Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/fdffe3-010f-4c6a-bd96-718b8c7c9335/1/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.mft
File: Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.mft (raw, json)
Hash identifier: qkupCBoLcutMp3ZheGNg+Z4eejdoxzTBoVk507/8zdU=
Subject key identifier: 2B:17:C9:70:B8:60:41:EC:93:8B:80:AC:37:78:0A:9B:EB:D6:25:B8
Authority key identifier: 56:AD:9B:2C:22:7B:41:3C:50:58:13:29:4F:AA:DB:6D:BB:C2:DD:66
Certificate issuer: /CN=56ad9b2c227b413c505813294faadb6dbbc2dd66
Certificate serial: 0198D4A79A72780632D74366E059D9657B92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/fdffe3-010f-4c6a-bd96-718b8c7c9335/1/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.mft
Manifest number: 0B04
Signing time: Sat 23 Aug 2025 02:00:10 +0000
Manifest this update: Sat 23 Aug 2025 02:00:10 +0000
Manifest next update: Sun 24 Aug 2025 02:00:10 +0000
Files and hashes: 1: Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.crl (hash: /X2MitH0f6BrDm+lR64dwzb4SWSfpJEBAy8b8tgHSyc=)
2: Vz7t1xxZS7Y8mi76AGQLhqb1ZQs.roa (hash: f5Op16EAB77dhVLhwIcxz3vKwaJVulfI7NYLkrJ/rQU=)
3: reLkqggetUctFOKXfyoXX7VB7AA.roa (hash: mWj2m9BfD30uCVlB2O3NlLuI0ufXtR+chyS8T5aSe4M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/fdffe3-010f-4c6a-bd96-718b8c7c9335/1/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/fdffe3-010f-4c6a-bd96-718b8c7c9335/1/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:9a:72:78:06:32:d7:43:66:e0:59:d9:65:7b:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56ad9b2c227b413c505813294faadb6dbbc2dd66
Validity
Not Before: Aug 23 02:00:10 2025 GMT
Not After : Aug 24 02:00:10 2025 GMT
Subject: CN=2b17c970b86041ec938b80ac37780a9bebd625b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ab:ea:39:ea:b9:10:cd:90:51:df:f0:7e:09:
32:8c:d0:4f:39:ea:2d:1d:3c:57:0e:b9:73:e2:a2:
d3:df:91:6f:d9:ce:bb:b8:b0:66:77:d8:88:b6:61:
06:6a:c9:67:0e:fc:12:f9:af:84:f6:70:a1:2f:37:
42:e9:c0:ca:8d:41:51:44:22:d2:6f:c5:84:85:42:
72:3d:97:8a:91:2d:d8:6c:fa:80:1d:50:1e:a6:1f:
48:fb:63:f5:1b:a4:6f:d7:22:2a:ef:96:d7:bc:fc:
62:49:c0:73:97:84:9d:e1:fe:18:89:e8:db:06:f3:
48:ec:80:23:ad:79:0f:62:5b:72:8e:40:fc:5c:19:
cc:11:bd:50:0b:46:bd:12:59:c1:24:cc:68:43:33:
30:12:4a:4f:08:85:6e:0b:32:d6:89:fc:a4:2a:4e:
a0:61:88:fd:8b:ec:44:58:b5:71:28:08:9f:33:92:
7e:43:79:2b:67:75:db:9c:61:37:14:f2:19:2c:2d:
fb:47:00:9b:60:41:91:ef:ff:47:77:9e:13:8c:97:
99:e3:76:c7:5e:19:a3:e9:fc:56:d6:96:e6:b1:c1:
a4:67:34:d3:9d:f5:cf:34:c7:77:9b:e7:f3:91:d2:
88:fd:06:20:a9:f6:7b:b6:77:fc:63:c1:5f:44:8b:
61:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:17:C9:70:B8:60:41:EC:93:8B:80:AC:37:78:0A:9B:EB:D6:25:B8
X509v3 Authority Key Identifier:
keyid:56:AD:9B:2C:22:7B:41:3C:50:58:13:29:4F:AA:DB:6D:BB:C2:DD:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/fdffe3-010f-4c6a-bd96-718b8c7c9335/1/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/fdffe3-010f-4c6a-bd96-718b8c7c9335/1/Vq2bLCJ7QTxQWBMpT6rbbbvC3WY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:cc:a8:6c:ce:46:6a:c5:1d:ef:03:3b:ac:16:97:ae:f1:7e:
24:30:9c:24:c3:4a:96:fb:1d:4a:39:5d:60:de:8f:89:44:81:
37:7f:3d:32:8e:89:2e:40:43:89:cc:8c:7f:48:bc:59:a4:37:
8e:91:a8:76:11:b9:0f:1a:1a:c1:8d:88:ae:e3:ae:bb:52:22:
dc:35:a7:7c:fb:d8:8a:6f:45:8d:ec:db:f8:1c:69:63:90:c4:
98:39:77:63:7c:94:4b:b0:c7:ed:e5:73:aa:31:06:88:f1:27:
d5:2a:a3:11:2e:49:95:0f:30:ad:c3:53:8f:6c:ce:a1:82:ab:
a3:96:eb:fd:36:98:23:a9:eb:c9:f2:ac:9c:4e:66:19:bd:49:
c6:89:69:b3:63:07:17:5b:e0:2b:4b:a4:b1:10:a1:83:d7:4b:
86:e0:43:1f:50:af:76:02:eb:6d:74:64:09:6c:d8:37:90:c4:
13:ae:dd:b6:09:53:8f:68:b7:d9:3e:da:92:6f:b3:2d:1e:ef:
11:58:0e:7c:32:88:3b:51:d0:86:e1:e4:59:3c:fd:ab:0d:22:
a3:cb:af:84:8b:2f:11:20:a3:9e:e1:3d:1b:b9:8c:a2:e2:dd:
b9:b6:15:29:cf:05:4c:d4:db:ad:d6:80:b7:c5:18:e9:bf:86:
4c:f8:4d:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:43:24 2025 by rpki-client