Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/VtDjso8r4z7FqdLKAKxkFVU2y8Y.mft
File: VtDjso8r4z7FqdLKAKxkFVU2y8Y.mft (raw, json)
Hash identifier: T+L2eTEBo1ljBNRr+3rUxjUulOIb1Ama0l0nmpsBjqA=
Subject key identifier: BC:9D:C2:96:A5:30:91:54:F8:F0:92:6F:C6:41:EB:FC:9E:44:A4:C0
Authority key identifier: 56:D0:E3:B2:8F:2B:E3:3E:C5:A9:D2:CA:00:AC:64:15:55:36:CB:C6
Certificate issuer: /CN=56d0e3b28f2be33ec5a9d2ca00ac64155536cbc6
Certificate serial: 0198D473EABCC821B3337CD8B0CB4B3114BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VtDjso8r4z7FqdLKAKxkFVU2y8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/VtDjso8r4z7FqdLKAKxkFVU2y8Y.mft
Manifest number: 0D52
Signing time: Sat 23 Aug 2025 01:03:43 +0000
Manifest this update: Sat 23 Aug 2025 01:03:43 +0000
Manifest next update: Sun 24 Aug 2025 01:03:43 +0000
Files and hashes: 1: 1evcMDo7pi-aA6SWjQJ5C1thyaU.roa (hash: xYDgN0KV8Q5QXfbFX/hw20fHK9cnWhX/isL2BXocmSw=)
2: BFOQ1xipYhPtnW3G70pfAnmzwzg.roa (hash: /+UHFdHIIgWbmriMU+n5ynXyWKvmniC4nJpXONs4/qY=)
3: ISS1nVoFj6vql40oL7xs039XkbE.roa (hash: Uj1JIR2yGWgQKTO1hh05hzaRctOY0c3hfi9SPLtZHjc=)
4: VtDjso8r4z7FqdLKAKxkFVU2y8Y.crl (hash: X+CEb+Cvmtr2IzGAQBb0xvZMN+wNxX0elV0LBRH6q+0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/VtDjso8r4z7FqdLKAKxkFVU2y8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/VtDjso8r4z7FqdLKAKxkFVU2y8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/VtDjso8r4z7FqdLKAKxkFVU2y8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:ea:bc:c8:21:b3:33:7c:d8:b0:cb:4b:31:14:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56d0e3b28f2be33ec5a9d2ca00ac64155536cbc6
Validity
Not Before: Aug 23 01:03:43 2025 GMT
Not After : Aug 24 01:03:43 2025 GMT
Subject: CN=bc9dc296a5309154f8f0926fc641ebfc9e44a4c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:1e:9c:c0:c1:09:f4:84:6e:8b:2b:cc:9a:46:
88:0a:eb:52:fa:7b:a7:82:df:6c:9f:f8:ef:7f:b4:
53:c5:82:1e:82:91:37:73:93:f4:38:2c:92:4e:f8:
21:e6:3a:96:70:e5:1a:ba:42:6d:53:3b:38:34:0e:
96:b5:00:9f:91:e0:7c:21:0b:3f:81:78:ee:3a:ca:
4e:09:de:47:79:76:9b:04:df:29:11:2a:aa:49:82:
91:aa:4a:fb:f7:97:3b:fd:e3:4f:2c:4d:6d:23:fb:
40:a1:d0:a2:65:a6:a7:6c:f8:82:9e:f8:c2:5b:aa:
99:6e:1e:1c:e1:92:2f:27:ad:c6:40:bb:ba:7b:fd:
56:34:73:69:fb:e8:b6:4f:de:4e:81:6d:6c:f2:f5:
e7:34:79:4a:22:86:81:6d:7e:fc:04:1b:cb:4f:c7:
c2:bf:dc:3f:61:cf:12:c7:98:f2:bf:16:9d:0f:38:
6e:19:7c:63:61:f0:57:d3:89:13:ee:e9:5d:c6:cb:
72:a1:fc:7a:fb:27:0b:82:24:f2:60:c2:85:f0:4f:
a0:34:79:b3:9a:5a:f9:00:a7:2b:07:9b:2d:6e:18:
1d:b7:88:15:23:7c:72:54:66:bc:eb:f4:3a:21:80:
44:74:39:6c:8b:11:03:4a:48:fe:62:9c:13:5d:67:
07:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:9D:C2:96:A5:30:91:54:F8:F0:92:6F:C6:41:EB:FC:9E:44:A4:C0
X509v3 Authority Key Identifier:
keyid:56:D0:E3:B2:8F:2B:E3:3E:C5:A9:D2:CA:00:AC:64:15:55:36:CB:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VtDjso8r4z7FqdLKAKxkFVU2y8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/VtDjso8r4z7FqdLKAKxkFVU2y8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ffbf6a-72f0-401f-b2c3-8b8d72172090/1/VtDjso8r4z7FqdLKAKxkFVU2y8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:f8:dc:a2:3a:8a:53:a3:93:52:fa:da:75:3d:d5:6f:4a:ea:
55:b3:44:e3:be:4e:68:85:46:6b:2a:66:1e:90:3a:62:0a:0c:
17:c3:9b:0f:1b:49:3d:1a:e0:d3:c6:dc:71:c3:50:a4:90:42:
fa:08:f6:d7:cc:17:a0:8a:33:c5:d5:fb:34:df:f8:11:f0:40:
eb:1a:7d:d2:50:09:a2:c9:56:d2:1c:aa:f8:a4:4e:bf:c5:12:
41:63:10:c0:63:6c:b2:96:f0:3f:17:ee:0e:71:11:49:76:95:
16:e4:99:1c:c5:c7:2f:d8:e4:8e:6c:26:62:18:e5:bd:ca:63:
47:67:b8:32:4c:1c:2f:ef:05:96:43:95:0a:12:9b:1e:7e:a3:
b1:5d:a8:56:55:e0:f2:02:1d:fa:88:a6:72:73:77:d3:0f:41:
1f:70:5f:56:83:d7:2c:97:82:49:50:f9:5f:89:d5:49:9c:34:
59:88:af:d2:d9:23:5f:89:4e:58:64:81:50:44:26:43:6d:6d:
a6:ad:22:e3:a7:e3:b8:0c:84:52:03:9c:33:7d:7a:c3:6a:b8:
40:79:32:42:a1:27:a4:63:e8:bd:39:a4:5a:9c:81:cb:8a:ef:
d7:4c:35:33:14:3d:f3:54:dc:d2:62:df:78:2f:5b:eb:84:f6:
13:83:d1:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:36:48 2025 by rpki-client