:11:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VqAi3rCSj10aCl-wDpbK1MfZEdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7bb207-f471-4b67-8cb7-e15a6c3e4ea6/1/VqAi3rCSj10aCl-wDpbK1MfZEdg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7bb207-f471-4b67-8cb7-e15a6c3e4ea6/1/VqAi3rCSj10aCl-wDpbK1MfZEdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e0:4b:73:9b:79:6e:18:7f:69:44:18:29:fb:da:46:ae:59:c9:
ce:09:63:07:6a:5f:83:87:5c:94:39:92:d0:a7:0f:93:ef:b9:
3f:fd:7f:c3:1c:8c:34:a5:8d:b9:25:66:23:b6:22:df:4d:df:
56:78:77:13:3e:f6:85:43:a0:dd:85:e5:1a:f3:66:9c:26:7d:
78:ce:7f:09:14:6b:3f:51:da:49:cc:7a:35:27:3f:f1:f2:fa:
12:3a:24:6b:2c:76:e5:a8:b1:9b:c4:0a:47:24:a8:55:24:71:
03:ff:10:67:f7:fe:ea:2b:b6:fb:77:32:80:5a:37:27:83:92:
05:d3:df:49:6b:87:3e:ce:47:c8:79:0f:b4:33:5a:cb:a8:1a:
07:2d:57:36:a4:5e:f5:aa:24:81:78:5f:46:e9:b6:3a:25:17:
14:d5:e7:c7:d2:8a:29:07:8d:41:fe:ff:71:3f:8c:9b:fe:93:
79:64:83:ad:23:a7:ef:65:3e:c1:d2:bf:65:89:c5:0e:66:f9:
06:05:f2:83:67:bd:b1:58:e2:9a:28:67:6e:6d:10:a1:76:28:
a7:2f:05:0e:fe:d1:23:fb:d5:24:a9:28:5a:90:b9:78:b5:72:
eb:98:17:48:8c:12:b1:6b:33:fc:f9:08:7f:f7:6d:b8:6f:07:
af:c9:1f:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:50:42 2025 by rpki-client