Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/c8aa4e-dd01-4a1a-8cc0-edf409fedfca/1/VUg02oYAyWxf3pEnj1IObA0m__M.mft
File: VUg02oYAyWxf3pEnj1IObA0m__M.mft (raw, json)
Hash identifier: oxnosy1WO2kYN7FbwZX8s70RqaUFKw2w/9gHOqffWVw=
Subject key identifier: 8F:13:4E:19:80:D6:39:6A:36:F0:16:CF:EE:47:50:F2:4A:0A:F7:FA
Authority key identifier: 55:48:34:DA:86:00:C9:6C:5F:DE:91:27:8F:52:0E:6C:0D:26:FF:F3
Certificate issuer: /CN=554834da8600c96c5fde91278f520e6c0d26fff3
Certificate serial: 0198D473F4F16006069AB34606161CC46AB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VUg02oYAyWxf3pEnj1IObA0m__M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/c8aa4e-dd01-4a1a-8cc0-edf409fedfca/1/VUg02oYAyWxf3pEnj1IObA0m__M.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 01:03:45 +0000
Manifest this update: Sat 23 Aug 2025 01:03:45 +0000
Manifest next update: Sun 24 Aug 2025 01:03:45 +0000
Files and hashes: 1: 5ViHo8CP-gF060JRbv2sDnYVvwI.roa (hash: QuO6jCw1G7bEtuq5gtmVrfr4TZNPSxo88gcCHtVd/jE=)
2: 8fof93hByfwq17Ckt-3keL0U8qE.roa (hash: fPV8OZM9BBwYkvL7Bz4KdU4owCtM7tBBVj0Rie52yyQ=)
3: VUg02oYAyWxf3pEnj1IObA0m__M.crl (hash: /oYoRN5/UsxzlGDFIgcS+D7SbWVRluQs29Q9L2WRFjE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/c8aa4e-dd01-4a1a-8cc0-edf409fedfca/1/VUg02oYAyWxf3pEnj1IObA0m__M.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/c8aa4e-dd01-4a1a-8cc0-edf409fedfca/1/VUg02oYAyWxf3pEnj1IObA0m__M.mft
rsync://rpki.ripe.net/repository/DEFAULT/VUg02oYAyWxf3pEnj1IObA0m__M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:f4:f1:60:06:06:9a:b3:46:06:16:1c:c4:6a:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=554834da8600c96c5fde91278f520e6c0d26fff3
Validity
Not Before: Aug 23 01:03:45 2025 GMT
Not After : Aug 24 01:03:45 2025 GMT
Subject: CN=8f134e1980d6396a36f016cfee4750f24a0af7fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e2:82:eb:3c:b5:7b:e3:4c:93:cb:60:c1:ab:
f2:ca:0f:0d:9e:a1:85:1c:b3:ce:84:82:2c:80:b7:
5f:a6:89:23:82:25:e5:be:92:8b:58:6a:fe:58:40:
96:be:f4:cd:78:bd:38:6f:20:de:46:2f:f5:d0:48:
80:4b:ab:19:47:9d:b1:bb:48:50:b8:40:57:0a:e8:
b3:1b:2f:3f:30:36:33:e1:cc:6a:a2:55:67:1d:25:
cb:39:61:d6:83:21:45:1a:03:ee:39:0d:c5:49:6b:
74:7c:c2:80:c2:c0:4a:a9:8e:14:ee:a8:5d:2c:92:
c0:cf:e9:b0:ba:ea:0d:7b:08:81:f2:87:d7:eb:c2:
ad:f7:46:6c:f7:48:e8:2a:1e:af:44:32:6e:60:88:
39:d2:40:c1:70:27:11:0a:37:02:11:72:0a:a5:6a:
a0:29:2f:0a:a3:e9:e6:87:64:a1:e8:ea:93:57:25:
1d:2b:99:15:98:5d:e2:4e:b9:ab:51:8e:e5:aa:d0:
00:88:e5:f8:5c:45:eb:a1:f8:9f:80:4d:f6:fb:e4:
76:24:79:0e:d6:36:33:54:45:fb:75:7c:93:1e:2f:
da:16:ab:47:cc:6b:75:36:f0:aa:62:3e:f0:68:c0:
a6:52:08:d4:d0:44:7e:bf:41:8f:7c:51:e9:d7:01:
28:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:13:4E:19:80:D6:39:6A:36:F0:16:CF:EE:47:50:F2:4A:0A:F7:FA
X509v3 Authority Key Identifier:
keyid:55:48:34:DA:86:00:C9:6C:5F:DE:91:27:8F:52:0E:6C:0D:26:FF:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VUg02oYAyWxf3pEnj1IObA0m__M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c8aa4e-dd01-4a1a-8cc0-edf409fedfca/1/VUg02oYAyWxf3pEnj1IObA0m__M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/c8aa4e-dd01-4a1a-8cc0-edf409fedfca/1/VUg02oYAyWxf3pEnj1IObA0m__M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:0e:35:e4:57:75:42:9c:da:4a:4c:64:56:90:52:9f:30:f5:
bc:62:04:13:f2:0e:b5:68:65:ab:77:72:54:b3:91:af:0f:63:
3e:ee:1f:1a:74:df:ee:9c:7f:06:7f:7d:b2:9e:d7:c4:80:77:
ec:07:c8:25:4d:fb:bd:7e:13:0b:d3:8b:d0:81:ff:43:1f:ac:
97:e0:27:17:ae:53:03:10:1e:b5:60:79:08:fc:06:72:09:f8:
4f:30:6b:fe:ee:05:8f:8c:81:a3:21:73:5b:00:5c:38:e1:9a:
38:43:59:ae:80:76:01:1f:d6:e6:f3:3b:ce:16:a8:e5:13:ab:
b9:78:d5:c1:af:23:a2:ab:5f:ee:c0:8a:1a:f0:44:c5:69:20:
a5:eb:6e:2d:21:68:27:8e:70:07:69:b0:78:71:7e:ea:aa:c6:
a8:f3:be:ea:4e:2f:23:5f:6c:69:cd:93:28:f3:f4:0b:0d:c2:
2d:5f:a3:0e:95:c4:b9:f5:b5:1d:64:f7:74:6e:98:2f:66:d4:
27:02:88:58:a0:24:53:78:25:9c:b1:c4:62:7c:61:13:fa:fc:
3a:84:f2:4d:ae:23:4f:c0:47:6a:32:8e:6d:12:b5:27:75:f3:
d4:3e:bd:1a:6c:a2:0c:d0:fa:7a:ed:ed:1c:51:b5:dc:02:9a:
fa:bf:57:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:36:22 2025 by rpki-client