Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.mft
File: VKbEbX2Q_rSnKK8PiuEb-g1PjLE.mft (raw, json)
Hash identifier: XnhcfTfaJS276tvG+o2LZJpAitj8BPCnbmwVhkkeOd0=
Subject key identifier: 7E:07:0A:7E:EF:AF:4E:46:4C:B3:24:2D:75:FF:25:75:56:F6:79:D9
Authority key identifier: 54:A6:C4:6D:7D:90:FE:B4:A7:28:AF:0F:8A:E1:1B:FA:0D:4F:8C:B1
Certificate issuer: /CN=54a6c46d7d90feb4a728af0f8ae11bfa0d4f8cb1
Certificate serial: 0198D4DFE8925AD3A2F1675E3E26FB65442B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.mft
Manifest number: 0996
Signing time: Sat 23 Aug 2025 03:01:40 +0000
Manifest this update: Sat 23 Aug 2025 03:01:40 +0000
Manifest next update: Sun 24 Aug 2025 03:01:40 +0000
Files and hashes: 1: 3wR1X7qeiV3Us_sYJwiLPsDNiag.roa (hash: sVmRoOG1wqqDxd7JOMuBur0va/KN44y5/hVue29WGbc=)
2: VKbEbX2Q_rSnKK8PiuEb-g1PjLE.crl (hash: abJWkAwHKzwU4/7KtwdshG6WF8TZkEQM0CiR3pRPclc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:e8:92:5a:d3:a2:f1:67:5e:3e:26:fb:65:44:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54a6c46d7d90feb4a728af0f8ae11bfa0d4f8cb1
Validity
Not Before: Aug 23 03:01:40 2025 GMT
Not After : Aug 24 03:01:40 2025 GMT
Subject: CN=7e070a7eefaf4e464cb3242d75ff257556f679d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ce:67:b2:bc:14:04:59:bb:2f:72:16:53:f3:
36:67:31:44:2f:3a:13:34:63:6a:24:fc:2e:22:5e:
19:a2:95:18:a7:36:86:28:0f:a1:1c:04:19:65:ac:
0a:fb:5f:51:c8:7f:2c:ef:f0:f1:f3:1a:c4:7c:b9:
65:bf:f0:6a:c5:f2:ce:31:e9:c8:42:a9:90:17:7d:
70:b4:93:f6:79:86:0a:e1:33:ff:4b:b1:35:39:59:
f3:f3:94:18:91:76:23:38:e1:d0:0e:20:58:bb:41:
e0:82:32:f9:97:5c:07:17:ad:ba:24:c6:02:c1:b8:
0d:00:d7:fd:22:5e:b1:72:bc:90:26:88:2e:77:4d:
63:f9:aa:a2:67:9c:87:b1:75:74:e5:01:5c:f7:18:
a6:6c:a1:1c:df:ff:51:37:3a:a0:b9:a8:40:64:1d:
3e:ab:35:2e:81:c6:b3:e6:7b:55:c9:83:5e:fb:89:
6a:b2:37:ce:ee:df:2c:a8:60:9a:62:f0:28:94:e2:
18:9d:a4:61:11:b7:41:ce:df:a6:07:35:76:59:9b:
d4:e3:bc:0f:d7:59:db:a5:06:9d:51:c8:16:e2:e1:
0b:20:e4:9e:71:07:a5:22:9d:aa:91:7d:8d:a3:41:
cd:76:0e:26:7b:64:27:c7:dd:16:d7:4e:6f:ae:c9:
9e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:07:0A:7E:EF:AF:4E:46:4C:B3:24:2D:75:FF:25:75:56:F6:79:D9
X509v3 Authority Key Identifier:
keyid:54:A6:C4:6D:7D:90:FE:B4:A7:28:AF:0F:8A:E1:1B:FA:0D:4F:8C:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:f4:ff:92:0b:45:4e:46:00:be:c5:9f:e2:f8:a0:62:8a:43:
e0:67:27:30:d5:b9:5a:46:24:d1:2e:19:d1:3b:88:28:7d:01:
75:75:96:3b:cb:6f:b3:36:4c:68:75:6f:46:be:31:ce:18:53:
af:59:5e:db:74:94:a4:4f:f5:b3:c9:20:37:72:6a:1d:ac:8f:
cc:f5:b9:38:23:e0:c5:65:ce:e8:9a:9a:56:1b:75:85:65:c2:
bc:e6:fa:54:be:14:35:bc:94:5e:dd:0e:40:e0:1c:97:8a:41:
a4:33:49:30:c6:80:d6:5a:01:a1:a2:7d:bc:52:85:54:fd:1f:
80:60:fa:47:e5:ff:d0:6c:8f:a8:be:64:f2:b9:08:10:a4:05:
96:bf:e8:80:10:f3:12:2c:ba:4e:97:e0:e3:99:8f:49:c0:e8:
9c:59:39:f7:c1:f6:ec:4f:8b:42:cf:d1:3c:7e:ea:c5:70:1a:
44:dc:06:0e:17:d8:09:bc:b8:56:f1:6c:8d:8f:20:ee:f6:bd:
75:75:b5:b5:8b:b2:40:2b:34:44:5f:f4:36:c3:39:eb:99:fd:
46:d7:64:73:d2:20:77:95:f3:01:08:ec:f5:29:eb:ca:ec:bb:
8b:57:a0:39:4a:ee:7a:c2:52:cc:4c:8f:5b:4d:69:9d:a6:a6:
14:a6:f6:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:05:34 2025 by rpki-client