Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/fdffe3-010f-4c6a-bd96-718b8c7c9335/1/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.mft
File: Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.mft (raw, json)
Hash identifier: YquDFz5p5k2f1wUftDysGCY9/EHkgYVsN6Vjw/vwzRI=
Subject key identifier: 16:24:1D:2B:B2:5B:8A:53:3C:65:2A:11:7D:6E:E2:6B:AF:97:2B:C1
Authority key identifier: 56:AD:9B:2C:22:7B:41:3C:50:58:13:29:4F:AA:DB:6D:BB:C2:DD:66
Certificate issuer: /CN=56ad9b2c227b413c505813294faadb6dbbc2dd66
Certificate serial: 0197CC15FFA2CB98C400C557D014DA3AB797
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/fdffe3-010f-4c6a-bd96-718b8c7c9335/1/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.mft
Manifest number: 0A7B
Signing time: Wed 02 Jul 2025 17:01:23 +0000
Manifest this update: Wed 02 Jul 2025 17:01:23 +0000
Manifest next update: Thu 03 Jul 2025 17:01:23 +0000
Files and hashes: 1: Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.crl (hash: GmoUyMEHdq43FHWw6zbbWGSWkhivrPvOxhYonY2XT1A=)
2: Vz7t1xxZS7Y8mi76AGQLhqb1ZQs.roa (hash: f5Op16EAB77dhVLhwIcxz3vKwaJVulfI7NYLkrJ/rQU=)
3: reLkqggetUctFOKXfyoXX7VB7AA.roa (hash: mWj2m9BfD30uCVlB2O3NlLuI0ufXtR+chyS8T5aSe4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/fdffe3-010f-4c6a-bd96-718b8c7c9335/1/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/fdffe3-010f-4c6a-bd96-718b8c7c9335/1/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 17:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cc:15:ff:a2:cb:98:c4:00:c5:57:d0:14:da:3a:b7:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56ad9b2c227b413c505813294faadb6dbbc2dd66
Validity
Not Before: Jul 2 17:01:23 2025 GMT
Not After : Jul 3 17:01:23 2025 GMT
Subject: CN=16241d2bb25b8a533c652a117d6ee26baf972bc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:1a:bb:f3:18:b2:f2:bf:b1:c2:f4:fb:0c:ee:
82:15:a3:36:40:6f:f1:b7:0e:d8:5b:1a:b2:0d:db:
88:e5:56:6d:b6:b3:75:50:b0:02:95:b4:17:c8:50:
e3:5a:7f:29:8e:7b:90:a0:96:f6:55:23:be:0d:98:
66:a4:54:26:66:08:b5:a0:92:24:3e:0d:a1:65:f2:
04:e2:5e:97:5f:de:8a:c3:26:3a:05:aa:45:fc:49:
ad:fe:41:ca:32:be:5b:ce:18:9f:a7:4c:70:20:d3:
c7:d1:c9:64:7c:82:10:20:38:26:83:3f:33:04:00:
33:0a:b9:1b:d5:b0:c8:af:c4:c8:69:3b:bf:c9:a7:
ac:9f:4f:97:b8:60:1c:99:e3:d6:19:06:97:a7:e2:
05:1b:35:6e:49:ad:29:9a:a4:e4:94:32:19:2b:c8:
a8:03:6e:37:d5:02:b2:b2:18:31:7f:9d:3c:b1:2c:
9e:1d:d0:ea:c8:16:5e:0a:83:5a:9c:f9:aa:15:fe:
21:a9:87:56:05:e9:38:0a:3d:e2:21:cb:72:95:5f:
0c:7a:7a:0f:0a:fe:9f:88:dd:39:f6:fc:cd:19:d0:
37:ca:9e:d6:7b:91:9e:d1:37:5a:3c:d9:5b:33:ef:
7d:f2:06:57:58:20:67:14:c8:ec:77:72:90:68:28:
fd:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:24:1D:2B:B2:5B:8A:53:3C:65:2A:11:7D:6E:E2:6B:AF:97:2B:C1
X509v3 Authority Key Identifier:
keyid:56:AD:9B:2C:22:7B:41:3C:50:58:13:29:4F:AA:DB:6D:BB:C2:DD:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/fdffe3-010f-4c6a-bd96-718b8c7c9335/1/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/fdffe3-010f-4c6a-bd96-718b8c7c9335/1/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:28:8b:d4:1c:74:d7:35:59:45:1d:aa:37:5a:d3:6d:f6:2f:
f8:34:23:48:5e:76:58:e1:cd:df:e3:3f:0e:18:2d:d5:bb:29:
aa:7a:8c:a7:d7:e7:e5:32:a4:ea:12:c5:65:02:6e:83:63:8b:
85:99:09:f1:58:3b:f4:0b:cc:88:c2:af:04:08:13:1e:00:4a:
f9:29:be:51:de:74:0f:34:cc:6c:34:16:ea:04:34:57:9e:54:
35:f1:23:9d:8f:7f:bf:5a:78:2b:61:28:25:87:b7:47:79:a7:
6f:80:cf:16:bc:23:30:2e:db:a4:b4:1e:76:ee:e0:d2:6a:ee:
b8:f8:73:d5:7c:12:b5:24:3f:f7:e9:a4:9c:2a:69:e5:47:e3:
4b:5a:d2:0d:16:b5:e1:6e:c9:c7:7e:bd:a9:6a:2f:e8:ca:67:
a9:ed:0c:6d:7f:cc:65:a0:88:f0:9e:cb:66:f4:c9:7e:9b:ac:
72:12:c2:7e:d3:89:97:59:9a:bb:56:16:04:3b:46:47:70:72:
56:d1:eb:2a:a0:c6:8e:9b:34:09:ba:53:eb:62:68:03:13:64:
32:ca:ec:64:a0:55:f8:d2:8f:12:12:23:c5:68:29:5f:41:9f:
4a:b8:be:84:f1:95:c2:89:12:34:d2:d1:56:37:06:56:d3:94:
dd:5f:ff:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 23:31:24 2025 by rpki-client