Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/3cd45f-0b79-43b7-a9e6-c0bcedb34274/1/vaHlX3ROFBK9dT_Sd7d0CNzfjLQ.mft
File: vaHlX3ROFBK9dT_Sd7d0CNzfjLQ.mft (raw, json)
Hash identifier: qUW2JpDRxa8C+5TmTWKnHfI8Ptxmf/uWZK3TP60f3ns=
Subject key identifier: F7:DA:30:31:A4:A3:95:7E:83:5F:3A:F2:B7:D2:8C:CA:F0:C9:93:DC
Authority key identifier: BD:A1:E5:5F:74:4E:14:12:BD:75:3F:D2:77:B7:74:08:DC:DF:8C:B4
Certificate issuer: /CN=bda1e55f744e1412bd753fd277b77408dcdf8cb4
Certificate serial: 0198D54E8C8FA2FD627E8BB8205C7E5F4C78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vaHlX3ROFBK9dT_Sd7d0CNzfjLQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/3cd45f-0b79-43b7-a9e6-c0bcedb34274/1/vaHlX3ROFBK9dT_Sd7d0CNzfjLQ.mft
Manifest number: 1034
Signing time: Sat 23 Aug 2025 05:02:31 +0000
Manifest this update: Sat 23 Aug 2025 05:02:31 +0000
Manifest next update: Sun 24 Aug 2025 05:02:31 +0000
Files and hashes: 1: A6rb1dzlDcV8JbvloxjZ9srng9Y.roa (hash: p6jxR8xYwMN0t2VYMZkdONNHxcFxVga3IwawawK72KQ=)
2: vaHlX3ROFBK9dT_Sd7d0CNzfjLQ.crl (hash: 8vWmg65f9P5NnwCVEDKi5nuHWSK2TIf/5YUVYBx/yEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/3cd45f-0b79-43b7-a9e6-c0bcedb34274/1/vaHlX3ROFBK9dT_Sd7d0CNzfjLQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/3cd45f-0b79-43b7-a9e6-c0bcedb34274/1/vaHlX3ROFBK9dT_Sd7d0CNzfjLQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/vaHlX3ROFBK9dT_Sd7d0CNzfjLQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:8c:8f:a2:fd:62:7e:8b:b8:20:5c:7e:5f:4c:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bda1e55f744e1412bd753fd277b77408dcdf8cb4
Validity
Not Before: Aug 23 05:02:31 2025 GMT
Not After : Aug 24 05:02:31 2025 GMT
Subject: CN=f7da3031a4a3957e835f3af2b7d28ccaf0c993dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ec:bd:b5:a7:f0:f5:86:09:d2:69:21:25:ca:
6e:45:bb:11:23:16:34:d0:1f:01:e9:ea:aa:ac:49:
b0:b8:96:7c:36:13:90:2b:0b:6c:4a:77:05:de:86:
28:1e:61:22:d8:fb:0d:1b:6f:fe:20:31:f0:38:23:
4b:15:ec:62:d1:6f:1a:5e:f4:6e:e8:98:6a:b8:b8:
4a:0c:f3:bd:2f:9f:d4:db:69:99:d5:38:4c:58:ee:
d5:9a:f1:80:0b:71:23:99:aa:17:1e:63:85:3d:b4:
a8:92:02:b9:16:b6:18:bd:a3:66:eb:84:8f:ff:67:
46:c5:52:d5:34:d7:96:d1:0c:71:57:dd:14:02:da:
dc:7a:ae:d7:55:86:75:e7:96:1f:e7:51:48:bf:46:
47:07:96:b5:bd:0d:19:8f:e3:82:ff:2a:e6:0f:cd:
1a:34:3b:a1:57:91:81:dc:04:63:2d:62:bb:89:90:
35:3a:e5:26:ce:3c:35:ad:3b:1b:1b:5b:7d:35:73:
3e:a5:b0:0f:8a:0c:70:b1:d3:92:62:47:3f:ad:46:
7f:b9:a2:03:3e:d4:ba:68:00:20:ac:19:09:59:81:
3c:aa:23:e8:16:a6:1a:1b:d8:dd:f5:29:b1:f4:13:
a1:a0:9b:c8:9d:05:d5:86:0e:74:ae:76:dc:26:6f:
a0:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:DA:30:31:A4:A3:95:7E:83:5F:3A:F2:B7:D2:8C:CA:F0:C9:93:DC
X509v3 Authority Key Identifier:
keyid:BD:A1:E5:5F:74:4E:14:12:BD:75:3F:D2:77:B7:74:08:DC:DF:8C:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vaHlX3ROFBK9dT_Sd7d0CNzfjLQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3cd45f-0b79-43b7-a9e6-c0bcedb34274/1/vaHlX3ROFBK9dT_Sd7d0CNzfjLQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3cd45f-0b79-43b7-a9e6-c0bcedb34274/1/vaHlX3ROFBK9dT_Sd7d0CNzfjLQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:08:41:50:a6:fd:4d:ec:69:e5:30:d3:ef:cc:15:d2:cc:cf:
b7:50:b7:88:99:80:49:eb:9c:c3:cd:02:10:e0:cd:13:1e:39:
36:64:90:d0:0e:cc:32:cb:4b:ad:1b:42:bc:60:0d:c5:2e:64:
63:4e:70:26:6e:51:7f:d7:d7:28:33:42:5b:59:6f:5a:26:42:
57:f5:fa:0c:7d:d4:a7:f3:5a:94:e7:9e:24:92:b0:69:e4:de:
55:b6:48:24:ce:d6:38:eb:fa:fe:e1:e9:5d:16:86:3b:e6:01:
3b:ff:0f:ed:32:bb:38:ec:79:a9:0b:cc:ca:44:fb:15:02:98:
94:17:24:12:1d:c9:ea:3e:9c:15:ee:d1:7c:23:6a:ea:4e:53:
3d:66:1c:4f:43:0c:85:ae:1b:3e:79:96:5b:3f:54:9a:1d:dc:
3f:06:89:d4:02:91:64:23:c6:af:25:f3:8f:ef:9f:10:a5:d0:
4e:85:49:f9:dc:d4:ba:d4:a1:2d:37:a6:18:d3:e5:29:a1:6a:
b0:46:99:4b:d2:83:ac:6b:41:97:4c:1b:77:b2:f3:cc:7c:22:
19:31:d4:91:51:d7:1d:13:ee:b7:99:75:cb:be:64:27:c1:7b:
8b:56:c1:ff:24:c0:fb:9f:a1:75:5a:a1:8c:00:d5:d0:b4:8b:
dc:47:e1:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:13:05 2025 by rpki-client