Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/vvUlLMrD9twUJrVT8sHHIzrMiUs.mft
File: vvUlLMrD9twUJrVT8sHHIzrMiUs.mft (raw, json)
Hash identifier: 17SYzM8fPN5JJiJvhGPMvVHEViRhZZNIFhyKc6UOUd8=
Subject key identifier: FF:40:CE:EE:0B:F4:66:44:27:76:78:09:F4:FF:94:EC:98:93:F6:F0
Authority key identifier: BE:F5:25:2C:CA:C3:F6:DC:14:26:B5:53:F2:C1:C7:23:3A:CC:89:4B
Certificate issuer: /CN=bef5252ccac3f6dc1426b553f2c1c7233acc894b
Certificate serial: 01984B8A6B2B3A337C91BEAB88C68D12417D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vvUlLMrD9twUJrVT8sHHIzrMiUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/vvUlLMrD9twUJrVT8sHHIzrMiUs.mft
Manifest number: 1604
Signing time: Sun 27 Jul 2025 11:00:19 +0000
Manifest this update: Sun 27 Jul 2025 11:00:19 +0000
Manifest next update: Mon 28 Jul 2025 11:00:19 +0000
Files and hashes: 1: cztKiFowQoK_UYPJ2AEdLhmfdJY.roa (hash: zSStQQUNC6z+zgYsdleYs1GIe5kvbt6u6C94AWl4nn0=)
2: vvUlLMrD9twUJrVT8sHHIzrMiUs.crl (hash: Segi5JsEcldTHbDFjRlaExxAC3DIVNDRAD9sqwFkN8o=)
3: xlHcoYULH7mPEmpcqtscwUSRg-k.roa (hash: A4kztX9ZPQEUnGsY/7aFwo4jdiC6qf6Ig/R2vXwJcNU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/vvUlLMrD9twUJrVT8sHHIzrMiUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/vvUlLMrD9twUJrVT8sHHIzrMiUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/vvUlLMrD9twUJrVT8sHHIzrMiUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:8a:6b:2b:3a:33:7c:91:be:ab:88:c6:8d:12:41:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bef5252ccac3f6dc1426b553f2c1c7233acc894b
Validity
Not Before: Jul 27 11:00:19 2025 GMT
Not After : Jul 28 11:00:19 2025 GMT
Subject: CN=ff40ceee0bf4664427767809f4ff94ec9893f6f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:9b:f0:33:a8:51:c9:70:d0:2e:1e:ca:59:51:
38:d5:aa:d5:8c:21:56:39:cb:9f:31:98:3b:cb:a6:
53:5a:a0:3c:f6:4f:e7:32:a8:69:bd:36:83:7d:d3:
bf:90:ea:d1:a9:32:e0:20:16:f9:67:4c:eb:bd:e7:
89:dc:01:7b:ac:1c:ba:e2:6e:c2:39:eb:82:76:22:
b9:c5:e3:34:d7:0a:10:b0:f0:1b:f3:0a:58:67:b2:
d8:ae:59:21:9f:34:49:6e:a8:5b:3e:68:af:b9:44:
44:c1:b8:9b:84:df:21:d8:93:73:66:33:1f:3c:cf:
f6:c5:4a:87:aa:d1:12:13:37:89:a5:43:48:f7:ad:
eb:ad:84:de:c9:51:ff:78:a3:d1:77:c5:28:bb:01:
94:40:c4:d6:ae:32:b5:95:3b:5d:d1:61:34:6d:0f:
eb:2d:c8:dd:e3:f4:f3:1c:24:e3:47:47:43:ff:85:
c9:ac:d3:ad:21:b0:6a:a7:1c:94:ea:2c:7e:77:f3:
a2:a4:09:62:b3:61:6e:97:42:f9:9f:dc:90:e8:1e:
35:05:fb:5a:58:2e:1c:c5:22:15:8a:13:ff:05:84:
2a:fe:f8:a2:6d:94:8d:59:24:69:bf:21:d1:e4:b9:
ce:d3:5b:9b:ed:ff:27:58:a5:6d:28:61:66:d6:b1:
f5:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:40:CE:EE:0B:F4:66:44:27:76:78:09:F4:FF:94:EC:98:93:F6:F0
X509v3 Authority Key Identifier:
keyid:BE:F5:25:2C:CA:C3:F6:DC:14:26:B5:53:F2:C1:C7:23:3A:CC:89:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vvUlLMrD9twUJrVT8sHHIzrMiUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/vvUlLMrD9twUJrVT8sHHIzrMiUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/vvUlLMrD9twUJrVT8sHHIzrMiUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:4f:6f:d4:b1:f2:99:b4:68:8a:d4:b8:18:ff:1c:74:aa:2e:
bd:a8:fb:20:31:f9:bc:9a:c8:f1:d3:8a:88:d3:fd:f9:b2:7b:
7c:b4:70:d6:17:65:52:49:3a:33:fe:4c:a6:cb:98:2a:62:67:
2e:d4:98:39:fb:87:f4:be:c2:25:bc:29:59:f2:61:9e:3f:d2:
62:4a:88:f8:c9:46:01:74:09:8c:22:3b:dc:c0:7e:9e:4d:f2:
31:4a:12:2b:c4:0b:87:1e:0d:66:12:92:f2:cf:6c:ee:e6:0d:
1a:de:10:40:b4:8f:71:79:a1:3e:05:ee:b9:61:d7:49:1d:67:
99:03:65:1b:14:4d:8d:e1:39:35:df:ee:84:7a:bb:e9:f2:32:
8e:49:11:98:ad:e5:bf:18:7f:7d:ad:99:46:41:f1:0f:72:7b:
14:59:01:f6:a9:42:1b:58:e0:3f:6c:31:c1:47:32:0a:e2:b7:
a3:89:6b:94:48:41:0d:13:5d:bd:29:6c:a9:53:99:79:50:30:
56:e1:3b:91:df:09:01:9c:01:5d:b7:3a:96:8b:24:bf:5e:0d:
e8:0d:0a:73:43:3d:de:73:40:e4:5e:bb:3c:3a:5e:5d:21:e0:
2f:7e:67:84:58:e8:bd:43:66:d0:f3:80:b3:8f:8b:42:6d:9a:
d6:45:08:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:03:04 2025 by rpki-client