Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/41c111-6505-41a4-9e67-3b91ff9a1acd/1/vqe2d3e5poMpM1dkl7RqmxYwTNk.mft
File: vqe2d3e5poMpM1dkl7RqmxYwTNk.mft (raw, json)
Hash identifier: Uietm9s9QE/h7sedwSxFOmoP18kKTOqJpszXc565hAs=
Subject key identifier: 57:B4:2C:73:B6:05:B5:C0:1C:C1:CB:E7:37:5D:7C:21:0B:07:37:A1
Authority key identifier: BE:A7:B6:77:77:B9:A6:83:29:33:57:64:97:B4:6A:9B:16:30:4C:D9
Certificate issuer: /CN=bea7b67777b9a6832933576497b46a9b16304cd9
Certificate serial: 0198D5F18FE7DA6C89472DFF484427FE3A31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vqe2d3e5poMpM1dkl7RqmxYwTNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/41c111-6505-41a4-9e67-3b91ff9a1acd/1/vqe2d3e5poMpM1dkl7RqmxYwTNk.mft
Manifest number: 148B
Signing time: Sat 23 Aug 2025 08:00:34 +0000
Manifest this update: Sat 23 Aug 2025 08:00:34 +0000
Manifest next update: Sun 24 Aug 2025 08:00:34 +0000
Files and hashes: 1: sf1KX3-278D909_VQvgz_1jkfVI.roa (hash: zN2i6GvyNGlDViFzbVFFZ6ISLkchZMIvYNFAKpwZnH0=)
2: vqe2d3e5poMpM1dkl7RqmxYwTNk.crl (hash: tz/hYkQuW8U7YpiDvf92Sh2ayiCOrst31MA1lT5WVdM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/41c111-6505-41a4-9e67-3b91ff9a1acd/1/vqe2d3e5poMpM1dkl7RqmxYwTNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/41c111-6505-41a4-9e67-3b91ff9a1acd/1/vqe2d3e5poMpM1dkl7RqmxYwTNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vqe2d3e5poMpM1dkl7RqmxYwTNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:8f:e7:da:6c:89:47:2d:ff:48:44:27:fe:3a:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bea7b67777b9a6832933576497b46a9b16304cd9
Validity
Not Before: Aug 23 08:00:34 2025 GMT
Not After : Aug 24 08:00:34 2025 GMT
Subject: CN=57b42c73b605b5c01cc1cbe7375d7c210b0737a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:47:9c:4d:ce:ec:f7:14:ec:7f:41:17:52:f0:
83:f5:f0:14:e7:0e:e6:09:b3:ef:0a:ed:22:76:c1:
b3:45:a1:07:d6:93:48:f8:a1:5d:9f:30:1c:c9:36:
fc:36:11:ea:db:9e:95:08:e7:db:37:d1:d5:81:73:
6f:ca:98:98:db:27:98:07:96:24:57:1f:67:ed:f6:
03:0b:61:2c:a7:56:39:11:96:14:09:e3:41:fe:44:
ed:c5:ef:09:c9:2e:a0:23:9a:d8:e5:b5:48:ff:2c:
a9:56:93:71:44:7c:eb:e0:ff:7c:d0:13:79:86:5d:
41:20:03:79:41:f4:aa:5c:84:9e:78:66:99:7e:df:
bd:4c:bc:1f:15:e5:3b:a5:1d:e8:f0:f0:05:29:ff:
a8:99:b2:55:7e:c2:82:6c:f7:07:70:17:52:7d:30:
04:0f:3a:59:33:a6:3a:d7:10:51:7b:82:f8:d3:b4:
71:57:ff:ba:b3:34:9e:9e:8e:ba:73:8d:1a:a9:79:
9a:9e:e9:c0:61:12:1b:d3:d1:34:ff:44:1a:ef:7f:
da:98:34:6b:d5:a4:5e:99:83:d5:a1:5b:72:8c:d3:
2e:cc:1f:0d:61:7b:ac:8c:8b:64:0d:8d:16:ac:9e:
97:56:35:bd:09:21:78:ff:a0:ee:09:ef:61:79:11:
4c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:B4:2C:73:B6:05:B5:C0:1C:C1:CB:E7:37:5D:7C:21:0B:07:37:A1
X509v3 Authority Key Identifier:
keyid:BE:A7:B6:77:77:B9:A6:83:29:33:57:64:97:B4:6A:9B:16:30:4C:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqe2d3e5poMpM1dkl7RqmxYwTNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/41c111-6505-41a4-9e67-3b91ff9a1acd/1/vqe2d3e5poMpM1dkl7RqmxYwTNk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/41c111-6505-41a4-9e67-3b91ff9a1acd/1/vqe2d3e5poMpM1dkl7RqmxYwTNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:61:1e:7c:7c:82:a1:24:9b:c3:6d:54:71:7d:d4:f0:c6:90:
92:15:22:0a:a4:33:ed:f2:9d:6d:ef:65:7b:17:89:40:2c:f6:
22:76:32:eb:06:6f:7a:e2:18:8c:cf:b7:f8:45:cd:39:7d:2a:
86:30:8d:d7:f2:da:a9:14:39:71:f2:a2:03:4a:3b:8c:2e:e2:
0c:79:78:5e:25:45:0c:bf:b6:a7:38:e6:f2:7d:37:cd:20:e7:
ea:01:55:71:8b:4c:c3:ce:1f:d7:01:9a:ff:af:43:9c:32:76:
c1:b5:1e:c1:11:21:fb:42:28:d0:54:77:4e:98:98:9e:a7:81:
1c:d4:91:e2:7e:a0:77:c6:b0:54:de:d3:53:04:c2:3f:9f:23:
a1:93:a8:4c:d2:0e:b9:ad:8f:a3:ac:f4:2b:57:94:b2:5d:0d:
74:d8:ba:17:8d:5a:59:b2:10:8a:42:38:b6:c0:be:1b:28:f4:
fc:d5:e3:c5:cd:60:00:60:79:8e:56:a2:1e:c8:75:30:7e:e7:
1e:c1:d5:47:32:61:9a:7d:2b:1b:a9:de:99:9e:3d:ec:9d:7e:
0a:66:d1:3f:70:2a:40:08:c3:aa:0b:5a:63:a0:f8:e3:21:92:
c3:2c:4a:fe:5f:d1:1e:f7:d5:35:66:69:e3:2e:c1:7f:3f:77:
15:cb:8a:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:42:39 2025 by rpki-client