Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/b4c74a-e3b2-4e09-867c-f9967c3ad3e4/1/VkNBXCLhQZcsDX52wk6IsiQnsCQ.mft
File: VkNBXCLhQZcsDX52wk6IsiQnsCQ.mft (raw, json)
Hash identifier: wxLI3/3bm9EOG49iZvCGzJADZW+7sH0LF/IlPfDCIjs=
Subject key identifier: C6:A3:B1:6B:2F:4B:5E:27:99:DC:F6:87:D2:D7:57:AA:61:45:EA:2A
Authority key identifier: 56:43:41:5C:22:E1:41:97:2C:0D:7E:76:C2:4E:88:B2:24:27:B0:24
Certificate issuer: /CN=5643415c22e141972c0d7e76c24e88b22427b024
Certificate serial: 0198D6CE07986F833BEC5F7D10D209EB6684
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VkNBXCLhQZcsDX52wk6IsiQnsCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/b4c74a-e3b2-4e09-867c-f9967c3ad3e4/1/VkNBXCLhQZcsDX52wk6IsiQnsCQ.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 12:01:23 +0000
Manifest this update: Sat 23 Aug 2025 12:01:23 +0000
Manifest next update: Sun 24 Aug 2025 12:01:23 +0000
Files and hashes: 1: 6qanCjcucoDvogEjoEibMas1xCw.roa (hash: iHrFUYTwZPBriNgyEwpJfBAHJGESvwJ6/vI6y1aBDEY=)
2: OJH-3bY7Jey_mmpYXzYEewikSRw.roa (hash: QWW0B/GAEpshetNaEGEwKmz4qiBbm/sCm0lolDcM+Gk=)
3: VkNBXCLhQZcsDX52wk6IsiQnsCQ.crl (hash: z2xSl5/aEKkH7O784jITphmvy0YPQE9PiuMu20Z9cqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/b4c74a-e3b2-4e09-867c-f9967c3ad3e4/1/VkNBXCLhQZcsDX52wk6IsiQnsCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/b4c74a-e3b2-4e09-867c-f9967c3ad3e4/1/VkNBXCLhQZcsDX52wk6IsiQnsCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/VkNBXCLhQZcsDX52wk6IsiQnsCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:ce:07:98:6f:83:3b:ec:5f:7d:10:d2:09:eb:66:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5643415c22e141972c0d7e76c24e88b22427b024
Validity
Not Before: Aug 23 12:01:23 2025 GMT
Not After : Aug 24 12:01:23 2025 GMT
Subject: CN=c6a3b16b2f4b5e2799dcf687d2d757aa6145ea2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:fa:6f:37:b6:dd:b5:50:6a:aa:5a:7d:8e:04:
f0:53:53:53:e5:bd:d1:72:75:a0:a2:95:c6:3f:8a:
38:7a:ff:56:a5:87:2c:bc:42:f2:2d:36:9b:0e:ab:
11:2a:d2:42:ac:ff:b4:3e:8c:7f:8d:da:12:5c:5d:
e3:54:3d:5f:d7:fa:ff:79:36:7b:91:e7:86:ff:3a:
29:d0:de:19:d5:f4:e9:15:65:a2:9f:4a:84:e8:3d:
dd:6c:62:be:75:c4:db:ca:8e:49:1b:4c:1c:15:d4:
fa:2b:b2:ca:b6:7f:92:a1:54:a4:38:2e:10:ae:11:
18:35:6e:29:fa:9b:55:18:b7:6c:be:9b:be:0d:f6:
d7:ff:1e:8f:26:5f:13:05:de:6c:cc:b6:a5:85:82:
25:97:2d:1d:4f:3e:55:cc:b7:b0:4c:56:0f:c6:77:
40:ba:4f:fd:28:7a:88:7e:49:09:6b:76:d9:61:22:
29:79:c4:15:52:0c:f3:11:47:8e:18:50:6e:40:5c:
ea:f1:4a:91:04:72:65:b3:4f:f2:be:d0:1b:a4:78:
c3:f7:78:c2:33:d1:e3:0c:1c:16:7c:c7:3b:67:9d:
52:57:9e:08:ea:4a:02:7c:fd:39:18:d3:ab:88:50:
fa:e2:4b:e7:c9:3e:ef:aa:4a:ee:94:3a:99:e3:8b:
f7:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:A3:B1:6B:2F:4B:5E:27:99:DC:F6:87:D2:D7:57:AA:61:45:EA:2A
X509v3 Authority Key Identifier:
keyid:56:43:41:5C:22:E1:41:97:2C:0D:7E:76:C2:4E:88:B2:24:27:B0:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VkNBXCLhQZcsDX52wk6IsiQnsCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b4c74a-e3b2-4e09-867c-f9967c3ad3e4/1/VkNBXCLhQZcsDX52wk6IsiQnsCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b4c74a-e3b2-4e09-867c-f9967c3ad3e4/1/VkNBXCLhQZcsDX52wk6IsiQnsCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:74:9c:26:08:24:89:e5:25:cf:87:24:5b:09:c2:bf:46:7d:
21:12:d3:8e:a7:88:5a:7a:d4:48:d9:be:25:fe:7b:28:6f:93:
60:2f:fb:01:57:f1:38:18:e3:7c:25:18:2a:e5:69:c5:e6:1a:
3d:14:86:0a:9d:09:eb:90:a7:8a:be:d8:4e:b6:57:d7:fa:09:
26:a2:84:52:20:f2:93:88:9f:86:2b:1c:ec:a1:5f:f6:50:65:
70:a0:6f:28:72:80:f3:d5:7d:6b:29:47:ec:91:ce:b1:fb:11:
ae:e5:5e:c8:c0:4a:17:2b:ea:74:ce:5e:15:7f:17:f8:cd:41:
7d:de:5f:8c:f9:14:1d:86:c3:b0:33:a7:d8:c1:f2:48:11:ff:
1b:9d:12:1d:47:5e:e8:3c:4c:d8:79:fc:77:72:96:38:c9:f2:
3e:d0:8f:3a:f4:ed:81:0b:94:d4:fb:28:ca:19:dd:b3:44:9e:
75:ba:52:4d:00:f0:14:7b:44:4a:55:bc:1a:85:ed:08:8b:f1:
fd:25:2e:09:31:ae:1d:53:ff:41:e3:35:e6:25:cc:bb:ef:f1:
22:cd:f6:a9:c1:bf:1b:c2:62:4c:91:f3:b7:c4:86:ec:9e:ba:
9a:70:8a:f1:86:ca:b7:57:05:e7:9c:33:a6:44:82:47:e3:bf:
a0:ad:ea:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:39:26 2025 by rpki-client