Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/deeb4c-99d6-4a9e-8200-7caa97927142/1/VVDgbuAsWjLlTciYU7SqN4-GBPc.mft
File: VVDgbuAsWjLlTciYU7SqN4-GBPc.mft (raw, json)
Hash identifier: xiIppfcshTQFCQ1vs6aALtpxuUuMqcCdBlZoFc8O7Tc=
Subject key identifier: BD:D3:41:E5:15:B4:BC:98:DA:4D:49:98:F2:D4:4D:F6:10:80:65:FB
Authority key identifier: 55:50:E0:6E:E0:2C:5A:32:E5:4D:C8:98:53:B4:AA:37:8F:86:04:F7
Certificate issuer: /CN=5550e06ee02c5a32e54dc89853b4aa378f8604f7
Certificate serial: 0199FFFE8445B4EB0FFE438CE31181B53A09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VVDgbuAsWjLlTciYU7SqN4-GBPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/deeb4c-99d6-4a9e-8200-7caa97927142/1/VVDgbuAsWjLlTciYU7SqN4-GBPc.mft
Manifest number: 0C2A
Signing time: Mon 20 Oct 2025 05:01:34 +0000
Manifest this update: Mon 20 Oct 2025 05:01:34 +0000
Manifest next update: Tue 21 Oct 2025 05:01:34 +0000
Files and hashes: 1: 5SQUdjWeY9PdQ3b1GR4L3yx_VJ4.roa (hash: VQXaoCtg+0JbslSnqFe7W7gX+zMPO93yVdM1v7U3tJ8=)
2: MPnVMUDELwRT1_LHbrcJgd4NmwE.roa (hash: +uiYqzvO4MwwXvvIKhlCHsQt5+OwmIQB9Ijy/fYg7A8=)
3: VVDgbuAsWjLlTciYU7SqN4-GBPc.crl (hash: M31wQPj8ADjp0UIxqlvn1v0BDX/Ebc1coLVZkKuJXQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/deeb4c-99d6-4a9e-8200-7caa97927142/1/VVDgbuAsWjLlTciYU7SqN4-GBPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/deeb4c-99d6-4a9e-8200-7caa97927142/1/VVDgbuAsWjLlTciYU7SqN4-GBPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/VVDgbuAsWjLlTciYU7SqN4-GBPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 05:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:ff:fe:84:45:b4:eb:0f:fe:43:8c:e3:11:81:b5:3a:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5550e06ee02c5a32e54dc89853b4aa378f8604f7
Validity
Not Before: Oct 20 05:01:34 2025 GMT
Not After : Oct 21 05:01:34 2025 GMT
Subject: CN=bdd341e515b4bc98da4d4998f2d44df6108065fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7d:30:f0:fa:13:37:ca:f9:e5:39:6d:63:40:
c7:35:26:3d:5f:8e:5c:ac:b5:a6:7d:2a:e4:b3:63:
cb:7b:72:b2:7b:5a:eb:06:13:49:2b:1a:92:f9:b7:
6b:ee:00:7b:d6:76:5f:1f:22:17:1d:e3:0c:34:0e:
e5:6c:cc:85:8a:c6:3f:95:c8:99:67:8b:49:00:5a:
1f:ca:fb:9e:d3:da:9b:4d:53:00:02:34:25:59:c2:
db:e8:df:d4:8b:5e:b3:26:a1:81:b4:26:79:8c:66:
41:e0:2c:6f:05:47:62:bc:1b:6b:48:e5:9d:53:41:
a0:01:98:d1:5a:30:0d:cb:32:3a:79:c0:12:4c:d0:
66:16:f6:a8:21:0b:1f:b4:ac:ce:de:ce:90:b0:42:
61:4f:bb:d6:e5:85:17:86:46:35:d8:af:52:7e:57:
1d:24:87:a9:6c:bc:4b:01:a0:db:6b:13:1e:f8:0f:
29:8c:41:d6:d7:ee:da:63:e1:b9:43:da:18:41:a7:
39:9d:97:6d:4d:fb:6f:1e:a3:19:5f:5c:ac:b6:61:
d8:d6:fa:20:72:27:26:29:07:5b:a5:e3:20:60:01:
a6:8a:9c:49:4f:13:73:2a:4a:7b:c1:32:9c:0c:5a:
35:d9:6d:02:d0:79:37:55:f2:01:d0:68:3b:83:38:
ab:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:D3:41:E5:15:B4:BC:98:DA:4D:49:98:F2:D4:4D:F6:10:80:65:FB
X509v3 Authority Key Identifier:
keyid:55:50:E0:6E:E0:2C:5A:32:E5:4D:C8:98:53:B4:AA:37:8F:86:04:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VVDgbuAsWjLlTciYU7SqN4-GBPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/deeb4c-99d6-4a9e-8200-7caa97927142/1/VVDgbuAsWjLlTciYU7SqN4-GBPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/deeb4c-99d6-4a9e-8200-7caa97927142/1/VVDgbuAsWjLlTciYU7SqN4-GBPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:2b:ce:bd:02:16:c5:aa:9d:42:37:18:8f:05:79:3d:26:ef:
67:5b:42:37:72:d1:a0:1d:20:69:e6:6e:92:bb:d7:16:d5:25:
4a:f4:7c:26:29:0a:08:3f:7c:b4:6d:1c:b1:b6:1f:c2:90:e3:
20:bf:92:32:b3:25:5c:81:f5:f7:b1:9b:fb:72:45:11:9b:26:
c8:bb:6e:3b:39:9f:7e:b1:e8:c5:d0:25:b7:20:87:dd:c4:b4:
b9:79:fe:2d:57:59:54:fc:4e:11:4d:8b:91:df:94:e6:4e:77:
c6:9e:3e:4e:d2:a7:aa:00:52:5f:7e:de:28:da:71:b0:e7:05:
41:49:1d:4c:5a:8b:70:ff:b7:67:13:5f:21:c7:5c:d8:34:1e:
be:c9:b8:3e:ca:35:cd:15:75:c9:c0:41:6c:d1:3c:40:5a:69:
a4:66:d5:5b:4d:78:11:ee:1c:ac:d7:7a:ed:fc:ac:88:91:a0:
b2:dd:0c:60:62:16:f3:d9:77:d2:bc:27:8f:a0:6e:05:c0:50:
13:a8:71:d4:ed:fb:77:a9:e7:00:c0:f7:dc:87:cd:a9:3f:5e:
4c:7e:00:64:42:f2:14:72:a6:f4:16:a8:79:26:4c:bc:9a:c2:
cb:63:7f:a7:89:e9:dd:99:e2:60:ea:fb:72:da:11:36:98:5a:
50:1f:ec:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 13:03:24 2025 by rpki-client