Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/9a9e14-04ea-413f-8c48-a24fabf56dad/1/VPQtulHsKDXT5NCj2MSL8yL2vbU.mft
File: VPQtulHsKDXT5NCj2MSL8yL2vbU.mft (raw, json)
Hash identifier: 6lPBONgGB7QZtekLtheovO2PwWCHyxCpnS8rTZBNgxg=
Subject key identifier: 71:A6:FC:F3:33:94:C5:65:9C:5B:D3:D6:F0:05:70:8C:6B:76:5F:D3
Authority key identifier: 54:F4:2D:BA:51:EC:28:35:D3:E4:D0:A3:D8:C4:8B:F3:22:F6:BD:B5
Certificate issuer: /CN=54f42dba51ec2835d3e4d0a3d8c48bf322f6bdb5
Certificate serial: 0198D472F0E4A4ADDB5B857B3E24BDE86D85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VPQtulHsKDXT5NCj2MSL8yL2vbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/9a9e14-04ea-413f-8c48-a24fabf56dad/1/VPQtulHsKDXT5NCj2MSL8yL2vbU.mft
Manifest number: 0ACA
Signing time: Sat 23 Aug 2025 01:02:39 +0000
Manifest this update: Sat 23 Aug 2025 01:02:39 +0000
Manifest next update: Sun 24 Aug 2025 01:02:39 +0000
Files and hashes: 1: VPQtulHsKDXT5NCj2MSL8yL2vbU.crl (hash: 4Hp9gJEthtdE+SzBia256l6N9WIXVFHQQd6rrvfRrQQ=)
2: mUHt0oKQoXS4NriBI7EGKLoM09o.roa (hash: SD6es8T2Vz3P454Q+Wryhaz45Qcvfh6pBeSnz1RWRNI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/9a9e14-04ea-413f-8c48-a24fabf56dad/1/VPQtulHsKDXT5NCj2MSL8yL2vbU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/9a9e14-04ea-413f-8c48-a24fabf56dad/1/VPQtulHsKDXT5NCj2MSL8yL2vbU.mft
rsync://rpki.ripe.net/repository/DEFAULT/VPQtulHsKDXT5NCj2MSL8yL2vbU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:f0:e4:a4:ad:db:5b:85:7b:3e:24:bd:e8:6d:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54f42dba51ec2835d3e4d0a3d8c48bf322f6bdb5
Validity
Not Before: Aug 23 01:02:39 2025 GMT
Not After : Aug 24 01:02:39 2025 GMT
Subject: CN=71a6fcf33394c5659c5bd3d6f005708c6b765fd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a8:39:73:05:01:db:b8:8d:9c:13:75:05:dd:
5d:64:68:b3:b5:3e:be:c6:6f:27:16:1b:52:b7:da:
f7:4b:53:d6:f0:d1:58:79:79:b4:36:8f:47:a9:60:
3f:9a:cb:f1:cc:5c:3b:96:dc:15:75:2a:d2:08:46:
8a:00:a3:55:38:58:40:61:5e:ea:30:04:17:44:3b:
94:9c:dd:5b:11:5a:ad:0f:ec:6a:11:37:35:03:68:
4f:9d:64:17:fd:bf:66:4c:fb:06:52:48:49:5a:7e:
2c:2f:c2:8e:85:55:a3:f1:f8:3b:a6:e8:89:1f:c5:
e3:2c:79:a8:de:29:ac:bf:b2:dc:f7:48:65:02:15:
e0:08:2e:3f:d5:2c:24:41:d6:68:ef:e6:63:4e:ed:
7f:2c:0a:20:b4:69:6c:7c:ea:13:c0:81:9e:0c:c9:
73:0e:75:04:a5:da:9e:ec:0d:75:7b:06:2b:ed:c4:
de:78:40:dd:55:72:16:0e:1f:ca:37:9a:71:68:27:
3a:01:71:39:1c:ce:de:e1:07:ca:74:6c:d2:8e:23:
96:e8:92:f9:76:4e:d3:ed:1c:7a:7c:a1:92:c2:84:
4d:30:90:3c:20:60:9e:98:ae:7d:37:b0:53:e2:ec:
d0:2e:8a:b1:1d:1d:b0:07:93:82:be:6e:98:42:9f:
8c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:A6:FC:F3:33:94:C5:65:9C:5B:D3:D6:F0:05:70:8C:6B:76:5F:D3
X509v3 Authority Key Identifier:
keyid:54:F4:2D:BA:51:EC:28:35:D3:E4:D0:A3:D8:C4:8B:F3:22:F6:BD:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VPQtulHsKDXT5NCj2MSL8yL2vbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9a9e14-04ea-413f-8c48-a24fabf56dad/1/VPQtulHsKDXT5NCj2MSL8yL2vbU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/9a9e14-04ea-413f-8c48-a24fabf56dad/1/VPQtulHsKDXT5NCj2MSL8yL2vbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:9d:e2:38:43:95:bc:8c:d8:e9:b7:0b:f8:c5:06:67:d7:05:
3a:25:6a:21:8e:45:19:40:1d:5f:f7:22:58:b8:fb:2a:d9:d6:
cc:25:31:91:91:a6:89:f7:5c:3f:2d:5a:87:48:d0:b7:1e:cc:
cb:02:03:9d:4b:67:fb:b0:82:1a:46:68:d9:15:f4:11:ba:0a:
77:42:24:b0:41:8c:ce:51:c4:53:14:9c:17:6a:23:85:9d:5c:
6a:d0:91:fc:ee:1f:44:91:57:7d:e3:7e:9f:8f:0d:88:7e:0d:
d5:19:2f:9b:db:58:b5:cf:ed:da:d1:a7:03:d9:95:df:ab:83:
38:66:cb:3d:29:4f:d5:75:c4:81:e9:61:88:81:da:00:29:d9:
3c:0d:a5:b0:10:d0:f5:74:bd:a4:42:84:93:d9:6a:be:86:fa:
7d:77:bc:16:1c:f1:6f:22:b1:c1:23:0a:5f:ff:37:f1:79:93:
f6:ed:41:86:2e:58:16:6e:e9:7d:74:a2:06:5d:31:5f:17:b6:
b7:48:fa:b4:23:c0:4d:0a:83:e1:1c:00:38:56:f8:fb:88:1c:
55:db:13:5a:94:6d:60:1a:b3:4c:68:e5:e8:f9:68:53:d3:76:
96:1c:65:0d:f2:d2:2f:47:86:b5:bf:49:27:da:9c:18:d4:4f:
5c:ce:d8:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:48:40 2025 by rpki-client