Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/aedb03-b04c-4212-813b-ff25ba599031/1/VQt8DIuuYQ9-UZwEhaR3O860jas.mft
File: VQt8DIuuYQ9-UZwEhaR3O860jas.mft (raw, json)
Hash identifier: PrLWRo4DExsGzu5ehs0riql3SUG1Ax/hcsKFTBvA1PY=
Subject key identifier: 92:21:EE:3A:AD:9B:7A:F6:F9:37:D5:FD:27:0C:07:4E:E7:27:32:2C
Authority key identifier: 55:0B:7C:0C:8B:AE:61:0F:7E:51:9C:04:85:A4:77:3B:CE:B4:8D:AB
Certificate issuer: /CN=550b7c0c8bae610f7e519c0485a4773bceb48dab
Certificate serial: 0198D660A29C679378E3753594A5C9B6C826
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VQt8DIuuYQ9-UZwEhaR3O860jas.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/aedb03-b04c-4212-813b-ff25ba599031/1/VQt8DIuuYQ9-UZwEhaR3O860jas.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 10:01:53 +0000
Manifest this update: Sat 23 Aug 2025 10:01:53 +0000
Manifest next update: Sun 24 Aug 2025 10:01:53 +0000
Files and hashes: 1: 3qH8ZS9wbp4ZckrapmstLsBtl4U.roa (hash: 15PfLViKUV8ieAONMSTBZ+uuNJdfqoHQHR26dEyF8eQ=)
2: 5puypGdPqGafWp1AyvNSb1EuBNw.roa (hash: qaaid804rsK3hU7FOxciCy5ptxREK/wMCBWzAUs6cK0=)
3: VQt8DIuuYQ9-UZwEhaR3O860jas.crl (hash: HFcoF1g3ckTuw9kK4FJujmB/IEM5lKdzhefQ57iienA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/aedb03-b04c-4212-813b-ff25ba599031/1/VQt8DIuuYQ9-UZwEhaR3O860jas.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/aedb03-b04c-4212-813b-ff25ba599031/1/VQt8DIuuYQ9-UZwEhaR3O860jas.mft
rsync://rpki.ripe.net/repository/DEFAULT/VQt8DIuuYQ9-UZwEhaR3O860jas.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:a2:9c:67:93:78:e3:75:35:94:a5:c9:b6:c8:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=550b7c0c8bae610f7e519c0485a4773bceb48dab
Validity
Not Before: Aug 23 10:01:53 2025 GMT
Not After : Aug 24 10:01:53 2025 GMT
Subject: CN=9221ee3aad9b7af6f937d5fd270c074ee727322c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b6:5a:d1:45:87:a8:83:c4:bf:87:8a:ad:2e:
f6:8b:e3:e8:49:a7:9e:5d:ee:cc:3e:62:dd:cc:82:
71:66:99:b6:30:61:96:6e:cb:ea:af:59:ab:99:bd:
7b:e9:9f:54:d0:cd:b0:32:8b:40:16:20:8f:d5:ca:
96:03:db:49:cf:0d:5f:2d:9c:44:ac:f2:04:10:22:
7a:26:51:f7:05:e8:10:bd:d4:05:14:6e:40:99:91:
d2:73:5d:fa:49:93:69:bb:60:54:12:85:9c:25:2f:
96:28:b5:7f:1d:7e:d0:83:77:d6:6e:1c:eb:57:03:
fb:9c:52:bc:d8:3d:48:a0:cd:e5:33:95:34:cb:7e:
a2:e9:ff:92:e1:a2:a8:57:a3:f1:67:c5:80:c1:6f:
6e:b1:86:5e:b1:39:6b:92:4c:62:af:93:03:b5:0f:
0d:56:c9:17:92:77:da:c3:98:72:5e:2b:c7:a6:d6:
22:e7:88:6a:42:78:93:c7:1d:96:6a:f7:2b:f4:3e:
0c:3a:d7:ce:e0:f1:78:48:b0:fe:57:7f:eb:ad:db:
e4:9c:e7:58:27:b9:7f:ab:b4:02:a7:6a:cb:49:30:
2b:93:f1:a0:fd:01:66:55:4b:4c:c2:95:b7:46:f7:
9b:bc:0d:89:0a:d5:9b:87:2b:6c:7b:bb:a5:37:3d:
72:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:21:EE:3A:AD:9B:7A:F6:F9:37:D5:FD:27:0C:07:4E:E7:27:32:2C
X509v3 Authority Key Identifier:
keyid:55:0B:7C:0C:8B:AE:61:0F:7E:51:9C:04:85:A4:77:3B:CE:B4:8D:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VQt8DIuuYQ9-UZwEhaR3O860jas.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/aedb03-b04c-4212-813b-ff25ba599031/1/VQt8DIuuYQ9-UZwEhaR3O860jas.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/aedb03-b04c-4212-813b-ff25ba599031/1/VQt8DIuuYQ9-UZwEhaR3O860jas.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:36:78:26:24:85:3e:3b:3f:f2:ae:f1:f9:43:9d:62:e9:28:
75:b8:6d:90:b9:9d:71:ad:fb:58:b0:c7:20:f2:c5:08:1a:db:
ba:d2:45:76:b0:85:5a:fe:3d:10:79:c0:9a:c7:0c:ef:c1:10:
f7:d4:62:6c:66:9b:1f:e8:08:53:01:06:f5:d1:1c:a6:ba:1f:
31:56:34:2f:c8:62:03:36:15:49:04:43:94:c7:94:de:9d:cf:
99:d3:32:f4:12:44:53:2d:07:88:e9:d0:89:6a:17:cf:76:f0:
4e:44:e1:ff:34:96:8a:b1:80:29:17:36:c2:d4:99:d6:bb:6b:
10:87:a6:f4:57:eb:26:76:12:2d:b5:6e:e4:95:5b:91:0b:98:
b2:d6:a4:70:3c:09:7a:20:a3:3a:a7:52:c9:91:b5:5d:33:b2:
c2:0f:0e:d5:77:ec:24:92:a4:db:7f:53:74:8d:4f:87:6b:5e:
ad:b8:3c:c4:0f:7a:41:47:3a:2e:83:04:2e:f9:57:c5:bb:3d:
94:c0:02:17:c6:07:a2:a6:3f:3d:2e:b3:16:92:0b:d8:74:9f:
6b:bf:20:7d:1e:d3:7a:15:c6:64:5f:b3:a5:77:13:29:f5:29:
79:5c:e9:3a:d9:09:b2:e7:6c:b0:97:d4:b8:97:ab:f5:81:8c:
d4:6c:bb:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:25:39 2025 by rpki-client