Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/vfegoEi2jsz6TUnqtPFtx5LA0xg.mft
File: vfegoEi2jsz6TUnqtPFtx5LA0xg.mft (raw, json)
Hash identifier: 0Ft4aTkGYXi4quGS1a0ZbupFm6wLH2RVgOUbYrsPLMM=
Subject key identifier: 1D:43:B3:8F:3C:22:9B:A5:BE:EF:77:52:78:36:28:D2:EB:DB:2C:D4
Authority key identifier: BD:F7:A0:A0:48:B6:8E:CC:FA:4D:49:EA:B4:F1:6D:C7:92:C0:D3:18
Certificate issuer: /CN=bdf7a0a048b68eccfa4d49eab4f16dc792c0d318
Certificate serial: 01984A40E5B9ED38FC3D8CABE59DB3B36E0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfegoEi2jsz6TUnqtPFtx5LA0xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/vfegoEi2jsz6TUnqtPFtx5LA0xg.mft
Manifest number: 1603
Signing time: Sun 27 Jul 2025 05:00:23 +0000
Manifest this update: Sun 27 Jul 2025 05:00:23 +0000
Manifest next update: Mon 28 Jul 2025 05:00:23 +0000
Files and hashes: 1: GKC-zruGo7Y0lHBj7AqmYPwzc8c.roa (hash: u2pwVxzKoBKyV0Dimg3sj9jXDAo9fvdhwaO1o32GlnA=)
2: X_m5ZAvxIpZScImZ01eKwHRPNDY.roa (hash: beEA3W7SColLkSlnHacB1waBPlogRmM3jPPLz78ItOg=)
3: v1Kwwfd8ZjjCs2Mu7l5Mtdf-PVI.roa (hash: ulU0aPB2ZxGebVfubT+AGsI+A+WmNT0R9PT7Ovu3cU0=)
4: vfegoEi2jsz6TUnqtPFtx5LA0xg.crl (hash: QFJLGs7a9njp81f1+zOq/F/wddsEs/tfPFw3Gpm/Fak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/vfegoEi2jsz6TUnqtPFtx5LA0xg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/vfegoEi2jsz6TUnqtPFtx5LA0xg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vfegoEi2jsz6TUnqtPFtx5LA0xg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:40:e5:b9:ed:38:fc:3d:8c:ab:e5:9d:b3:b3:6e:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdf7a0a048b68eccfa4d49eab4f16dc792c0d318
Validity
Not Before: Jul 27 05:00:23 2025 GMT
Not After : Jul 28 05:00:23 2025 GMT
Subject: CN=1d43b38f3c229ba5beef7752783628d2ebdb2cd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:42:d0:3d:77:fa:0e:ab:60:c8:96:0e:fc:b1:
2e:6f:44:d2:77:1f:13:19:87:d2:b9:90:df:16:87:
81:bc:d1:da:25:d8:0b:15:5d:3c:7d:4c:e2:a5:e3:
ad:f7:4a:bb:1a:f2:68:b5:df:28:c9:cf:1b:05:52:
c2:46:85:e2:13:11:9b:7d:ab:39:cd:29:a6:b4:33:
cc:5c:38:80:43:09:c9:e6:e0:e7:f3:fd:75:75:ec:
c0:06:dd:4d:fb:ed:9b:6e:c9:8f:58:f3:a7:c4:1d:
23:d1:b3:b6:69:33:31:cd:2c:1e:11:99:93:d1:ab:
52:65:c6:a5:b6:cd:ee:05:66:04:07:32:a5:ab:aa:
84:99:db:9d:c3:65:82:18:62:52:1d:fd:f5:de:f1:
1e:82:9d:ff:ec:7d:c6:4f:36:58:a8:4a:1c:d3:45:
d0:9c:a3:75:23:b0:43:f2:ab:d5:e6:26:f3:dc:1b:
22:e1:b6:96:25:7d:de:7c:2b:e0:e8:d9:18:53:07:
af:7e:45:2e:7b:70:1b:9c:ab:a4:70:3c:cd:c8:2b:
c9:eb:84:56:33:0f:c6:bf:03:0a:29:2c:e1:19:6d:
e4:1a:13:2a:aa:b2:a1:02:03:7c:bc:fc:8e:68:5b:
7e:fd:84:c6:79:64:e8:d8:f4:64:24:58:19:a1:b4:
bd:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:43:B3:8F:3C:22:9B:A5:BE:EF:77:52:78:36:28:D2:EB:DB:2C:D4
X509v3 Authority Key Identifier:
keyid:BD:F7:A0:A0:48:B6:8E:CC:FA:4D:49:EA:B4:F1:6D:C7:92:C0:D3:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfegoEi2jsz6TUnqtPFtx5LA0xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/vfegoEi2jsz6TUnqtPFtx5LA0xg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/vfegoEi2jsz6TUnqtPFtx5LA0xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:58:ae:3f:b0:7e:3e:6f:94:25:a6:8e:02:68:55:5f:0c:6a:
83:9b:8f:75:71:ed:e6:d2:d3:30:7a:90:37:46:4b:ea:6a:57:
3d:cf:a3:e0:16:a0:7d:0b:1b:0e:63:59:55:b7:37:f5:f4:ae:
0c:00:25:63:04:c2:a2:80:57:69:0d:af:88:8c:2a:75:d6:7c:
60:d0:ab:b0:10:d9:59:d1:b8:83:66:61:e7:8e:86:15:bc:15:
1d:e9:94:b5:03:da:0d:46:6b:ff:79:5b:a2:d0:5c:6b:e4:d0:
16:1c:06:e9:87:6a:d8:25:4c:79:2d:99:0e:a9:33:09:20:7e:
86:86:78:9e:92:a9:55:6d:80:49:8c:42:c6:9b:d4:12:22:40:
31:7b:85:bf:36:fa:77:11:6f:f0:0d:c2:c1:27:15:23:cf:bb:
56:7f:79:b1:87:e6:d9:d1:04:9e:5c:f3:79:83:97:be:93:ee:
4a:85:ae:88:81:70:5f:07:f5:bf:42:f3:79:e5:3c:4f:f9:02:
29:0a:37:00:06:90:5f:df:a8:f1:f0:46:85:51:a5:75:f8:09:
21:47:36:f7:eb:c7:2d:20:18:e0:4f:97:86:af:bb:a3:57:16:
1a:c4:61:82:32:46:6d:00:4c:51:08:83:6c:f0:00:9c:de:33:
0e:40:92:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:35:23 2025 by rpki-client