Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/9b4530-76e4-4401-a87b-29f78c27989f/1/vatssugHrs69fgOoCAj6sj2cRxY.mft
File: vatssugHrs69fgOoCAj6sj2cRxY.mft (raw, json)
Hash identifier: ygZTmJAjOjxG4QRJIIDr2KrHoRVIy6WqFUR5X3RgpKY=
Subject key identifier: 75:DA:E6:45:20:FC:6E:64:A6:71:D1:F5:50:A5:2C:EB:2E:18:E8:21
Authority key identifier: BD:AB:6C:B2:E8:07:AE:CE:BD:7E:03:A8:08:08:FA:B2:3D:9C:47:16
Certificate issuer: /CN=bdab6cb2e807aecebd7e03a80808fab23d9c4716
Certificate serial: 0198D4A819C01D6F4BB992675814814C02E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vatssugHrs69fgOoCAj6sj2cRxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/9b4530-76e4-4401-a87b-29f78c27989f/1/vatssugHrs69fgOoCAj6sj2cRxY.mft
Manifest number: 093E
Signing time: Sat 23 Aug 2025 02:00:43 +0000
Manifest this update: Sat 23 Aug 2025 02:00:43 +0000
Manifest next update: Sun 24 Aug 2025 02:00:43 +0000
Files and hashes: 1: FiQ6326ULjytbcRmbnTQT53B6qI.roa (hash: oVfk3zFCZV+aJ9BHrRH3g14/uV9d1uVQ7Jx5xhv/0d8=)
2: P26iBMzDxpvH-LQZESUQTHncYxo.roa (hash: 3+DbSLlopFDVY7Piu2/Wt1KhQBxlA0+iBBO7seLQMiE=)
3: vatssugHrs69fgOoCAj6sj2cRxY.crl (hash: 0O08s/Rego6ds9QKh4BXhAjA4T4zJ7yZ8yrfaKmjr2c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/9b4530-76e4-4401-a87b-29f78c27989f/1/vatssugHrs69fgOoCAj6sj2cRxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/9b4530-76e4-4401-a87b-29f78c27989f/1/vatssugHrs69fgOoCAj6sj2cRxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/vatssugHrs69fgOoCAj6sj2cRxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:19:c0:1d:6f:4b:b9:92:67:58:14:81:4c:02:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdab6cb2e807aecebd7e03a80808fab23d9c4716
Validity
Not Before: Aug 23 02:00:43 2025 GMT
Not After : Aug 24 02:00:43 2025 GMT
Subject: CN=75dae64520fc6e64a671d1f550a52ceb2e18e821
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f1:e6:dd:13:ae:6c:0a:1b:fe:d6:f1:7f:2d:
31:0b:8b:b6:58:e1:bb:5b:b4:80:d8:f8:f5:da:66:
a8:51:ec:d1:ff:f7:73:b6:be:e3:1b:4f:d8:a4:2e:
9a:7e:93:cb:a6:7f:04:3b:7b:6f:c2:1d:17:b9:73:
3c:83:c5:08:48:27:43:5e:1c:76:b8:d9:10:2a:cb:
a1:66:ee:9d:a5:0f:bc:ce:38:18:4c:ac:39:bd:17:
70:fa:26:4f:22:d1:fd:e5:9c:91:c5:bc:2a:57:27:
f9:f2:89:fd:38:6f:23:29:f8:b8:80:ca:40:52:4d:
76:58:8c:31:52:9d:3b:3f:d0:27:df:f1:16:41:95:
f6:71:05:3a:a5:cc:9a:7f:fe:98:43:20:64:30:20:
f0:af:04:3e:ce:ad:13:e7:15:5f:eb:f5:0c:e3:51:
b8:71:49:16:a8:6e:f7:11:fd:e2:4f:f5:7c:35:da:
57:ee:03:d7:b7:af:9e:b6:eb:25:47:80:4e:44:7a:
95:70:90:bb:4a:d4:b3:62:aa:86:90:8e:b2:da:1d:
c2:1c:e8:8a:46:d9:aa:e0:37:ee:a3:7c:ad:e4:67:
f3:53:8f:a3:6f:1b:24:7e:13:2c:36:95:61:54:04:
82:d0:29:44:9f:28:23:da:9a:db:77:7d:15:f0:08:
86:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:DA:E6:45:20:FC:6E:64:A6:71:D1:F5:50:A5:2C:EB:2E:18:E8:21
X509v3 Authority Key Identifier:
keyid:BD:AB:6C:B2:E8:07:AE:CE:BD:7E:03:A8:08:08:FA:B2:3D:9C:47:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vatssugHrs69fgOoCAj6sj2cRxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/9b4530-76e4-4401-a87b-29f78c27989f/1/vatssugHrs69fgOoCAj6sj2cRxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/9b4530-76e4-4401-a87b-29f78c27989f/1/vatssugHrs69fgOoCAj6sj2cRxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:22:e8:04:91:dd:4f:32:9c:5f:d3:5b:a7:fa:d4:fe:82:b8:
25:30:20:5c:35:b6:62:f5:d7:85:b4:77:74:f6:b5:ee:4b:5e:
b7:a7:ee:b1:7b:d5:0a:4b:b8:ae:4d:20:0b:a7:55:c0:7f:b0:
fa:11:41:1f:01:ff:7c:63:df:c5:bb:66:7e:80:af:42:02:ef:
72:5e:11:c4:ad:ff:18:dc:dd:37:94:92:a2:d3:10:5c:84:31:
c2:1e:14:49:b8:c4:60:08:28:7b:fe:60:20:8e:77:50:d7:2f:
87:0a:d0:cb:95:74:e3:30:7e:49:05:e0:83:1b:1b:ee:af:6b:
c8:52:25:8c:26:a7:92:d4:dc:3c:fc:05:94:a7:42:da:dc:13:
08:5a:d9:ee:eb:d6:5f:d8:d5:87:84:9a:3d:10:48:e8:b8:db:
f9:7f:66:9e:4e:c4:26:95:d6:d9:37:17:af:a1:8b:1d:a4:11:
97:60:21:52:b0:0f:80:45:f0:61:76:5d:cc:60:af:7f:d2:6e:
3d:d7:a5:41:0c:9a:5b:ab:a9:b2:c0:01:dd:dc:6f:df:22:55:
e8:55:f6:e8:2e:37:55:12:13:61:80:00:84:64:77:d8:5a:b0:
76:d8:ec:9e:c1:e4:de:f6:0e:39:25:a2:c8:a4:da:5a:83:a3:
cd:6a:39:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:34:29 2025 by rpki-client