Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/5e9ad7-a5f4-4cb4-a319-2f352d64aac8/1/VVzAtghVz-FakevLDuWExhcRb7c.mft
File: VVzAtghVz-FakevLDuWExhcRb7c.mft (raw, json)
Hash identifier: xueeMPxzPleLOCSbSQmwjJ/4ecTVVlKhC3ZkOwX2aFk=
Subject key identifier: 7F:85:56:20:A9:19:72:5D:B9:AE:00:E6:63:9A:B8:BB:5A:23:35:D3
Authority key identifier: 55:5C:C0:B6:08:55:CF:E1:5A:91:EB:CB:0E:E5:84:C6:17:11:6F:B7
Certificate issuer: /CN=555cc0b60855cfe15a91ebcb0ee584c617116fb7
Certificate serial: 019851FA3878F928BD6F5AC8C86C04700F4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VVzAtghVz-FakevLDuWExhcRb7c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/5e9ad7-a5f4-4cb4-a319-2f352d64aac8/1/VVzAtghVz-FakevLDuWExhcRb7c.mft
Manifest number: 03CB
Signing time: Mon 28 Jul 2025 17:00:09 +0000
Manifest this update: Mon 28 Jul 2025 17:00:09 +0000
Manifest next update: Tue 29 Jul 2025 17:00:09 +0000
Files and hashes: 1: VVzAtghVz-FakevLDuWExhcRb7c.crl (hash: 3BFnQjY4HIbc9UfWAa/RgYnbxtIRxk/AByMvN1R/dJQ=)
2: WrVC9jX5kklKg1NrTkuGqJhi9ss.roa (hash: 1/eKwFnStb8NeVxzyi/3E+1woNkVGNqWnUzMqa1RbTs=)
3: zOxwHP9C2XU1qxc9gfabChAW270.roa (hash: pIK3P+kNzEGWKFk3LxEQ0gUxs9HATfITXq/XpRc4TCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/5e9ad7-a5f4-4cb4-a319-2f352d64aac8/1/VVzAtghVz-FakevLDuWExhcRb7c.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/5e9ad7-a5f4-4cb4-a319-2f352d64aac8/1/VVzAtghVz-FakevLDuWExhcRb7c.mft
rsync://rpki.ripe.net/repository/DEFAULT/VVzAtghVz-FakevLDuWExhcRb7c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 17:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:51:fa:38:78:f9:28:bd:6f:5a:c8:c8:6c:04:70:0f:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=555cc0b60855cfe15a91ebcb0ee584c617116fb7
Validity
Not Before: Jul 28 17:00:09 2025 GMT
Not After : Jul 29 17:00:09 2025 GMT
Subject: CN=7f855620a919725db9ae00e6639ab8bb5a2335d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ec:ef:b7:83:25:c6:f6:2f:f8:7d:e4:6c:00:
b9:32:88:76:aa:db:5f:44:41:54:c4:7b:9d:f0:27:
ea:17:62:3f:25:4a:31:59:c3:35:76:c5:bd:6a:57:
24:48:b7:33:d2:9e:ce:fb:c5:4b:f6:df:ba:c9:6b:
9f:0e:69:4d:60:8f:27:0d:82:17:c5:f8:ce:2d:20:
c4:e4:11:97:54:c7:7f:f5:b0:de:a9:a5:58:84:64:
2e:f3:17:13:34:31:03:62:43:b9:da:30:f1:2e:dc:
fa:a7:7d:fa:56:7d:aa:92:99:e3:36:29:61:42:85:
17:b2:83:0e:9d:69:fc:31:f5:b0:be:6d:43:ba:61:
9a:da:89:15:82:6a:2e:5b:8e:ae:59:76:64:77:de:
06:26:ed:65:f2:86:1b:8e:6e:38:0c:36:1f:0c:24:
e1:c7:d0:fe:fb:f9:96:fc:c7:ea:c4:04:09:2d:d7:
bc:58:a9:b0:34:14:8c:90:a9:69:90:73:25:cb:df:
83:27:33:f5:5e:fb:8f:5b:5e:48:5b:b5:d6:d1:35:
db:84:3e:bb:89:57:9e:53:22:c1:f1:18:97:23:4c:
8b:16:96:43:d1:b5:fb:8a:ab:44:21:bf:79:af:8a:
ec:56:5c:54:e8:22:96:2b:c6:75:0a:ae:72:0b:11:
a7:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:85:56:20:A9:19:72:5D:B9:AE:00:E6:63:9A:B8:BB:5A:23:35:D3
X509v3 Authority Key Identifier:
keyid:55:5C:C0:B6:08:55:CF:E1:5A:91:EB:CB:0E:E5:84:C6:17:11:6F:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VVzAtghVz-FakevLDuWExhcRb7c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/5e9ad7-a5f4-4cb4-a319-2f352d64aac8/1/VVzAtghVz-FakevLDuWExhcRb7c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/5e9ad7-a5f4-4cb4-a319-2f352d64aac8/1/VVzAtghVz-FakevLDuWExhcRb7c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:71:a3:5f:45:9a:77:d6:30:73:dc:df:8a:02:70:3c:af:bc:
8d:89:64:20:d8:be:4b:12:a5:a3:1a:dd:f0:4c:79:c8:06:c3:
71:c0:32:e2:a3:42:bd:ca:35:f8:2f:5d:9e:ea:ea:2c:d3:ac:
d4:37:62:05:4b:5d:ea:0b:79:76:3b:74:a7:62:56:b0:16:8c:
67:28:43:7c:3e:f6:3c:fe:be:de:fa:be:0f:60:82:8b:4d:8d:
77:ef:9d:06:9d:00:f5:77:4e:22:25:f6:89:3b:eb:09:9b:88:
4f:b4:c8:e8:55:07:a9:bf:08:3c:7d:fd:4f:bf:25:24:f6:22:
de:95:09:18:00:e4:6c:56:69:26:6a:8b:db:7c:28:38:79:0a:
8b:b1:2d:9d:b7:04:ad:7f:5d:ff:cf:7a:f3:ac:d9:93:3e:97:
73:4b:88:35:fd:54:8e:ee:11:6e:48:95:a7:2b:1d:1d:3f:a4:
e9:27:8b:b7:3e:df:7d:6a:3b:35:bc:04:e6:28:c6:1a:10:cf:
27:2b:63:c2:ea:ca:12:6f:eb:77:c2:ec:de:9f:4b:c6:79:e6:
41:14:d3:4b:45:3b:89:f5:46:c9:81:23:c7:55:75:11:a5:d8:
9e:ae:1a:2b:3a:fc:29:29:86:01:98:2e:2f:f8:8b:67:9f:f7:
86:9b:30:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 03:23:50 2025 by rpki-client