Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/f0c9d7-168f-4e10-b5a1-cdc8f9bbc372/1/vTUGBpFDM_e_wsDR-NPD5LcqMC0.mft
File: vTUGBpFDM_e_wsDR-NPD5LcqMC0.mft (raw, json)
Hash identifier: YRXzWLxuv6SkaEjz0YihKtU4Qoj1+vi8xmY8D3ZAzWw=
Subject key identifier: C9:65:45:31:D0:B6:58:EE:C0:4C:EB:E3:12:2A:52:53:8D:21:BF:BC
Authority key identifier: BD:35:06:06:91:43:33:F7:BF:C2:C0:D1:F8:D3:C3:E4:B7:2A:30:2D
Certificate issuer: /CN=bd350606914333f7bfc2c0d1f8d3c3e4b72a302d
Certificate serial: 01984A4188F7A95DBDEA1C4B754E6E6271BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vTUGBpFDM_e_wsDR-NPD5LcqMC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/f0c9d7-168f-4e10-b5a1-cdc8f9bbc372/1/vTUGBpFDM_e_wsDR-NPD5LcqMC0.mft
Manifest number: 0559
Signing time: Sun 27 Jul 2025 05:01:05 +0000
Manifest this update: Sun 27 Jul 2025 05:01:05 +0000
Manifest next update: Mon 28 Jul 2025 05:01:05 +0000
Files and hashes: 1: 0mezxsUX4q6nwfHNel9WWB_Brao.roa (hash: cM9upUcEP9+yZQjw/tmDzQZgWLtHsK18dVAiOO9hG6U=)
2: vTUGBpFDM_e_wsDR-NPD5LcqMC0.crl (hash: o3ksZTJGydsIvjbfE6dnpPBndr0x4s7parBf2BgH9ms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/f0c9d7-168f-4e10-b5a1-cdc8f9bbc372/1/vTUGBpFDM_e_wsDR-NPD5LcqMC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/f0c9d7-168f-4e10-b5a1-cdc8f9bbc372/1/vTUGBpFDM_e_wsDR-NPD5LcqMC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/vTUGBpFDM_e_wsDR-NPD5LcqMC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:88:f7:a9:5d:bd:ea:1c:4b:75:4e:6e:62:71:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd350606914333f7bfc2c0d1f8d3c3e4b72a302d
Validity
Not Before: Jul 27 05:01:05 2025 GMT
Not After : Jul 28 05:01:05 2025 GMT
Subject: CN=c9654531d0b658eec04cebe3122a52538d21bfbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:10:51:c0:d8:c4:97:27:ee:de:fc:df:5b:43:
4f:20:61:13:a2:da:fd:ac:da:6f:dc:d8:7a:e0:cc:
bc:52:d2:7b:a4:05:d6:aa:cb:12:c2:60:55:25:f8:
6a:f4:b1:03:80:39:d3:12:64:04:da:16:2c:30:37:
9e:2e:0e:c4:9c:11:92:c3:72:df:f8:2a:04:b2:de:
8d:35:2b:c9:8e:49:4d:b5:35:1f:a6:31:d5:0d:06:
fa:b6:51:e9:9d:96:b9:04:aa:5f:bf:1a:bb:4a:e3:
7a:a8:0d:8e:56:69:cb:d5:b1:51:4d:55:eb:4e:e5:
88:b6:bf:d2:01:18:56:89:a9:37:92:df:57:1e:7e:
7d:8f:c4:b1:8c:6e:85:49:d2:d7:51:0f:77:d2:67:
e7:4a:a2:cb:8a:1e:be:bd:5e:0c:88:b1:80:50:a2:
63:0d:65:e2:86:64:ae:ee:1c:69:bb:c6:04:3d:f4:
b1:04:d4:d6:e1:c1:a6:a3:3a:a4:29:5f:02:2b:51:
5f:95:c2:a0:67:87:8e:13:df:76:7b:57:3c:34:9c:
3f:11:bd:eb:6a:1a:d3:92:8f:ba:5a:b2:62:47:a7:
11:98:07:7f:77:60:53:e4:12:eb:69:5a:d5:69:84:
b6:c3:df:32:fe:6c:cc:f7:f1:40:4b:57:7d:c5:8c:
4a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:65:45:31:D0:B6:58:EE:C0:4C:EB:E3:12:2A:52:53:8D:21:BF:BC
X509v3 Authority Key Identifier:
keyid:BD:35:06:06:91:43:33:F7:BF:C2:C0:D1:F8:D3:C3:E4:B7:2A:30:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vTUGBpFDM_e_wsDR-NPD5LcqMC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f0c9d7-168f-4e10-b5a1-cdc8f9bbc372/1/vTUGBpFDM_e_wsDR-NPD5LcqMC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f0c9d7-168f-4e10-b5a1-cdc8f9bbc372/1/vTUGBpFDM_e_wsDR-NPD5LcqMC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:bf:10:82:f5:d0:e2:5f:38:49:8d:56:af:86:09:c2:c5:7f:
4a:17:b4:6a:d6:f1:12:6a:40:5b:b7:f9:12:d0:af:e0:35:91:
27:00:40:c8:8d:c2:2f:24:7d:3c:0f:27:e3:16:ef:58:03:d6:
50:cc:d8:a5:dc:d9:50:0b:a0:d2:e6:50:15:2a:ef:5c:95:65:
e0:df:f0:98:65:cb:a2:d4:d8:ba:3c:0e:e4:19:d5:56:67:05:
e4:bd:0c:44:57:37:43:be:06:5d:03:ff:b5:b3:48:6d:1f:dd:
b9:27:c8:43:7b:0d:91:f0:5b:a8:14:62:96:07:77:8e:34:ad:
72:6a:37:b0:13:9a:b9:b9:39:44:18:14:41:eb:e1:bf:ba:e6:
29:d1:8f:d8:30:c5:e5:f7:20:ba:51:be:08:a0:0b:de:36:38:
a5:3a:37:fd:69:78:6a:11:5e:ae:00:ae:a5:ff:4f:da:f4:b4:
60:bc:77:58:ce:62:09:10:ca:00:c3:10:ec:11:69:12:e8:bd:
4c:f3:b9:26:cb:62:a6:d9:87:1b:55:9d:d6:46:29:a9:37:79:
d2:32:11:f9:3f:50:68:27:cd:9e:19:3d:f7:7e:4e:3d:18:18:
3a:29:e8:51:c7:fb:b6:2b:d4:90:ad:1f:6a:7f:46:2c:cf:57:
51:ad:d7:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:58:12 2025 by rpki-client