Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/7caae5-03af-47f8-b29e-e951a74346f9/1/VSQj7ZBQAPaa2T7vxma7mxrdyzc.mft
File: VSQj7ZBQAPaa2T7vxma7mxrdyzc.mft (raw, json)
Hash identifier: Fm7NgTfKOVol793iSQncKxA4/9Xlv/a9PyCIS1oNV6U=
Subject key identifier: 09:91:7E:B1:51:58:48:65:14:53:32:F8:48:ED:AE:62:DC:28:36:69
Authority key identifier: 55:24:23:ED:90:50:00:F6:9A:D9:3E:EF:C6:66:BB:9B:1A:DD:CB:37
Certificate issuer: /CN=552423ed905000f69ad93eefc666bb9b1addcb37
Certificate serial: 0198D6CDC17A67408BEB55F04BFCEBE422FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VSQj7ZBQAPaa2T7vxma7mxrdyzc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/7caae5-03af-47f8-b29e-e951a74346f9/1/VSQj7ZBQAPaa2T7vxma7mxrdyzc.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 12:01:05 +0000
Manifest this update: Sat 23 Aug 2025 12:01:05 +0000
Manifest next update: Sun 24 Aug 2025 12:01:05 +0000
Files and hashes: 1: 2mQ_q8-dGNGRe3nqpXkavXNspDg.roa (hash: /3YCHcej9bstt2T6B00QHN8/IPSuEaJEhcwHBYjcdtw=)
2: 5SSOCLgHzcxdzYdGNpYRPqovl-A.roa (hash: PUdiBPSqRZwnkbR0oFATrv5zTfcNr+UqMdxjxEau1ew=)
3: VSQj7ZBQAPaa2T7vxma7mxrdyzc.crl (hash: W+gL1s5BypRVBbTe6dz7BtK6S2hA9IO/MHUcnPbIqSM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/7caae5-03af-47f8-b29e-e951a74346f9/1/VSQj7ZBQAPaa2T7vxma7mxrdyzc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/7caae5-03af-47f8-b29e-e951a74346f9/1/VSQj7ZBQAPaa2T7vxma7mxrdyzc.mft
rsync://rpki.ripe.net/repository/DEFAULT/VSQj7ZBQAPaa2T7vxma7mxrdyzc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:c1:7a:67:40:8b:eb:55:f0:4b:fc:eb:e4:22:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=552423ed905000f69ad93eefc666bb9b1addcb37
Validity
Not Before: Aug 23 12:01:05 2025 GMT
Not After : Aug 24 12:01:05 2025 GMT
Subject: CN=09917eb151584865145332f848edae62dc283669
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ff:29:80:23:80:82:df:f7:f6:61:34:4f:d5:
73:00:86:b2:7b:b4:c3:8b:02:11:84:2e:f1:c6:11:
54:c0:c5:3f:77:67:e4:ba:36:6e:8f:49:42:e6:e0:
42:9a:04:d4:80:1e:13:a9:23:c9:be:1d:36:3a:32:
9a:0a:f1:69:3c:e2:38:ec:bd:9f:15:91:9d:51:84:
6c:99:dd:f2:2b:5d:1b:87:c2:84:23:27:9c:d2:8b:
6f:0b:d3:4b:e3:f8:fa:ee:72:c6:0a:23:47:6d:31:
c9:f8:91:ef:c6:7d:0a:a7:1d:bb:74:13:2d:d1:e9:
82:82:89:31:18:34:22:a7:db:13:18:6b:bb:72:ed:
29:d8:af:cb:08:9f:fc:99:dd:c1:72:dd:0e:40:34:
66:cb:ff:a2:aa:f9:32:1d:2c:c4:2c:65:0d:b9:a2:
1f:5e:ca:ee:70:2d:f3:e1:c0:84:1e:f1:85:52:cd:
f4:c3:4b:ac:89:7f:1a:e4:2b:68:25:41:93:d4:fe:
87:93:0d:c9:d5:a7:f9:a8:eb:66:08:71:dc:48:3f:
c4:cf:4b:76:92:a3:50:a6:43:df:a1:70:9e:c0:46:
58:a5:d2:3d:d8:53:5c:f4:0e:0c:96:9c:5f:a3:73:
98:1a:d1:19:0e:a7:20:fc:a4:a1:34:76:cd:fb:88:
ae:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:91:7E:B1:51:58:48:65:14:53:32:F8:48:ED:AE:62:DC:28:36:69
X509v3 Authority Key Identifier:
keyid:55:24:23:ED:90:50:00:F6:9A:D9:3E:EF:C6:66:BB:9B:1A:DD:CB:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VSQj7ZBQAPaa2T7vxma7mxrdyzc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7caae5-03af-47f8-b29e-e951a74346f9/1/VSQj7ZBQAPaa2T7vxma7mxrdyzc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/7caae5-03af-47f8-b29e-e951a74346f9/1/VSQj7ZBQAPaa2T7vxma7mxrdyzc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:1d:c4:13:42:39:61:0c:be:ef:42:dd:62:6b:13:ca:23:70:
e6:a2:f4:43:d0:81:c5:0d:84:98:ac:4c:9e:dd:ce:e6:c6:39:
74:6c:37:24:ce:8e:dd:d6:e6:98:ee:5d:d2:ee:e9:b5:ad:aa:
25:06:2a:b3:87:be:1d:10:57:18:6c:3b:aa:5b:cc:34:e0:2b:
ed:7b:c4:0a:d7:9c:49:15:86:8b:43:f7:37:bb:df:4a:79:90:
d5:b5:a8:cb:84:19:6a:cd:a3:ea:2c:49:9b:54:a7:89:8a:6f:
da:95:2c:d2:11:ff:d7:05:97:1f:f8:d5:70:48:06:09:5a:b1:
01:38:2c:9a:ca:52:08:88:7e:20:ef:4a:96:c8:d9:f7:4d:99:
f0:3a:2c:93:cf:29:8d:40:61:5e:77:a8:08:92:55:64:e4:31:
ce:0b:a0:4e:9b:a0:bb:ea:52:da:23:99:4f:2c:30:98:88:05:
76:7f:af:79:85:8f:0d:34:0c:e5:be:3e:b1:6c:1c:17:a7:e2:
9b:95:6d:78:ed:09:44:45:ed:11:fb:f8:61:7b:b1:b1:82:a2:
e5:8a:10:d8:d7:d4:51:71:0c:94:4a:12:b5:3a:45:87:41:b8:
7c:0a:d2:d9:f9:f3:58:b8:f5:8b:21:a2:d0:f8:25:bb:3f:55:
e3:09:a0:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:36:26 2025 by rpki-client