Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/cc66d4-7d98-43b5-b209-b8487fe96149/1/vQM98D7VHOeSSkgBg7z_208EJTc.mft
File: vQM98D7VHOeSSkgBg7z_208EJTc.mft (raw, json)
Hash identifier: qXfCNHqL4L1NAXiHB4KEtCSs0VXRxrd2ZfHRLvV0U1A=
Subject key identifier: D0:2F:3D:FC:93:7A:D5:2E:F9:5E:76:59:64:07:69:ED:3D:5E:F2:BE
Authority key identifier: BD:03:3D:F0:3E:D5:1C:E7:92:4A:48:01:83:BC:FF:DB:4F:04:25:37
Certificate issuer: /CN=bd033df03ed51ce7924a480183bcffdb4f042537
Certificate serial: 0198D69863CB2A2349718423F4C1528FCC09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vQM98D7VHOeSSkgBg7z_208EJTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/cc66d4-7d98-43b5-b209-b8487fe96149/1/vQM98D7VHOeSSkgBg7z_208EJTc.mft
Manifest number: 023E
Signing time: Sat 23 Aug 2025 11:02:47 +0000
Manifest this update: Sat 23 Aug 2025 11:02:47 +0000
Manifest next update: Sun 24 Aug 2025 11:02:47 +0000
Files and hashes: 1: vQM98D7VHOeSSkgBg7z_208EJTc.crl (hash: bjbHrrzGz8xkR0qdAOFzI1PMRB8PCO/5V9JLFSieR6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/cc66d4-7d98-43b5-b209-b8487fe96149/1/vQM98D7VHOeSSkgBg7z_208EJTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/cc66d4-7d98-43b5-b209-b8487fe96149/1/vQM98D7VHOeSSkgBg7z_208EJTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/vQM98D7VHOeSSkgBg7z_208EJTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:63:cb:2a:23:49:71:84:23:f4:c1:52:8f:cc:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd033df03ed51ce7924a480183bcffdb4f042537
Validity
Not Before: Aug 23 11:02:47 2025 GMT
Not After : Aug 24 11:02:47 2025 GMT
Subject: CN=d02f3dfc937ad52ef95e7659640769ed3d5ef2be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ed:99:3c:02:7d:61:b7:75:0d:05:ea:00:9e:
f4:68:d5:10:13:03:86:f8:36:ad:72:21:55:a8:db:
d6:7f:24:dd:bc:49:e3:bc:c7:23:de:eb:b8:19:b4:
9b:7d:38:c9:d8:44:c6:20:60:68:18:69:c8:f4:84:
4c:77:32:1f:cc:4d:4e:df:6a:62:f5:02:62:73:4e:
20:c8:bb:b5:e3:8d:1d:03:c7:c9:14:61:3d:d4:87:
6d:c4:f6:12:fb:dd:f5:20:16:ee:32:78:25:f8:1f:
84:97:66:7e:30:b9:eb:92:7d:93:8a:77:e8:0e:bb:
63:19:b0:9d:99:ec:04:0c:53:42:3f:8b:b8:17:14:
02:c4:89:c3:bc:fd:ea:14:6d:fd:31:aa:4c:04:f5:
b9:9e:3d:2e:a4:fe:ab:cf:e3:9d:fa:89:ea:f9:ad:
28:26:dd:b3:c2:17:a7:33:a8:8e:a0:63:d8:1a:e9:
35:30:41:97:86:55:03:5a:f7:42:bf:51:48:e0:c0:
68:bc:4a:e4:85:df:ce:4a:94:24:10:af:11:53:a3:
f7:d6:b1:32:a5:5a:09:45:df:e1:6e:66:0d:6e:2d:
80:ea:9e:98:82:41:52:c4:2d:c5:d6:a3:cb:1f:79:
fc:8c:79:e6:f7:f3:fc:7b:5e:bc:18:4f:af:30:f0:
e4:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:2F:3D:FC:93:7A:D5:2E:F9:5E:76:59:64:07:69:ED:3D:5E:F2:BE
X509v3 Authority Key Identifier:
keyid:BD:03:3D:F0:3E:D5:1C:E7:92:4A:48:01:83:BC:FF:DB:4F:04:25:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vQM98D7VHOeSSkgBg7z_208EJTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/cc66d4-7d98-43b5-b209-b8487fe96149/1/vQM98D7VHOeSSkgBg7z_208EJTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/cc66d4-7d98-43b5-b209-b8487fe96149/1/vQM98D7VHOeSSkgBg7z_208EJTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:62:29:67:8e:e8:43:00:95:5f:dc:b5:4a:02:b6:5b:7a:57:
24:a9:3c:6a:79:fe:2d:bd:f0:4e:15:db:d6:74:07:90:03:f7:
cf:74:5a:e6:e7:fa:82:e1:62:84:c5:ed:8b:5f:60:fc:72:09:
89:59:d1:ec:7c:82:99:ae:29:fc:54:89:a9:c1:10:d8:98:87:
c2:09:d5:b2:91:d0:91:c5:4d:b6:af:56:1b:b3:01:cb:db:2b:
d6:53:49:93:4d:bb:65:ed:13:a4:22:52:70:8d:99:b7:64:07:
f8:48:a4:4c:79:a1:69:bc:f5:a7:e3:4c:68:c7:29:b8:ad:c1:
77:99:42:ab:e2:c5:e2:06:f4:05:71:19:d7:08:08:5d:3f:b2:
58:f0:47:c3:2c:e5:d4:54:7d:48:7c:63:8d:78:ed:6a:d9:d0:
79:e2:6a:d7:81:e3:39:d7:dd:e2:e9:76:fc:ee:6a:ff:01:66:
a5:8c:58:63:72:6d:c2:c4:08:d2:b2:30:5e:bc:d3:d9:a9:b3:
34:2d:f6:b4:35:82:bd:c5:42:fe:58:e2:00:de:6f:2e:f3:8c:
7f:d5:2f:34:6f:2a:fb:8b:90:51:6c:d5:1c:0e:da:41:a7:d7:
22:63:e7:ba:2c:8f:97:0a:08:aa:3c:ce:44:60:e7:40:07:26:
45:59:5f:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:34:37 2025 by rpki-client