Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/bc65f6-0c3b-404e-bfad-9fa4228c02ea/1/vqbKA6jBNc7q4jLJN8HuC6uH54I.mft
File: vqbKA6jBNc7q4jLJN8HuC6uH54I.mft (raw, json)
Hash identifier: uookfnMp4XRtVY0VcsDzFvy2IOPDHkvdpsB/MdF3AM4=
Subject key identifier: 07:18:27:33:31:96:F4:1E:7C:8E:15:31:42:D3:53:4D:A0:C7:F9:5B
Authority key identifier: BE:A6:CA:03:A8:C1:35:CE:EA:E2:32:C9:37:C1:EE:0B:AB:87:E7:82
Certificate issuer: /CN=bea6ca03a8c135ceeae232c937c1ee0bab87e782
Certificate serial: 0198D660E44E6A8F369D82D9A4A8C1140492
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vqbKA6jBNc7q4jLJN8HuC6uH54I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/bc65f6-0c3b-404e-bfad-9fa4228c02ea/1/vqbKA6jBNc7q4jLJN8HuC6uH54I.mft
Manifest number: 0E63
Signing time: Sat 23 Aug 2025 10:02:10 +0000
Manifest this update: Sat 23 Aug 2025 10:02:10 +0000
Manifest next update: Sun 24 Aug 2025 10:02:10 +0000
Files and hashes: 1: RWAst6rhQtck0cf4rpJmbaVPDy4.roa (hash: ptBc35DUx8RheDUbwgxYVnrU5/IkEp9u9Ianwe8RHT0=)
2: dZgYAx_N36qliHArmqX1gaumeGY.roa (hash: f8R8/QcHyuVgs1r9zKBrMS4KaT9iNImM3nX83XfW2bA=)
3: vqbKA6jBNc7q4jLJN8HuC6uH54I.crl (hash: nKx6GuLNd+GSk9SpnNDeKIjFBHBQhnNjxoyjdF865EM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/bc65f6-0c3b-404e-bfad-9fa4228c02ea/1/vqbKA6jBNc7q4jLJN8HuC6uH54I.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/bc65f6-0c3b-404e-bfad-9fa4228c02ea/1/vqbKA6jBNc7q4jLJN8HuC6uH54I.mft
rsync://rpki.ripe.net/repository/DEFAULT/vqbKA6jBNc7q4jLJN8HuC6uH54I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:e4:4e:6a:8f:36:9d:82:d9:a4:a8:c1:14:04:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bea6ca03a8c135ceeae232c937c1ee0bab87e782
Validity
Not Before: Aug 23 10:02:10 2025 GMT
Not After : Aug 24 10:02:10 2025 GMT
Subject: CN=071827333196f41e7c8e153142d3534da0c7f95b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:08:16:c1:80:58:0e:83:29:9e:f5:83:cb:32:
71:7f:4d:d4:67:3b:80:0d:00:29:8a:f4:43:63:ea:
c4:92:35:9e:6a:46:bd:2e:b3:9a:bf:3d:62:74:cb:
4a:14:9f:02:3f:23:76:1c:6c:cd:00:be:e9:f2:1c:
80:25:5b:7b:4a:67:17:56:33:24:7f:f7:a7:ae:26:
b2:60:ac:28:4d:3c:f9:05:73:6e:0e:fc:53:f3:b1:
80:fa:8f:df:b8:c2:b1:3a:9a:e1:9d:df:ac:74:6c:
a2:13:e4:5f:46:ad:60:e2:27:1f:c9:bf:a4:b4:5d:
f0:b9:8c:46:f9:cf:09:63:e6:fe:03:41:49:a6:bd:
52:ea:af:99:35:1b:35:82:58:8b:ef:2b:ab:d9:b4:
cc:ec:95:ab:9e:e6:7a:9f:ff:07:c8:45:09:e7:75:
bd:bf:b0:9a:d9:6c:14:16:5c:e2:09:0b:f3:53:f1:
cd:a8:c4:42:eb:58:84:17:63:18:58:b1:72:f3:62:
93:88:de:5d:27:12:93:dc:ae:a7:be:8f:a1:85:c0:
40:22:2a:42:76:0e:96:49:a0:9e:34:4f:c9:75:bd:
5f:96:56:51:46:50:62:18:3b:ef:0d:0b:9f:3e:ad:
d3:fb:a3:81:e9:20:c0:7a:81:0d:7c:0d:1d:f1:85:
08:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:18:27:33:31:96:F4:1E:7C:8E:15:31:42:D3:53:4D:A0:C7:F9:5B
X509v3 Authority Key Identifier:
keyid:BE:A6:CA:03:A8:C1:35:CE:EA:E2:32:C9:37:C1:EE:0B:AB:87:E7:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqbKA6jBNc7q4jLJN8HuC6uH54I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/bc65f6-0c3b-404e-bfad-9fa4228c02ea/1/vqbKA6jBNc7q4jLJN8HuC6uH54I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/bc65f6-0c3b-404e-bfad-9fa4228c02ea/1/vqbKA6jBNc7q4jLJN8HuC6uH54I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:c7:e3:32:5f:77:2e:55:ee:39:5e:b3:57:73:da:74:1d:d2:
44:ae:95:9c:97:08:ba:17:93:78:23:61:55:fe:07:1c:41:1f:
3d:c8:2e:ee:89:e5:34:9d:0a:15:8b:32:e1:72:60:6f:bb:a5:
8f:fd:d9:18:f8:e5:18:01:4b:98:9f:55:8a:bf:e6:19:dc:d5:
4b:6d:57:81:98:f2:f1:43:da:a8:e6:a4:a0:03:a4:df:fe:fe:
16:1a:ef:ae:7a:d7:14:7b:4d:76:c2:19:5b:e8:58:c2:f1:a7:
f6:ef:fc:cc:ae:f1:e6:6b:e3:22:cf:89:0e:c7:c0:c4:b4:58:
ac:0c:93:44:28:49:e4:1a:2b:c5:cc:2b:44:41:5c:4c:48:b5:
2c:5f:fe:09:57:b8:26:ff:81:39:c9:d6:ff:0f:23:9d:50:b3:
17:2f:89:9f:21:14:ca:d2:37:8a:15:bd:66:ac:aa:32:66:4e:
98:04:c7:6d:4b:b4:66:55:98:57:7d:8c:23:34:79:e6:12:4d:
72:87:30:8d:d9:41:12:23:5b:85:c8:a1:9d:57:ea:1a:16:20:
fb:cb:d8:3d:7a:06:b2:3b:41:9c:85:36:18:cc:27:ac:da:05:
79:6f:7e:3b:41:59:45:e4:e8:46:5c:59:dd:64:2c:e4:cf:bb:
d6:39:98:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:45:12 2025 by rpki-client