Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.mft
File: vygFmS5lMdPaMe4a9rzVwG0Ctso.mft (raw, json)
Hash identifier: y5Xs+xqvYHnYkhl9c5mtPhmo+NVj5FG/qs/cjg+4Nng=
Subject key identifier: 8F:85:B3:96:83:57:9F:F2:A4:BD:7C:CD:3B:74:1B:FC:0B:2D:E6:73
Authority key identifier: BF:28:05:99:2E:65:31:D3:DA:31:EE:1A:F6:BC:D5:C0:6D:02:B6:CA
Certificate issuer: /CN=bf2805992e6531d3da31ee1af6bcd5c06d02b6ca
Certificate serial: 01984A778B285AB4F4DC3EE66D5BE06E240D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vygFmS5lMdPaMe4a9rzVwG0Ctso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.mft
Manifest number: 1601
Signing time: Sun 27 Jul 2025 06:00:04 +0000
Manifest this update: Sun 27 Jul 2025 06:00:04 +0000
Manifest next update: Mon 28 Jul 2025 06:00:04 +0000
Files and hashes: 1: ZA2eo4PhOO6YarPBjFuZYerlXM8.roa (hash: OaUR9ntwZSMTqF4rae/f45ntDF7DCdGD74N9a3x5n8s=)
2: iU6o8UX2fMqdnVT4GPBZLMHQUVk.roa (hash: L7qS2Pktcg+3MFOhFw0UCguQbXdIgIfJZ4PXXKIQFAI=)
3: vygFmS5lMdPaMe4a9rzVwG0Ctso.crl (hash: TMSiMB5nYanrTghMgoap81If95fG+eeqBxCSyYRJF0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.mft
rsync://rpki.ripe.net/repository/DEFAULT/vygFmS5lMdPaMe4a9rzVwG0Ctso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:77:8b:28:5a:b4:f4:dc:3e:e6:6d:5b:e0:6e:24:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf2805992e6531d3da31ee1af6bcd5c06d02b6ca
Validity
Not Before: Jul 27 06:00:04 2025 GMT
Not After : Jul 28 06:00:04 2025 GMT
Subject: CN=8f85b39683579ff2a4bd7ccd3b741bfc0b2de673
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5e:3e:be:9a:6c:d9:8b:09:9e:e4:4e:36:99:
0d:46:07:d4:5e:a6:ed:43:b9:7a:40:30:56:c6:12:
b7:2e:e3:e6:2a:1d:c3:41:f2:ff:42:2d:1b:6e:53:
d4:c0:81:df:06:5b:d0:d9:f7:c9:3f:e6:dc:e5:d2:
cb:86:f8:4c:d5:f4:49:c3:25:50:f3:58:af:83:e8:
6a:75:6f:a1:f5:b7:82:b7:7a:bb:6c:91:bf:13:23:
a3:89:95:42:b5:d1:bd:a8:8d:05:6f:00:6a:0c:0e:
18:4c:10:54:2c:25:34:fc:11:1c:fc:68:9c:d7:74:
81:16:b6:6b:e1:03:6a:2c:d2:0f:a2:b9:b7:dd:e2:
b0:3d:2a:1d:9c:38:c0:c8:19:39:22:47:b3:ce:ed:
94:77:50:ba:61:c0:8e:44:27:bc:e1:d2:37:2b:c7:
1f:54:b2:ab:21:de:58:10:ed:49:f1:30:f7:84:13:
23:86:5e:70:0b:f7:4b:93:90:f5:e9:14:fa:1d:06:
2c:c8:11:05:fe:7f:fb:15:51:ce:62:61:ad:3d:4d:
15:76:4b:ee:28:65:18:63:8d:bc:04:49:72:3e:c0:
e9:ba:ed:f0:b7:f9:38:cf:bd:76:41:bc:f1:e7:b0:
da:7f:42:36:5a:37:19:e7:b2:8b:31:62:68:1a:0f:
29:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:85:B3:96:83:57:9F:F2:A4:BD:7C:CD:3B:74:1B:FC:0B:2D:E6:73
X509v3 Authority Key Identifier:
keyid:BF:28:05:99:2E:65:31:D3:DA:31:EE:1A:F6:BC:D5:C0:6D:02:B6:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vygFmS5lMdPaMe4a9rzVwG0Ctso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:3b:5c:62:a4:83:67:3c:c2:28:ae:f3:e7:f5:6c:22:fc:48:
26:ed:b8:21:11:12:82:b2:b0:9b:7f:58:73:fb:80:5c:a5:5e:
40:d7:db:fb:68:d8:b0:e9:c8:2f:b7:6e:12:44:dc:7c:50:16:
1f:b0:0c:3f:c2:52:38:95:e4:aa:cb:4e:7d:4a:10:61:20:b3:
52:48:9b:2b:e9:13:f8:e0:ba:f3:c7:5f:54:eb:df:f4:d7:85:
01:14:5f:b5:90:5f:83:e8:e2:9e:36:e1:89:1c:d1:55:bb:dd:
fe:1e:f9:c8:85:29:a9:e2:98:d3:e0:a0:4e:6e:56:4d:e3:61:
50:f6:cf:43:c8:55:96:dd:f0:77:82:69:16:4e:b0:58:ad:8b:
17:01:49:be:64:50:f0:ee:a1:a9:1a:49:81:37:ab:ed:d9:92:
f8:71:e6:e7:55:2e:ce:7a:4e:11:2e:ef:68:a7:91:e8:6d:4c:
ff:d8:8b:4a:92:be:40:cf:42:a0:90:6d:9a:03:2b:fe:a4:e4:
cf:f5:30:52:d5:0a:d8:fa:ce:57:b7:e1:72:2c:ff:85:a4:8d:
77:1b:84:d1:7d:f8:37:26:c7:79:a4:ae:71:3c:82:59:e4:87:
ad:18:64:13:15:11:3b:1f:43:af:f9:95:29:79:5c:a2:5f:39:
3e:04:f9:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:19:21 2025 by rpki-client