Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/b816b9-91b0-46da-8e58-91488a34fcc8/1/vJxAXxQuU-tnscSZI6t5XoQyjJs.mft
File: vJxAXxQuU-tnscSZI6t5XoQyjJs.mft (raw, json)
Hash identifier: Tkg72sGygUHPKoSHRqpwMeFXaWm1etsw0CrVoHq2ZUI=
Subject key identifier: F8:D2:04:38:AF:DF:69:20:74:54:05:51:E7:CE:C1:B1:BA:7A:E8:04
Authority key identifier: BC:9C:40:5F:14:2E:53:EB:67:B1:C4:99:23:AB:79:5E:84:32:8C:9B
Certificate issuer: /CN=bc9c405f142e53eb67b1c49923ab795e84328c9b
Certificate serial: 01984F6793002FE7440AC289151A0EB91598
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJxAXxQuU-tnscSZI6t5XoQyjJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/b816b9-91b0-46da-8e58-91488a34fcc8/1/vJxAXxQuU-tnscSZI6t5XoQyjJs.mft
Manifest number: 1603
Signing time: Mon 28 Jul 2025 05:00:44 +0000
Manifest this update: Mon 28 Jul 2025 05:00:44 +0000
Manifest next update: Tue 29 Jul 2025 05:00:44 +0000
Files and hashes: 1: irXjb7CbWugP3w5JDOFWDswYhlc.roa (hash: xfc5cfeM1faq3Raf49DNOnepZD3IOLsHNfYtcKklaZE=)
2: vJxAXxQuU-tnscSZI6t5XoQyjJs.crl (hash: kd3yBRi7wRDdY8PLsUvVu2oD+BPm2thq1ej5R8b2giU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/b816b9-91b0-46da-8e58-91488a34fcc8/1/vJxAXxQuU-tnscSZI6t5XoQyjJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/b816b9-91b0-46da-8e58-91488a34fcc8/1/vJxAXxQuU-tnscSZI6t5XoQyjJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/vJxAXxQuU-tnscSZI6t5XoQyjJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4f:67:93:00:2f:e7:44:0a:c2:89:15:1a:0e:b9:15:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc9c405f142e53eb67b1c49923ab795e84328c9b
Validity
Not Before: Jul 28 05:00:44 2025 GMT
Not After : Jul 29 05:00:44 2025 GMT
Subject: CN=f8d20438afdf692074540551e7cec1b1ba7ae804
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:70:68:6f:98:95:4e:14:0c:2d:99:15:5d:86:
ee:bf:06:49:86:d1:e6:77:3d:e0:a3:b1:db:88:02:
23:d7:1c:1f:41:e7:7e:bf:87:d6:20:11:c9:1e:c1:
85:73:00:bf:44:94:09:d7:9e:a4:18:85:4c:77:18:
42:25:40:09:0e:fd:f9:d8:27:9b:e5:7e:95:67:fb:
f6:b2:e4:23:9d:75:a8:14:47:e0:c6:9e:3c:a2:0e:
7d:cb:b6:33:2f:ea:a0:25:e7:64:18:ef:28:78:a0:
a4:09:df:4b:cc:5a:b0:d2:50:b9:95:16:bc:fd:71:
88:dd:dc:3b:0a:5b:fa:d3:28:cf:d3:e6:df:6d:37:
87:89:dd:7e:4b:10:93:b7:6e:8b:16:50:13:07:3b:
e7:ed:bb:e5:2f:ba:74:7f:82:76:b0:59:2f:44:1d:
68:84:2d:38:d9:98:80:65:e2:06:fa:29:aa:58:5f:
fe:9f:bb:ea:3e:4b:ac:8d:3a:fe:5a:b0:04:a3:58:
79:f5:e3:53:b7:98:9e:21:58:12:45:68:bb:72:60:
78:39:35:c1:89:11:c4:f2:32:15:bc:b4:36:4a:bc:
8b:91:4f:96:1d:23:3e:34:f5:a9:33:7d:bc:f4:a8:
6d:24:dc:6d:da:9e:1c:6e:e8:cf:a3:be:d8:77:e2:
df:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:D2:04:38:AF:DF:69:20:74:54:05:51:E7:CE:C1:B1:BA:7A:E8:04
X509v3 Authority Key Identifier:
keyid:BC:9C:40:5F:14:2E:53:EB:67:B1:C4:99:23:AB:79:5E:84:32:8C:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJxAXxQuU-tnscSZI6t5XoQyjJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/b816b9-91b0-46da-8e58-91488a34fcc8/1/vJxAXxQuU-tnscSZI6t5XoQyjJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/b816b9-91b0-46da-8e58-91488a34fcc8/1/vJxAXxQuU-tnscSZI6t5XoQyjJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:37:70:ac:92:ef:33:bc:0d:a6:70:6b:75:ed:fe:1f:55:5f:
c5:57:fa:4b:ad:c1:2e:15:f8:cc:c1:a5:83:0f:1d:6b:61:af:
29:6f:b6:a0:dd:c3:e2:5f:5f:5e:bd:cc:a2:41:c8:fc:1e:08:
8d:80:c0:da:6c:8f:db:71:fe:72:33:fb:5b:ab:2b:7c:45:06:
c9:6a:24:17:3d:cf:7f:2d:5f:1b:cf:27:ec:b5:9d:96:de:e6:
0f:b1:22:40:9b:af:cb:65:4a:c6:b9:5b:71:31:83:b0:6f:24:
f5:48:91:94:40:f5:91:20:f9:03:80:35:43:de:15:bc:fb:2b:
ad:e4:69:36:3c:a8:64:51:34:05:0f:d6:57:f8:fb:5e:45:d0:
8c:6a:0e:fe:42:4e:66:b6:64:69:a5:dd:12:98:41:11:1d:e4:
48:c5:99:08:fa:cb:e4:0d:a8:0a:70:49:d3:81:c5:b7:28:0d:
e8:4f:82:fd:6e:fa:c1:59:80:88:d8:53:64:ba:2e:ce:4a:77:
0f:3c:14:a2:cc:61:f6:27:05:27:2b:0a:0e:d3:dc:1e:d8:6f:
f9:20:64:fa:26:6b:19:45:40:d1:c1:48:90:0d:4c:a1:3d:ad:
be:6b:76:ec:0f:40:6f:29:67:35:e0:42:7b:0a:cb:1a:73:e4:
82:1e:df:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 08:27:20 2025 by rpki-client