Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.mft
File: VDxcNKYv--2PwPDsAbQsDFDufvc.mft (raw, json)
Hash identifier: qcB7TACU/qVwJwzfbfiOuoSR50D7BuhaJV9cQezbUVc=
Subject key identifier: 43:1A:6D:EF:A8:4B:59:2F:97:60:99:33:49:39:C7:24:7C:1B:54:37
Authority key identifier: 54:3C:5C:34:A6:2F:FB:ED:8F:C0:F0:EC:01:B4:2C:0C:50:EE:7E:F7
Certificate issuer: /CN=543c5c34a62ffbed8fc0f0ec01b42c0c50ee7ef7
Certificate serial: 0198D7061E075A16E9E33BA1CA30836399F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VDxcNKYv--2PwPDsAbQsDFDufvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.mft
Manifest number: 0864
Signing time: Sat 23 Aug 2025 13:02:38 +0000
Manifest this update: Sat 23 Aug 2025 13:02:38 +0000
Manifest next update: Sun 24 Aug 2025 13:02:38 +0000
Files and hashes: 1: 3OLIMizXOJwfjWRWiEBjpUKJwIU.roa (hash: QMFZT0i3XGS+MsKzCsZOmKPi7vfVCyuG5tTyqhdATNA=)
2: NPlJ_KhWtoEU85P6_bEw-JrQECw.roa (hash: +WKUN/INEKKaNIE4RDQgpQc6rCP9GRAzlztHhcY8Wc4=)
3: PVF7wnGzCTMj-DMi0Yh7tJoQV50.roa (hash: ifNzodbn64RIKDxyUKgvxQYTPT/TGzAFj9xlomWoMYM=)
4: VDxcNKYv--2PwPDsAbQsDFDufvc.crl (hash: 0L/P/jclkaZMBfF8kG6Qgr5E4wGTUwS9TA4PSmdCg9I=)
5: aP1xgGw8H7jCOI-VSZ01nj8-4CM.roa (hash: tc+u6WTs4frUnC9+3IttTv0/u7Rmmf/DRJCt109dDEg=)
6: egWiNnqY9Vl0Wup08EirG2JX11M.roa (hash: cdwWkaZBw0jnB5ddN/k9GlCFftOqTidrPnaELenZvX8=)
7: lSBrUQBEKuTSY6AdNT1ZVvcTRx8.roa (hash: G+WOXA6z8Ino3VGaelG9h3UW5mZBPuWh+ANhGCA7MB0=)
8: tRNUe3Kk3eWia8VX_dKXZILdgjE.roa (hash: JStwVDR6ukqM/F9+GpHeAO0i8HlEBKkQBbaoGUyV6eY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/VDxcNKYv--2PwPDsAbQsDFDufvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:06:1e:07:5a:16:e9:e3:3b:a1:ca:30:83:63:99:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=543c5c34a62ffbed8fc0f0ec01b42c0c50ee7ef7
Validity
Not Before: Aug 23 13:02:38 2025 GMT
Not After : Aug 24 13:02:38 2025 GMT
Subject: CN=431a6defa84b592f976099334939c7247c1b5437
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:92:14:e6:35:c7:be:24:85:20:43:cf:aa:93:
e3:75:c9:b4:22:80:d8:2c:52:fd:77:c8:b1:e4:6c:
61:ee:17:2b:2d:3e:cf:2a:9e:89:1e:43:fe:b5:a6:
09:db:4a:5e:1d:36:f3:c1:f1:e2:5d:b9:39:74:8f:
cf:03:d7:b2:9c:30:10:d2:57:27:5d:13:c2:2a:a5:
2d:55:de:11:55:7b:27:2c:ce:34:f1:0a:06:1d:c0:
83:9f:48:91:31:f5:b3:b5:f9:15:57:eb:1c:6c:ff:
0d:17:63:f5:77:8c:f2:1e:6b:17:a0:62:45:d3:96:
0a:ca:48:f8:ad:1a:06:f6:c7:3e:02:32:15:1d:cd:
11:df:bc:47:38:5e:33:2d:02:6f:f6:27:0f:d5:de:
e0:eb:7c:1c:86:c0:96:6c:3a:3a:67:b8:62:43:8c:
ea:41:2e:28:b2:0e:b6:ac:63:48:31:dd:fd:95:13:
90:45:fe:07:0f:36:3d:91:c2:56:8a:2d:d8:b7:1c:
86:9c:48:aa:3c:2c:cb:82:a8:75:32:c4:51:02:f0:
65:26:b4:c0:88:94:f0:cd:a8:de:0d:81:18:6c:ac:
7b:d8:03:d1:72:cb:2a:28:3c:b6:e4:a6:4d:9e:5f:
28:31:c4:4e:1e:58:b5:3d:29:32:d3:68:a6:5a:5a:
2e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:1A:6D:EF:A8:4B:59:2F:97:60:99:33:49:39:C7:24:7C:1B:54:37
X509v3 Authority Key Identifier:
keyid:54:3C:5C:34:A6:2F:FB:ED:8F:C0:F0:EC:01:B4:2C:0C:50:EE:7E:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VDxcNKYv--2PwPDsAbQsDFDufvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:35:07:44:e0:e4:b9:6b:06:99:04:42:e2:d1:c0:3d:f0:1b:
51:d7:f7:d0:39:19:78:57:50:92:97:a3:0c:2c:69:9a:f7:af:
d9:34:d0:bf:33:cc:6a:11:bb:54:45:bc:b2:2d:02:da:f9:81:
7a:ea:8d:ca:60:2b:4f:53:2f:28:d0:17:41:b0:23:50:98:b4:
ba:08:a5:49:cf:35:74:c3:63:85:b6:5d:34:6b:d7:ac:bc:d2:
67:48:14:79:64:56:c2:09:a9:26:f2:65:ac:47:55:ce:a4:e0:
2a:88:86:65:0f:bf:3f:a4:7b:b9:b0:9a:e3:8c:5e:fc:a5:6a:
d5:d2:ca:8c:f5:aa:00:12:61:74:6c:31:c1:a7:0a:e8:0c:60:
e6:02:24:ee:dc:b1:5b:9f:56:89:76:4a:14:83:cb:a9:58:b4:
42:9c:3a:24:56:23:8a:d1:ce:8d:d8:f0:0e:c0:cc:61:d4:3f:
b1:f8:4a:77:2e:be:af:ab:a7:d2:69:f6:f7:01:3a:17:1f:22:
b7:1f:8e:62:f0:ab:f7:9a:1e:6c:5f:70:c6:24:fc:a7:f0:14:
65:5c:17:ac:d0:8f:2a:66:67:67:40:fd:7a:37:0a:48:c0:55:
ca:b4:2b:cd:f0:04:77:29:84:ac:48:78:95:a3:03:13:7e:da:
dd:bf:94:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:16:24 2025 by rpki-client