Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/bd0c07-e972-4d88-95e8-fc958e8d48c2/1/VuAvc1Cb3jXZXRhRgD4fAIKetxg.mft
File: VuAvc1Cb3jXZXRhRgD4fAIKetxg.mft (raw, json)
Hash identifier: q8/cxaW2n43AZU0DG4vL/4ZuqrGIIdY6RJJcb9qYVfQ=
Subject key identifier: 54:A2:CE:D6:F3:25:36:BF:AF:DF:BE:B6:80:46:0E:D5:88:61:11:67
Authority key identifier: 56:E0:2F:73:50:9B:DE:35:D9:5D:18:51:80:3E:1F:00:82:9E:B7:18
Certificate issuer: /CN=56e02f73509bde35d95d1851803e1f00829eb718
Certificate serial: 0198D4DFE1CB25693BA01B11AA837461E834
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VuAvc1Cb3jXZXRhRgD4fAIKetxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/bd0c07-e972-4d88-95e8-fc958e8d48c2/1/VuAvc1Cb3jXZXRhRgD4fAIKetxg.mft
Manifest number: 0627
Signing time: Sat 23 Aug 2025 03:01:38 +0000
Manifest this update: Sat 23 Aug 2025 03:01:38 +0000
Manifest next update: Sun 24 Aug 2025 03:01:38 +0000
Files and hashes: 1: Kk17QDRaVm55Nj1Ql5GZNxMxg-E.roa (hash: 1DI9vhSZXA/YJqAVaaagZypXr5kFSqz0lKWRcfLOEfQ=)
2: VuAvc1Cb3jXZXRhRgD4fAIKetxg.crl (hash: gTyVwCZFhcjJTURLXVX6sNsPlvubF3tJpJSGjDnqB44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/bd0c07-e972-4d88-95e8-fc958e8d48c2/1/VuAvc1Cb3jXZXRhRgD4fAIKetxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/bd0c07-e972-4d88-95e8-fc958e8d48c2/1/VuAvc1Cb3jXZXRhRgD4fAIKetxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/VuAvc1Cb3jXZXRhRgD4fAIKetxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:e1:cb:25:69:3b:a0:1b:11:aa:83:74:61:e8:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56e02f73509bde35d95d1851803e1f00829eb718
Validity
Not Before: Aug 23 03:01:38 2025 GMT
Not After : Aug 24 03:01:38 2025 GMT
Subject: CN=54a2ced6f32536bfafdfbeb680460ed588611167
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:fa:88:5f:10:d5:70:96:1b:4f:6d:c1:1c:82:
9a:87:e3:40:1c:9e:2b:76:32:32:2b:a2:4f:74:46:
11:3c:13:17:0d:d5:3e:42:58:4f:aa:6e:be:af:0e:
ae:75:f9:9a:ee:e6:1f:a7:18:0e:eb:97:a0:76:a7:
83:a3:bc:98:d1:ae:98:8c:2e:81:b2:0e:fa:ef:10:
73:95:6e:f4:6d:f1:1f:43:61:15:f1:ed:46:5e:64:
33:4e:0e:f2:c1:85:2e:9f:4b:7c:4e:4b:06:cb:32:
30:37:bd:ad:09:bc:ee:4b:91:69:68:c6:be:6b:47:
44:50:1f:01:64:79:34:1c:43:48:98:ea:de:34:a5:
29:f7:95:b9:65:1a:34:76:74:4a:01:54:bd:03:0d:
be:da:58:59:ea:e2:85:27:b1:9c:31:c0:62:75:b0:
5f:5f:c4:ce:21:fc:bd:74:cd:28:f0:bb:c4:d9:33:
67:c1:bc:08:e1:3f:1f:43:60:66:69:12:5c:9e:4c:
51:71:50:1b:a9:c6:0b:b8:80:de:ac:ea:20:9b:e6:
51:94:30:1b:1d:b1:fa:65:6a:9b:83:f8:76:c0:69:
0a:ea:ee:c1:5a:48:f6:aa:46:92:4d:1f:a4:ed:51:
97:07:ea:97:bd:ec:9e:d3:cc:80:ff:75:49:2e:fb:
1b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:A2:CE:D6:F3:25:36:BF:AF:DF:BE:B6:80:46:0E:D5:88:61:11:67
X509v3 Authority Key Identifier:
keyid:56:E0:2F:73:50:9B:DE:35:D9:5D:18:51:80:3E:1F:00:82:9E:B7:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VuAvc1Cb3jXZXRhRgD4fAIKetxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bd0c07-e972-4d88-95e8-fc958e8d48c2/1/VuAvc1Cb3jXZXRhRgD4fAIKetxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/bd0c07-e972-4d88-95e8-fc958e8d48c2/1/VuAvc1Cb3jXZXRhRgD4fAIKetxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:4c:9d:f9:3b:0e:37:d0:3b:e3:dd:b1:f9:21:05:fd:fd:9d:
ab:b7:42:9d:30:fb:4b:7a:bb:17:d1:78:21:19:3a:a7:84:66:
d3:78:ec:cc:dc:a1:33:86:b6:dd:1e:52:f1:aa:9c:3c:22:d4:
e2:25:93:61:46:8e:70:a2:50:75:46:fb:78:55:89:4b:18:67:
cd:cb:0d:65:02:28:1c:8d:00:0e:94:e4:0a:2d:cf:6b:11:bd:
b4:a0:7b:b7:dc:5f:f3:73:c7:4b:f0:52:49:dd:19:20:d2:30:
06:9c:de:90:d0:47:69:50:a1:c7:6b:12:dd:8a:1d:27:7b:7e:
f7:f4:ec:7d:a6:60:dd:cc:30:62:73:c4:38:c1:45:58:55:77:
ef:13:c2:25:3c:39:60:b3:92:d5:2c:ec:17:92:27:fb:96:47:
c0:d7:86:f6:0c:a7:5b:86:db:ce:a0:78:5b:dd:72:51:4c:11:
5e:12:ef:14:a2:01:f5:89:68:75:ef:93:2e:6c:81:b5:72:93:
54:6d:0d:24:fe:a2:ef:e0:41:58:f8:a7:73:07:a4:44:dd:27:
02:67:67:13:c2:de:de:ae:b6:58:89:ae:35:75:77:39:27:61:
f5:c9:42:c2:c2:49:e4:42:00:0b:21:bb:b3:85:ed:05:cb:05:
17:a2:e3:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:51:31 2025 by rpki-client