Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/9d698d-d277-497f-833d-a2127c2aa1b3/1/vstVJuhB53DLVWTzBMxmluqx5Ls.mft
File: vstVJuhB53DLVWTzBMxmluqx5Ls.mft (raw, json)
Hash identifier: E47ElLd+3hoe+045LC+qZoZNycHVAFZ6KDOTuVLGsLU=
Subject key identifier: A8:41:6E:C2:B2:15:33:29:ED:57:FF:73:C4:39:F8:7E:C6:9D:FF:E2
Authority key identifier: BE:CB:55:26:E8:41:E7:70:CB:55:64:F3:04:CC:66:96:EA:B1:E4:BB
Certificate issuer: /CN=becb5526e841e770cb5564f304cc6696eab1e4bb
Certificate serial: 0198523194D29902D7C697F08C04060CD9C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vstVJuhB53DLVWTzBMxmluqx5Ls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/9d698d-d277-497f-833d-a2127c2aa1b3/1/vstVJuhB53DLVWTzBMxmluqx5Ls.mft
Manifest number: 0541
Signing time: Mon 28 Jul 2025 18:00:37 +0000
Manifest this update: Mon 28 Jul 2025 18:00:37 +0000
Manifest next update: Tue 29 Jul 2025 18:00:37 +0000
Files and hashes: 1: HD7ZQ20BrfhIQig7jEtYMWBXqig.roa (hash: 0U8nx89LMB5Sbx+cfc6esGNSApn9xmAb50VsRUl9HHk=)
2: vstVJuhB53DLVWTzBMxmluqx5Ls.crl (hash: d38VkQ22m1tN4eTaqlXkXxQnnS/TeuzRuXFnTNWCqLo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/9d698d-d277-497f-833d-a2127c2aa1b3/1/vstVJuhB53DLVWTzBMxmluqx5Ls.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/9d698d-d277-497f-833d-a2127c2aa1b3/1/vstVJuhB53DLVWTzBMxmluqx5Ls.mft
rsync://rpki.ripe.net/repository/DEFAULT/vstVJuhB53DLVWTzBMxmluqx5Ls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 18:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:52:31:94:d2:99:02:d7:c6:97:f0:8c:04:06:0c:d9:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=becb5526e841e770cb5564f304cc6696eab1e4bb
Validity
Not Before: Jul 28 18:00:37 2025 GMT
Not After : Jul 29 18:00:37 2025 GMT
Subject: CN=a8416ec2b2153329ed57ff73c439f87ec69dffe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f0:5e:39:ef:9b:29:e3:90:58:d1:ee:b6:89:
1c:08:59:68:8a:97:7d:a1:f2:43:95:c2:04:98:b5:
4e:b6:93:c6:f4:d5:b6:49:a8:63:b0:03:44:85:c9:
b2:8e:87:b5:ed:3d:61:85:1e:fe:11:76:39:53:f2:
5c:34:ec:79:c9:1c:ba:d5:c3:eb:d7:91:7b:b7:77:
cb:e6:69:aa:d0:e4:fa:8f:9d:a0:3e:b7:82:d4:6e:
7d:67:10:4e:4d:0a:0d:83:23:e2:e0:bb:89:13:ca:
cf:5b:58:9e:2d:d2:ff:0f:f0:73:9d:81:71:e8:f3:
2e:6b:46:91:03:3f:6b:f0:95:4c:9a:86:3f:eb:02:
f8:7b:30:54:10:8e:34:b4:c4:40:c0:2e:51:ae:dc:
c8:9d:e1:7f:9d:24:59:3b:04:56:b0:22:07:fc:ad:
57:a4:5c:83:68:de:3e:66:74:d0:37:c0:d7:2f:39:
65:72:4d:a6:b5:ec:67:c7:15:c4:35:0c:27:6f:7f:
24:35:6a:1a:26:df:a6:30:88:e3:1f:f3:90:8a:fe:
da:09:6c:e9:b9:38:cd:aa:36:aa:92:47:2f:8a:38:
69:9c:e6:ef:f6:bc:1a:fa:3e:65:39:1e:25:20:58:
5c:a6:64:2b:89:ef:b5:64:be:9e:be:ca:e5:5a:03:
a3:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:41:6E:C2:B2:15:33:29:ED:57:FF:73:C4:39:F8:7E:C6:9D:FF:E2
X509v3 Authority Key Identifier:
keyid:BE:CB:55:26:E8:41:E7:70:CB:55:64:F3:04:CC:66:96:EA:B1:E4:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vstVJuhB53DLVWTzBMxmluqx5Ls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/9d698d-d277-497f-833d-a2127c2aa1b3/1/vstVJuhB53DLVWTzBMxmluqx5Ls.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/9d698d-d277-497f-833d-a2127c2aa1b3/1/vstVJuhB53DLVWTzBMxmluqx5Ls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:e8:89:0a:07:fc:a6:6d:f4:5a:e2:77:bd:68:73:e9:64:09:
a1:00:06:05:e9:10:f9:06:ac:98:10:ac:67:dc:ce:a9:98:53:
9e:89:10:f4:d6:c0:00:f6:d5:d0:d4:e3:b9:cd:4f:0d:38:1f:
c0:5b:9a:db:c5:8d:6f:1e:51:f7:36:8d:42:e6:0f:2d:88:ae:
9a:a2:19:0c:e6:7e:7c:30:28:83:76:71:3d:7c:53:a8:6f:ea:
73:c9:e5:ac:10:31:50:45:d1:cd:75:88:19:ab:80:25:41:9e:
6a:60:52:c9:53:31:ac:27:df:84:0d:97:f4:ec:ba:7e:70:e6:
43:38:64:c9:9e:0b:5c:92:ea:92:d9:d3:29:ef:75:1f:d0:a6:
c7:f4:de:0c:13:32:ce:f4:ac:b4:14:6a:94:e9:90:4a:20:73:
c5:35:d6:58:af:db:95:a3:71:d0:07:43:74:50:40:1c:70:11:
cf:55:46:19:85:e3:7f:be:c5:aa:58:b6:f6:c0:64:e2:b3:f2:
25:b7:b2:c9:1d:31:c2:f6:11:93:69:77:12:ad:16:a5:68:31:
78:53:6f:78:7e:4b:b3:c8:1e:bd:60:ab:85:17:a0:36:f7:51:
11:ab:f5:2b:ac:0f:f1:47:cf:88:2e:34:4a:2a:0a:a5:fa:9b:
82:a8:78:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 01:10:31 2025 by rpki-client