Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/196689-2db7-4e80-b92c-3a2ad88deade/1/vaYQQ1QkhQlrDfQ1HMDal383cN0.mft
File: vaYQQ1QkhQlrDfQ1HMDal383cN0.mft (raw, json)
Hash identifier: n3PHjVns0ft2rD6jnhHypsZESDPEFWj+fRKBA0ELZqc=
Subject key identifier: AE:51:39:29:89:32:FC:B2:72:0D:95:E0:B2:67:E2:DC:96:20:9D:12
Authority key identifier: BD:A6:10:43:54:24:85:09:6B:0D:F4:35:1C:C0:DA:97:7F:37:70:DD
Certificate issuer: /CN=bda61043542485096b0df4351cc0da977f3770dd
Certificate serial: 019848F754C36C7E2BAA5C2C79150C39B625
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vaYQQ1QkhQlrDfQ1HMDal383cN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/196689-2db7-4e80-b92c-3a2ad88deade/1/vaYQQ1QkhQlrDfQ1HMDal383cN0.mft
Manifest number: 1603
Signing time: Sat 26 Jul 2025 23:00:24 +0000
Manifest this update: Sat 26 Jul 2025 23:00:24 +0000
Manifest next update: Sun 27 Jul 2025 23:00:24 +0000
Files and hashes: 1: RYZ_HUggvvOzHTuXBACbgajQpo0.roa (hash: Fp6s79hRrwq+bZ12gZrNnH0nQeo4puoviWIdP4EjMXQ=)
2: vaYQQ1QkhQlrDfQ1HMDal383cN0.crl (hash: /uhqk8b7gKNL0Koi82C8vx1Ss7NRIhFbMdZs4zfcwlU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/196689-2db7-4e80-b92c-3a2ad88deade/1/vaYQQ1QkhQlrDfQ1HMDal383cN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/196689-2db7-4e80-b92c-3a2ad88deade/1/vaYQQ1QkhQlrDfQ1HMDal383cN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/vaYQQ1QkhQlrDfQ1HMDal383cN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:f7:54:c3:6c:7e:2b:aa:5c:2c:79:15:0c:39:b6:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bda61043542485096b0df4351cc0da977f3770dd
Validity
Not Before: Jul 26 23:00:24 2025 GMT
Not After : Jul 27 23:00:24 2025 GMT
Subject: CN=ae5139298932fcb2720d95e0b267e2dc96209d12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:df:1c:f2:7a:47:63:44:11:26:06:9b:c6:29:
aa:fe:bb:3e:75:8b:1b:8b:b7:58:2c:e8:58:d9:05:
3b:0b:e2:c8:ce:f0:b3:84:2e:07:c4:e0:9f:b9:89:
66:2e:b0:e2:98:ce:9c:65:28:f7:68:f3:49:9b:de:
02:a7:a2:24:d0:5d:3e:44:39:82:da:38:2f:f5:54:
4c:f7:0a:61:6f:b7:50:2d:eb:42:6f:e2:6b:2a:65:
7e:c0:4a:c4:87:da:e6:e1:c5:88:9b:5b:e4:da:50:
2e:e8:66:26:f9:45:9a:5e:70:50:39:31:16:9d:eb:
2b:bc:f0:38:f3:39:73:8e:a6:2f:67:e4:d8:e0:30:
f0:8b:5b:15:0c:60:99:41:2b:56:75:23:34:41:c7:
23:5f:a5:0d:01:3c:fd:64:eb:ee:b8:df:bf:0c:24:
94:06:b2:0e:e5:d9:d4:1d:f6:07:a1:ba:9b:46:e2:
09:c9:a5:0f:8f:0d:f6:ca:8d:29:44:7c:4d:9e:fe:
76:a0:9d:97:56:4e:9c:3e:5a:f2:73:74:fd:df:9e:
ff:7f:30:8e:8e:c9:ea:a9:1a:84:89:40:d7:ae:5e:
f0:c0:5d:72:84:95:e2:4f:40:52:3c:67:7a:5d:02:
57:d0:37:57:1d:23:7e:b7:aa:0b:d1:03:ea:b0:6d:
a7:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:51:39:29:89:32:FC:B2:72:0D:95:E0:B2:67:E2:DC:96:20:9D:12
X509v3 Authority Key Identifier:
keyid:BD:A6:10:43:54:24:85:09:6B:0D:F4:35:1C:C0:DA:97:7F:37:70:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vaYQQ1QkhQlrDfQ1HMDal383cN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/196689-2db7-4e80-b92c-3a2ad88deade/1/vaYQQ1QkhQlrDfQ1HMDal383cN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/196689-2db7-4e80-b92c-3a2ad88deade/1/vaYQQ1QkhQlrDfQ1HMDal383cN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:1c:63:55:02:09:10:b7:1c:0e:39:1d:21:4b:29:94:27:8b:
d9:9f:f7:d3:f7:df:78:a1:bc:84:e5:6c:78:0d:c1:7d:85:22:
11:88:9d:9d:2b:48:15:d4:16:50:00:09:c8:70:54:1d:c2:50:
79:b3:13:43:6a:cd:05:5e:98:a4:1d:62:77:89:8c:3c:c3:fb:
90:0e:81:41:97:c9:27:bf:cc:0f:13:34:40:e1:8c:c4:32:3e:
89:ba:7a:74:15:a2:b2:db:8a:7a:46:19:8a:65:ea:23:fc:f0:
e9:61:04:36:fe:92:23:e8:60:ee:ef:07:53:54:c1:e6:19:de:
5a:50:14:74:92:0b:35:06:87:d7:93:03:a3:33:92:d2:55:54:
b9:37:88:24:83:38:84:68:85:2c:f3:06:a3:d9:ea:05:d2:66:
51:23:1e:b9:0c:ca:dc:c6:39:3e:12:8c:71:1e:58:89:3e:c8:
8c:92:f0:c8:dc:92:7c:8e:9a:9a:8a:af:bf:bb:02:aa:ea:07:
86:ee:b8:77:4f:b1:f8:03:4f:00:1f:59:7a:8d:6f:a7:a4:e9:
d6:17:78:e1:c9:97:db:4d:1c:9e:a4:79:fb:26:5c:f6:44:94:
da:13:8e:8f:9b:ea:9c:f4:a0:12:4a:e7:46:c8:0a:61:36:d8:
3e:3d:32:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 02:26:40 2025 by rpki-client