Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.mft
File: vEQ_eq5H4Ks4vPjVNsymA1DRcnA.mft (raw, json)
Hash identifier: /JlF7M0YUoJzu2Krtk6RIheE13CehjfQeS4LZFwrKio=
Subject key identifier: 1A:56:1C:1A:0A:BA:D9:8C:67:F8:AB:1E:22:E6:52:FB:75:AB:41:84
Authority key identifier: BC:44:3F:7A:AE:47:E0:AB:38:BC:F8:D5:36:CC:A6:03:50:D1:72:70
Certificate issuer: /CN=bc443f7aae47e0ab38bcf8d536cca60350d17270
Certificate serial: 0198D697F1CEFA5214DBBD0DFE946CF2428F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.mft
Manifest number: 0A55
Signing time: Sat 23 Aug 2025 11:02:18 +0000
Manifest this update: Sat 23 Aug 2025 11:02:18 +0000
Manifest next update: Sun 24 Aug 2025 11:02:18 +0000
Files and hashes: 1: 4zZX5zJWUsfZ5zmG6bPbMr0lvbs.roa (hash: Qk/9tkVuHYR7bI8BB1K5v6WoVgCSt0kT7wqGusdLxvQ=)
2: Cd4rO-Hjh_1s-LE7zVhil5Tbff8.roa (hash: 1HerR65Yb0tTxX+akt3GL/BhgF51Uoa+ZBuv4yRBK4o=)
3: vEQ_eq5H4Ks4vPjVNsymA1DRcnA.crl (hash: yJ8JqjDv6boll7Ml0CEM+yIoikkavw1KHbK8o8iXtxo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.mft
rsync://rpki.ripe.net/repository/DEFAULT/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:97:f1:ce:fa:52:14:db:bd:0d:fe:94:6c:f2:42:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc443f7aae47e0ab38bcf8d536cca60350d17270
Validity
Not Before: Aug 23 11:02:18 2025 GMT
Not After : Aug 24 11:02:18 2025 GMT
Subject: CN=1a561c1a0abad98c67f8ab1e22e652fb75ab4184
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d1:ef:e1:0e:a7:46:f7:81:1e:c1:a6:5b:da:
97:f1:00:fb:e1:60:1c:28:f5:fd:6b:98:9d:76:8b:
35:83:c7:6f:a8:1b:a7:b3:ab:ca:22:3b:33:85:6e:
1e:58:9d:c6:b7:ca:73:23:3a:17:c4:ba:5f:5d:6d:
bc:c6:89:a3:3f:f4:56:3f:c0:b0:32:e8:15:42:a7:
28:07:84:ba:06:7e:ad:76:c4:bf:68:fe:a3:9b:bc:
49:4b:4d:13:66:96:27:e1:fe:5b:ff:5b:54:df:46:
ab:e0:cf:5c:f0:39:cf:e7:ea:82:2d:d8:22:8d:c3:
51:41:40:e0:91:cc:86:4b:c7:fd:14:00:57:37:7e:
36:5b:f1:8f:ec:75:db:79:3c:9f:fa:16:06:15:82:
0f:f4:48:dd:65:98:2d:f8:96:e8:76:06:74:95:58:
97:31:43:a4:a0:9b:57:d9:78:03:65:fd:9f:ee:e2:
60:3b:9f:60:8e:e5:50:52:15:06:ca:e8:12:de:08:
bf:7e:1e:76:14:ba:4b:03:5c:da:75:03:6b:4b:49:
6d:d6:ca:43:d5:2d:70:56:4c:2c:ac:ae:e0:91:a5:
0f:f8:c5:64:92:37:54:bc:22:2f:97:ce:31:5a:6c:
df:92:4d:6a:87:55:2d:77:65:cd:b1:0d:1c:36:3f:
29:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:56:1C:1A:0A:BA:D9:8C:67:F8:AB:1E:22:E6:52:FB:75:AB:41:84
X509v3 Authority Key Identifier:
keyid:BC:44:3F:7A:AE:47:E0:AB:38:BC:F8:D5:36:CC:A6:03:50:D1:72:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:02:47:db:98:1a:bd:80:77:ef:38:57:5c:f2:0f:5b:29:d3:
9a:73:b8:1a:58:fb:b4:a4:ca:5a:79:65:9b:b7:f2:25:7b:75:
f6:df:dd:76:8e:63:97:af:b1:5d:f6:53:fc:3a:83:86:eb:82:
2c:c4:d3:a4:96:26:0e:47:07:69:48:d8:ae:9a:4e:f3:45:c1:
91:af:94:3a:09:43:9b:cf:d3:d1:fc:23:1f:a8:54:91:5e:85:
9e:16:09:04:3a:f3:0e:2e:77:a9:2d:52:fc:d2:32:6b:5a:0b:
56:55:87:ff:4e:4e:f6:6b:99:ff:e7:fa:6f:1d:40:fc:3d:ed:
7a:db:2f:94:a7:49:27:66:ad:fc:87:33:45:f5:a7:84:db:d4:
8d:15:6e:8b:bc:df:c7:9e:2c:60:0a:03:ef:76:04:4e:a9:79:
83:75:e3:73:40:8d:38:51:0c:cf:55:d2:3e:dd:7b:91:50:8b:
bb:08:20:e1:08:27:32:15:05:8f:e7:f3:98:45:53:fc:6f:f5:
d5:d8:b7:25:fc:96:d9:e7:f8:ab:35:62:84:7f:a9:77:c6:d7:
b3:54:73:2a:ac:53:cb:a1:03:b3:d8:e7:30:3b:9c:26:d6:ac:
e6:7b:48:40:0d:91:3e:d1:72:e6:91:88:c1:37:e0:aa:b4:f0:
f0:27:ff:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:58:42 2025 by rpki-client