Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/d8ed41-71f6-4bb7-a3ee-a0bb140a596e/1/VdXcniIBEqJ8FSvDI4kDiXSuRXI.mft
File: VdXcniIBEqJ8FSvDI4kDiXSuRXI.mft (raw, json)
Hash identifier: 9C7/lLskQmnXmw+OYcxVs7OxPR/fbvzEDgkl+emVP9Y=
Subject key identifier: 1F:60:4B:0D:C4:23:32:0D:0C:A7:C6:99:A9:F9:B2:E7:7A:1E:C6:C1
Authority key identifier: 55:D5:DC:9E:22:01:12:A2:7C:15:2B:C3:23:89:03:89:74:AE:45:72
Certificate issuer: /CN=55d5dc9e220112a27c152bc32389038974ae4572
Certificate serial: 0198D4A7C8F336169D3A5E37F1BF154090DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VdXcniIBEqJ8FSvDI4kDiXSuRXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/d8ed41-71f6-4bb7-a3ee-a0bb140a596e/1/VdXcniIBEqJ8FSvDI4kDiXSuRXI.mft
Manifest number: 1361
Signing time: Sat 23 Aug 2025 02:00:22 +0000
Manifest this update: Sat 23 Aug 2025 02:00:22 +0000
Manifest next update: Sun 24 Aug 2025 02:00:22 +0000
Files and hashes: 1: NgMUQ0h4d6oIArcMJtSW703L-Zc.roa (hash: TJW4OaMrgaRj7E3uX9xVvPrYH4h+lcuQwLF2jUPlChA=)
2: VdXcniIBEqJ8FSvDI4kDiXSuRXI.crl (hash: xlAcoXV++119A20fCbCN2v3kgQ+t9DL+ChAY5JLQPkY=)
3: h9epvE3XZbxuQFOC07DHje9oldc.roa (hash: dmaD3wbg4kagfJA96eYctyQPytlbvLwfUnrstuptdyw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/d8ed41-71f6-4bb7-a3ee-a0bb140a596e/1/VdXcniIBEqJ8FSvDI4kDiXSuRXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/d8ed41-71f6-4bb7-a3ee-a0bb140a596e/1/VdXcniIBEqJ8FSvDI4kDiXSuRXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/VdXcniIBEqJ8FSvDI4kDiXSuRXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:c8:f3:36:16:9d:3a:5e:37:f1:bf:15:40:90:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55d5dc9e220112a27c152bc32389038974ae4572
Validity
Not Before: Aug 23 02:00:22 2025 GMT
Not After : Aug 24 02:00:22 2025 GMT
Subject: CN=1f604b0dc423320d0ca7c699a9f9b2e77a1ec6c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2e:82:46:0e:ad:cd:48:06:ee:a5:37:68:5c:
75:33:ec:cc:9b:cb:58:57:6e:16:a4:a3:02:f6:57:
af:ff:e3:9d:b7:d6:b3:0d:e8:8a:2c:1d:bb:da:23:
66:e8:d1:d0:e2:ba:9f:53:9e:f5:e7:7c:77:90:05:
ab:7b:a1:a0:e3:1d:33:72:71:a1:d3:82:99:2a:3f:
14:0e:84:49:42:0a:2b:a5:19:86:82:99:0e:60:88:
f8:81:19:e3:bd:24:86:34:ae:03:67:a1:1d:78:f9:
97:01:cc:ac:ee:f4:05:ab:15:79:04:dd:58:25:2b:
e7:38:96:a5:28:ba:ab:04:ea:f4:f3:7b:dc:d0:a9:
d3:c6:1b:7a:88:64:71:65:9e:b7:d2:19:81:2c:e9:
f7:91:8e:9c:3e:9d:ce:10:bd:19:05:12:fe:cd:05:
c8:82:51:62:54:b1:3f:28:50:81:88:ad:6a:26:0d:
be:dc:ca:19:ae:08:69:a0:40:8f:11:af:3f:23:7b:
da:70:62:01:0e:32:62:ab:91:9e:74:d3:53:dc:7c:
5a:97:f5:55:91:75:ac:c7:5f:fd:03:d2:b9:50:4c:
fb:cb:44:3f:00:86:70:9c:4d:0f:4e:4a:20:a1:46:
37:9a:a4:f5:cc:19:0c:5f:2e:32:3c:f5:ce:44:76:
7d:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:60:4B:0D:C4:23:32:0D:0C:A7:C6:99:A9:F9:B2:E7:7A:1E:C6:C1
X509v3 Authority Key Identifier:
keyid:55:D5:DC:9E:22:01:12:A2:7C:15:2B:C3:23:89:03:89:74:AE:45:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VdXcniIBEqJ8FSvDI4kDiXSuRXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d8ed41-71f6-4bb7-a3ee-a0bb140a596e/1/VdXcniIBEqJ8FSvDI4kDiXSuRXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d8ed41-71f6-4bb7-a3ee-a0bb140a596e/1/VdXcniIBEqJ8FSvDI4kDiXSuRXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:58:50:48:71:52:8b:c1:0e:ae:c7:30:99:c0:76:14:76:64:
42:e7:2c:5c:34:1f:a6:f6:1f:7f:24:71:50:f2:1e:5f:bb:92:
67:ed:02:2f:2e:17:98:81:13:17:39:b3:7d:a3:d7:1b:f8:f9:
26:68:44:3c:24:b1:1c:e2:85:59:bc:4a:3d:bd:b2:0b:b9:1d:
11:b0:ea:dd:83:b0:07:c7:65:fb:1f:7e:cd:9b:3a:5a:6f:bd:
95:88:2c:83:42:56:a8:f3:9c:d5:d2:8d:53:b2:a7:f0:3a:93:
b5:48:b7:eb:09:13:d5:38:88:3b:6d:70:f7:62:f8:5d:93:82:
a1:db:54:45:96:b8:ac:31:43:d0:ec:ce:0b:e7:3e:b0:45:39:
61:b4:ab:da:a8:99:f8:a1:05:10:ab:7d:d0:00:14:93:87:50:
24:5a:b6:8a:2a:5d:75:3f:36:05:7a:0d:16:e7:ae:39:b6:ad:
ff:a9:5c:9b:fd:de:ee:e4:6d:d0:b1:52:94:61:90:73:13:17:
c3:12:46:7a:e3:dc:d8:a4:26:68:f2:68:67:25:55:ab:e6:19:
58:10:e3:c2:a4:89:0b:fb:11:0e:d1:0c:56:73:3d:9f:6b:97:
8b:67:54:4b:a6:22:36:2d:01:a8:54:fd:db:12:b8:7c:7f:de:
99:6a:bc:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:09:17 2025 by rpki-client