Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.mft
File: VHbDyngMxXdErb6QoPOU8dHNcvM.mft (raw, json)
Hash identifier: y1WQPmaLQ/P14mbWpCMctbWTXtkzgHUejSkEmJZ5H80=
Subject key identifier: 40:B4:98:C3:BF:12:53:64:50:4A:24:D8:51:47:6F:04:1F:69:8B:AC
Authority key identifier: 54:76:C3:CA:78:0C:C5:77:44:AD:BE:90:A0:F3:94:F1:D1:CD:72:F3
Certificate issuer: /CN=5476c3ca780cc57744adbe90a0f394f1d1cd72f3
Certificate serial: 0198D54E9070B04238421D221D6120C162EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VHbDyngMxXdErb6QoPOU8dHNcvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.mft
Manifest number: 02B2
Signing time: Sat 23 Aug 2025 05:02:32 +0000
Manifest this update: Sat 23 Aug 2025 05:02:32 +0000
Manifest next update: Sun 24 Aug 2025 05:02:32 +0000
Files and hashes: 1: J1F-UaHfYAClgmD-n-h_bemva1g.roa (hash: LkkLFeCVLkb+GZvSdm+hQS9Yt//NS73l5BEh3ajjGOM=)
2: Mzf3T5ZCYDRP9VJBsVQOjUFWDdY.roa (hash: fMfmlTHaxDxkKj4QIO7HlLPP5wMEtHiZKgYxRA6zmJA=)
3: VHbDyngMxXdErb6QoPOU8dHNcvM.crl (hash: BjtWffI2LnrXhZyeALvOV5QpUrFne3kUmPHntGA5Rvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/VHbDyngMxXdErb6QoPOU8dHNcvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:90:70:b0:42:38:42:1d:22:1d:61:20:c1:62:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5476c3ca780cc57744adbe90a0f394f1d1cd72f3
Validity
Not Before: Aug 23 05:02:32 2025 GMT
Not After : Aug 24 05:02:32 2025 GMT
Subject: CN=40b498c3bf125364504a24d851476f041f698bac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c2:73:4f:4d:00:7e:e8:90:b3:ce:f0:d2:01:
ce:d0:0f:07:78:b1:6d:bf:ed:cc:12:71:15:2d:a8:
c1:6a:1f:11:6b:2c:3b:e9:07:dc:2d:ba:cd:95:7c:
4e:25:b8:8a:ba:36:47:78:9c:59:3f:05:46:a8:eb:
90:59:83:9b:79:45:75:fb:3c:4b:85:70:e2:a6:0c:
26:5c:f9:19:21:4a:fc:8d:38:06:f9:57:8f:2e:52:
ce:60:e0:ef:26:9d:fa:fe:8b:6a:25:bd:8c:68:3c:
0d:03:e1:25:62:bf:ad:9b:c4:3c:21:8d:4e:63:ff:
63:2c:62:8a:27:87:c2:c0:b3:13:3d:cb:99:19:d6:
d1:08:51:f3:6d:39:94:a0:86:ae:4e:e0:4c:04:33:
e1:a9:a4:7d:1c:74:17:8c:f6:6b:c6:09:90:0a:ef:
73:19:b5:e1:3c:b5:09:28:2f:5b:51:85:9a:54:ee:
3b:50:e6:c8:1f:db:5d:ee:d1:af:89:03:16:4f:e8:
9b:e5:3b:8c:a0:ae:b5:5d:4c:72:f8:43:55:6b:04:
58:8c:bb:4f:a7:37:4f:33:89:fc:76:3a:3f:87:88:
60:ef:6e:f9:1e:bc:83:c8:90:51:1f:c3:d7:0c:8a:
d4:e0:d7:5e:fa:28:ec:55:58:e2:f0:80:b9:1e:b8:
fe:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:B4:98:C3:BF:12:53:64:50:4A:24:D8:51:47:6F:04:1F:69:8B:AC
X509v3 Authority Key Identifier:
keyid:54:76:C3:CA:78:0C:C5:77:44:AD:BE:90:A0:F3:94:F1:D1:CD:72:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHbDyngMxXdErb6QoPOU8dHNcvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:2b:73:06:43:b6:7a:d0:05:46:52:b5:0e:73:00:21:ba:5c:
3c:42:89:65:5a:04:1f:88:1f:84:ce:17:a6:64:1e:59:3c:5a:
a8:3d:30:e4:56:87:22:b2:19:2d:52:0a:22:c7:bb:8c:ab:be:
42:c8:8f:47:b3:03:3d:94:8f:84:8c:8e:2b:5d:96:e1:dc:f1:
9b:2c:66:f9:5f:2f:3b:46:62:eb:69:fe:19:2d:c0:cd:43:74:
ed:38:1e:63:4d:04:4f:a1:82:d9:b9:d7:68:d6:ff:d3:c5:04:
4e:64:37:25:59:ce:b3:81:a1:1f:f1:3d:71:79:3a:55:dc:31:
93:f1:89:c1:d9:a1:6a:50:53:ef:76:10:73:44:ca:fc:a6:13:
1f:64:98:c5:aa:49:08:33:2e:80:c1:99:4e:d8:8b:c6:9c:ff:
80:17:3b:7b:09:33:86:88:7e:57:b2:6d:8d:1a:1e:d0:74:79:
10:2c:aa:75:08:ca:b2:16:69:be:26:0a:de:43:80:9b:f5:79:
b1:62:6b:79:90:24:58:9e:a2:7a:8b:00:f4:93:3f:72:e0:17:
74:23:a2:2e:18:30:84:2f:4e:a4:78:5d:aa:bd:e2:de:b0:d0:
67:0f:8e:ab:04:3c:e2:9e:ed:c4:0c:be:e6:dd:f2:ba:9b:c8:
36:36:90:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:40:27 2025 by rpki-client