Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/VSrToLS3ToWvVPWK11owJrffcYE.mft
File: VSrToLS3ToWvVPWK11owJrffcYE.mft (raw, json)
Hash identifier: SJ7kOwWsIZ6Q+NHtd6PSDjNr1JcwrPlejUpTi/3Gha4=
Subject key identifier: 0D:71:81:B0:D3:63:0D:2C:03:CD:31:32:8E:EC:93:3E:5E:7F:85:C3
Authority key identifier: 55:2A:D3:A0:B4:B7:4E:85:AF:54:F5:8A:D7:5A:30:26:B7:DF:71:81
Certificate issuer: /CN=552ad3a0b4b74e85af54f58ad75a3026b7df7181
Certificate serial: 0198D5F1CB810AFF63B7ACF34FB150D41C37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VSrToLS3ToWvVPWK11owJrffcYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/VSrToLS3ToWvVPWK11owJrffcYE.mft
Manifest number: 1684
Signing time: Sat 23 Aug 2025 08:00:49 +0000
Manifest this update: Sat 23 Aug 2025 08:00:49 +0000
Manifest next update: Sun 24 Aug 2025 08:00:49 +0000
Files and hashes: 1: 6jmBqQ69ucquob5LYoU8XO0aoaM.roa (hash: iVwx0LgAhkHT9krjXAM19RbPrDxsVzpzta/Wm4cdzGM=)
2: Tc3s-2xco0JsiKKHs4HafxTscjs.roa (hash: ldDhuMj8RJQOwqkPXb97Us2/HhGxeidwxkit00ybDDk=)
3: VSrToLS3ToWvVPWK11owJrffcYE.crl (hash: zIGIUUDgXK0T3OHVy+OPm8ZSQbqzr1/cCAThqWjAfsI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/VSrToLS3ToWvVPWK11owJrffcYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/VSrToLS3ToWvVPWK11owJrffcYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VSrToLS3ToWvVPWK11owJrffcYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 08:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:cb:81:0a:ff:63:b7:ac:f3:4f:b1:50:d4:1c:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=552ad3a0b4b74e85af54f58ad75a3026b7df7181
Validity
Not Before: Aug 23 08:00:49 2025 GMT
Not After : Aug 24 08:00:49 2025 GMT
Subject: CN=0d7181b0d3630d2c03cd31328eec933e5e7f85c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7e:86:a8:6b:2f:1a:ab:59:d7:ec:ad:01:35:
35:e1:1d:77:c6:58:83:b6:ae:d1:84:fe:14:9e:e3:
25:4e:1b:59:dd:b0:f2:76:05:d0:06:1a:11:83:a7:
6c:a1:19:a9:ba:63:67:f1:bb:92:5a:7b:24:58:79:
b0:37:ef:f3:9a:89:21:45:df:8a:77:2d:11:a3:f3:
d5:bb:5b:42:87:d1:bb:f2:d4:6a:a2:72:83:c1:fa:
41:d9:8f:5f:70:f3:93:2d:4c:0f:f6:e3:b1:2c:cb:
13:26:b8:92:31:e4:2d:c3:33:d5:8a:fd:d0:d4:c4:
f4:21:90:9b:fa:eb:11:c0:8c:d4:f4:7a:c8:dd:09:
31:99:11:9a:2e:80:67:8f:ce:51:98:da:df:8d:22:
29:8c:9b:34:91:25:ee:fb:93:16:7d:36:a4:b0:47:
71:70:41:8d:dc:47:3e:08:ca:cc:09:b1:14:f0:48:
f5:ab:fe:fd:50:b4:1b:a8:0d:62:66:87:a1:1e:09:
cd:dd:17:cc:ff:2e:f4:f6:61:5f:ed:eb:ae:16:7f:
3b:5f:38:1b:50:cb:53:6d:fd:88:f7:16:14:4f:6b:
48:28:e4:5c:80:b2:d5:dd:0c:58:0f:5e:3f:b7:b4:
09:51:e3:fb:09:a9:ca:fc:55:4d:3a:68:29:2f:ea:
f5:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:71:81:B0:D3:63:0D:2C:03:CD:31:32:8E:EC:93:3E:5E:7F:85:C3
X509v3 Authority Key Identifier:
keyid:55:2A:D3:A0:B4:B7:4E:85:AF:54:F5:8A:D7:5A:30:26:B7:DF:71:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VSrToLS3ToWvVPWK11owJrffcYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/VSrToLS3ToWvVPWK11owJrffcYE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/VSrToLS3ToWvVPWK11owJrffcYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:3e:1e:e6:ad:4f:bc:31:d4:a0:1b:38:4f:ed:74:e1:db:8d:
42:32:6d:c0:74:ee:4e:3a:5a:eb:b1:57:a2:31:73:ad:a4:37:
8b:f0:a1:18:98:56:ae:4f:1f:1f:ac:d8:c2:93:28:32:d8:5b:
5b:68:f0:2f:82:bc:71:41:21:bc:9c:e1:37:a2:c3:95:b1:61:
6a:a0:6b:f9:5b:35:b1:da:cd:60:36:17:ce:4e:72:2c:a7:0b:
79:05:a6:24:78:9a:b4:b2:cc:ab:3b:90:50:9c:0d:46:5c:ef:
7a:07:5f:de:b7:0d:d0:39:50:34:03:0a:ba:dd:da:12:5c:54:
c9:7b:d6:6e:54:00:81:a0:69:8c:0f:60:b9:27:bd:22:f8:1a:
0b:26:8d:15:52:9f:f1:ea:4c:ae:0a:a7:75:8d:0e:34:c8:b5:
7f:45:db:dd:01:5b:ac:06:ed:70:88:b8:03:d7:c1:e1:ad:b2:
62:a5:c5:b1:4d:40:fa:06:1a:99:e3:46:e1:d9:c7:f9:98:35:
7c:71:25:f3:41:1f:bd:aa:ad:01:79:4f:66:c9:6c:59:62:be:
00:e5:f8:ed:b7:fc:f5:b9:6f:9b:cd:bc:d6:df:3f:24:4e:a5:
3b:40:24:d0:54:1b:71:5c:2f:9f:14:5d:b9:38:6e:cb:d0:89:
b6:6c:c2:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:37:04 2025 by rpki-client