Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/VAavgE71pjb0ZOcajUHo1AGn9pc.mft
File: VAavgE71pjb0ZOcajUHo1AGn9pc.mft (raw, json)
Hash identifier: 0GVBXn42wAxtUjuh2WXjZ8xFCDm0mfTpbahD9xUhTRY=
Subject key identifier: A2:66:31:1B:93:63:80:34:73:15:0A:16:B9:90:F4:81:70:27:65:28
Authority key identifier: 54:06:AF:80:4E:F5:A6:36:F4:64:E7:1A:8D:41:E8:D4:01:A7:F6:97
Certificate issuer: /CN=5406af804ef5a636f464e71a8d41e8d401a7f697
Certificate serial: 0198D515F893C1DA4BA4A284083C88844E30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VAavgE71pjb0ZOcajUHo1AGn9pc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/VAavgE71pjb0ZOcajUHo1AGn9pc.mft
Manifest number: 15DC
Signing time: Sat 23 Aug 2025 04:00:43 +0000
Manifest this update: Sat 23 Aug 2025 04:00:43 +0000
Manifest next update: Sun 24 Aug 2025 04:00:43 +0000
Files and hashes: 1: IxyW73OMckCNett38gRruShmhsE.roa (hash: kwXxrh4BlKqwqWrrFQAbZ+7ZY9nBQf7G/9/mLoszBNE=)
2: VAavgE71pjb0ZOcajUHo1AGn9pc.crl (hash: 7WPYvl2Moasy+2O6/tqi1vBe0vnZAo9aRLUfIL1yyX4=)
3: _FNz_oG2zcFLeFpovQJ_R2vg-vc.roa (hash: SUqY4ZQvD6jvXvZ8JF1d/vGljIMHXNiGDX2pW4O5ywc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/VAavgE71pjb0ZOcajUHo1AGn9pc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/VAavgE71pjb0ZOcajUHo1AGn9pc.mft
rsync://rpki.ripe.net/repository/DEFAULT/VAavgE71pjb0ZOcajUHo1AGn9pc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:f8:93:c1:da:4b:a4:a2:84:08:3c:88:84:4e:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5406af804ef5a636f464e71a8d41e8d401a7f697
Validity
Not Before: Aug 23 04:00:43 2025 GMT
Not After : Aug 24 04:00:43 2025 GMT
Subject: CN=a266311b9363803473150a16b990f48170276528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:60:50:f1:79:60:54:ac:92:54:d3:7d:39:b8:
b7:5d:16:75:bd:da:ff:37:1e:d7:63:ed:a4:75:ad:
1f:a1:41:7a:0d:21:2c:d5:5f:2e:c0:5f:29:8d:44:
e0:73:fa:1d:bf:54:cf:e4:55:04:1f:47:b5:9a:58:
14:0f:b7:c4:43:93:60:40:7d:a3:e3:91:b5:9d:44:
0b:de:97:38:42:23:5b:e5:d7:c4:b3:fb:df:73:56:
ab:79:e0:38:0a:d1:be:52:b1:86:50:67:9e:db:4e:
07:27:0c:9b:a4:49:1a:a3:08:b4:0b:b4:d7:39:e3:
3a:9e:e3:88:f8:e3:f5:0d:04:d5:9a:3d:06:7a:78:
cc:3f:b6:c4:1f:59:cf:b5:f9:fe:93:8e:38:f6:3b:
4b:24:3e:bf:63:d1:af:d4:d8:da:b7:37:9e:90:fd:
d6:83:33:f9:4f:4f:f8:86:00:9e:12:24:51:51:44:
e7:bd:70:6b:7b:76:d0:4a:55:59:a8:ce:58:e2:5e:
eb:1d:f2:69:7f:47:8e:5c:ec:29:a2:94:6d:b0:a2:
75:2c:b9:ae:16:30:d2:0c:e5:87:7e:d7:a0:5c:4d:
56:d8:45:6d:7b:d0:e3:53:f9:49:b1:9c:fc:6a:22:
0f:c2:1d:17:cc:3b:c6:c4:84:8d:8c:d4:b5:96:57:
75:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:66:31:1B:93:63:80:34:73:15:0A:16:B9:90:F4:81:70:27:65:28
X509v3 Authority Key Identifier:
keyid:54:06:AF:80:4E:F5:A6:36:F4:64:E7:1A:8D:41:E8:D4:01:A7:F6:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VAavgE71pjb0ZOcajUHo1AGn9pc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/VAavgE71pjb0ZOcajUHo1AGn9pc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/VAavgE71pjb0ZOcajUHo1AGn9pc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:79:17:b1:71:37:cc:51:8a:05:45:49:09:4b:84:20:62:bd:
18:5e:26:b0:5f:ff:6d:6d:59:48:c9:42:fa:50:78:f4:f8:bb:
2f:4c:4b:b5:51:ec:5e:b5:ec:e7:0c:87:aa:d9:e5:a0:44:6a:
5a:38:a7:5c:31:8d:cd:a9:3c:20:fc:d6:8e:76:66:19:f4:70:
e1:19:e9:84:8f:08:ae:09:8a:7d:98:68:c1:74:bc:75:88:ba:
9a:e1:e6:39:fd:6e:38:9f:dd:cd:0c:df:f1:bf:a3:e5:18:0e:
1d:19:a0:51:a9:8e:5c:b4:d2:25:f1:4f:05:a7:a2:96:cf:4c:
95:96:1a:f5:c9:73:9d:39:e3:8e:8d:b2:c7:76:9b:3e:92:60:
6a:00:57:de:aa:ad:54:99:d3:1c:82:a0:6a:99:8f:7c:dc:32:
2e:8b:20:94:27:48:52:3c:14:28:c6:ae:aa:4d:04:98:ee:17:
5c:60:df:74:56:54:a9:36:9b:04:25:39:4c:80:e4:7b:77:fa:
97:8d:d7:1f:0d:5a:74:0e:0a:72:55:fd:75:82:09:8f:f3:76:
d6:44:fd:22:b7:50:04:3f:88:ab:77:e5:d1:9c:f9:21:23:ba:
c6:43:ae:7a:a5:ff:1b:0a:5d:a5:43:d0:0f:1c:d3:e5:2c:0a:
9f:cc:55:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:33:45 2025 by rpki-client