Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/6f482c-f232-4a39-9635-3b6711c637c5/1/VeQfAyg8SQlqvp_7el3AtbOE2xA.mft
File: VeQfAyg8SQlqvp_7el3AtbOE2xA.mft (raw, json)
Hash identifier: J+E1Gz3/P/pkIZEfTh+9p7ZNqN17t3bRbQjIfe3IQNc=
Subject key identifier: A9:E5:1D:92:34:83:09:60:60:CB:A0:BD:00:89:4B:27:90:AF:84:37
Authority key identifier: 55:E4:1F:03:28:3C:49:09:6A:BE:9F:FB:7A:5D:C0:B5:B3:84:DB:10
Certificate issuer: /CN=55e41f03283c49096abe9ffb7a5dc0b5b384db10
Certificate serial: 0198D5F1250BB9F349F8F6BE51A5AA7CA542
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VeQfAyg8SQlqvp_7el3AtbOE2xA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/6f482c-f232-4a39-9635-3b6711c637c5/1/VeQfAyg8SQlqvp_7el3AtbOE2xA.mft
Manifest number: 01A2
Signing time: Sat 23 Aug 2025 08:00:07 +0000
Manifest this update: Sat 23 Aug 2025 08:00:07 +0000
Manifest next update: Sun 24 Aug 2025 08:00:07 +0000
Files and hashes: 1: VeQfAyg8SQlqvp_7el3AtbOE2xA.crl (hash: VoXHr6zCg8LQtbvYs3e7U16dEBedMzVros4OyHMUWU8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/6f482c-f232-4a39-9635-3b6711c637c5/1/VeQfAyg8SQlqvp_7el3AtbOE2xA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/6f482c-f232-4a39-9635-3b6711c637c5/1/VeQfAyg8SQlqvp_7el3AtbOE2xA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VeQfAyg8SQlqvp_7el3AtbOE2xA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:25:0b:b9:f3:49:f8:f6:be:51:a5:aa:7c:a5:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55e41f03283c49096abe9ffb7a5dc0b5b384db10
Validity
Not Before: Aug 23 08:00:07 2025 GMT
Not After : Aug 24 08:00:07 2025 GMT
Subject: CN=a9e51d923483096060cba0bd00894b2790af8437
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:43:4d:b8:a8:49:c5:bf:5f:71:c9:0b:b9:b0:
e1:48:ef:55:5d:47:e3:e2:61:a3:7e:a3:de:9e:62:
ac:e4:a3:b6:bb:e5:00:2b:89:4a:b4:68:4b:bb:50:
7d:92:24:73:b5:16:8a:f7:2d:ed:e4:19:3f:4d:51:
69:5e:0e:e2:1b:32:03:81:04:39:c2:9f:a8:75:2e:
7b:96:a2:17:2a:5d:72:2b:66:b6:24:4b:ee:5d:e4:
7c:2c:14:2e:8d:e8:27:b0:3e:c4:8c:20:1d:4f:2b:
8c:71:df:15:55:75:37:77:59:e2:0f:6e:9f:d1:dd:
db:45:d5:fa:56:97:d6:98:ca:8c:0e:e0:1d:32:38:
a8:bb:a0:f3:67:5b:7a:ef:3d:31:47:d9:32:67:f6:
95:59:a9:d7:92:17:46:4f:a5:a6:48:95:0e:b1:b4:
38:f7:b4:15:ca:b9:b3:6e:6b:79:4a:01:54:a7:f9:
dc:6d:09:77:ba:5d:7e:ea:81:86:63:53:24:fd:af:
ca:ed:be:ad:87:51:7c:76:a7:e3:15:0e:8d:91:d9:
66:99:36:f2:05:91:3c:66:55:a2:4d:76:f8:d0:39:
c4:b0:f8:8c:20:17:47:46:0a:ea:41:55:68:ef:84:
54:92:b1:33:6d:1d:52:1f:1b:f6:df:9b:03:08:7c:
89:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:E5:1D:92:34:83:09:60:60:CB:A0:BD:00:89:4B:27:90:AF:84:37
X509v3 Authority Key Identifier:
keyid:55:E4:1F:03:28:3C:49:09:6A:BE:9F:FB:7A:5D:C0:B5:B3:84:DB:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VeQfAyg8SQlqvp_7el3AtbOE2xA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/6f482c-f232-4a39-9635-3b6711c637c5/1/VeQfAyg8SQlqvp_7el3AtbOE2xA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/6f482c-f232-4a39-9635-3b6711c637c5/1/VeQfAyg8SQlqvp_7el3AtbOE2xA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:d4:14:2d:56:c3:7e:f6:0a:75:86:85:1e:bb:c6:5b:de:bd:
f0:39:ee:eb:fc:8f:eb:35:5d:05:9e:46:18:a7:a9:3b:f5:46:
c3:a4:e1:3b:ee:f0:29:73:2b:b8:db:d4:8a:65:61:79:55:39:
84:b0:21:b5:70:be:0a:35:b8:be:60:b4:c7:ba:46:91:34:5c:
da:25:ee:34:0f:a0:8b:d3:c5:52:2e:36:18:7f:ef:89:10:2f:
c7:4d:02:9e:91:ad:28:5b:00:72:c7:d0:98:40:70:db:02:0f:
4d:aa:ed:f9:8b:6e:d9:35:07:36:27:cd:ce:36:f8:cc:e3:20:
76:be:18:d9:63:27:38:7f:24:99:29:3e:32:f2:f8:de:83:48:
69:07:2d:58:1d:7a:f5:fc:91:7a:e6:d5:6f:04:b0:40:39:1b:
8d:4f:2a:d9:33:b5:0a:c8:ba:ff:f2:63:13:ca:6e:cc:e3:45:
dd:72:57:ab:64:a3:c5:f6:a2:0d:f2:77:03:56:22:6a:61:2c:
07:3b:23:e8:db:90:ab:00:78:d4:e9:39:08:b6:95:d6:52:13:
a7:7c:44:d6:44:f2:e4:4a:3b:88:39:8f:cb:0a:30:49:4e:5d:
ec:3d:5c:05:b0:2c:0e:3c:ca:44:e0:bf:1e:75:70:63:da:50:
62:41:40:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:34:53 2025 by rpki-client