Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/af950f-c193-45df-90d7-b842b990689e/1/vIXTeR9YNsQV_9OR8tWFxz2-yjk.mft
File: vIXTeR9YNsQV_9OR8tWFxz2-yjk.mft (raw, json)
Hash identifier: 1zrBK0ktAycWPCtuibLcZyIU/XrWE2Isrg/izqzKnsg=
Subject key identifier: 82:58:31:18:8D:E7:C5:F6:73:24:7A:7A:48:A3:73:E5:F3:5B:91:3C
Authority key identifier: BC:85:D3:79:1F:58:36:C4:15:FF:D3:91:F2:D5:85:C7:3D:BE:CA:39
Certificate issuer: /CN=bc85d3791f5836c415ffd391f2d585c73dbeca39
Certificate serial: 0198530E65D9B0C3532F6A4718D7CA88343C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vIXTeR9YNsQV_9OR8tWFxz2-yjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/af950f-c193-45df-90d7-b842b990689e/1/vIXTeR9YNsQV_9OR8tWFxz2-yjk.mft
Manifest number: 0721
Signing time: Mon 28 Jul 2025 22:01:48 +0000
Manifest this update: Mon 28 Jul 2025 22:01:48 +0000
Manifest next update: Tue 29 Jul 2025 22:01:48 +0000
Files and hashes: 1: L6lTyFXKtOF9j4M00RgctdL3DPI.roa (hash: 82l0fSJIXKbiY5RynH8uwdUeGbScGZ+VMQbyrw1pJ3U=)
2: vIXTeR9YNsQV_9OR8tWFxz2-yjk.crl (hash: XHGOC1x5jDyCAscYW1ZOEMfX6Zppjwl81s1aeftbL8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/af950f-c193-45df-90d7-b842b990689e/1/vIXTeR9YNsQV_9OR8tWFxz2-yjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/af950f-c193-45df-90d7-b842b990689e/1/vIXTeR9YNsQV_9OR8tWFxz2-yjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vIXTeR9YNsQV_9OR8tWFxz2-yjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 22:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:0e:65:d9:b0:c3:53:2f:6a:47:18:d7:ca:88:34:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc85d3791f5836c415ffd391f2d585c73dbeca39
Validity
Not Before: Jul 28 22:01:48 2025 GMT
Not After : Jul 29 22:01:48 2025 GMT
Subject: CN=825831188de7c5f673247a7a48a373e5f35b913c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c6:4a:c4:dd:9a:16:b9:11:0a:65:19:9b:f9:
e1:26:cf:6b:6b:67:fa:e1:ca:cc:67:09:fc:90:15:
d4:57:b5:0a:fb:7c:79:c8:19:14:9b:60:ed:78:7d:
f0:83:6e:ca:47:ad:dc:42:bb:ba:a7:43:ee:99:e3:
28:c8:0f:a4:10:43:ce:ff:33:42:28:95:b3:7e:a0:
99:e0:42:2c:e6:a7:54:44:87:cc:0b:2c:36:85:bb:
1c:a4:9f:a3:e3:df:64:0c:da:d2:86:8e:87:d7:c4:
5c:9a:6a:e7:a7:84:83:01:9b:39:59:81:31:73:96:
d5:47:73:a8:11:92:ee:79:41:6d:65:1f:f8:eb:57:
02:c0:54:cd:77:13:cd:ad:65:5f:09:c8:fa:ba:a9:
ac:cc:c7:27:39:e4:9e:6f:3d:a8:1d:8e:fb:67:c0:
91:82:5b:e4:8c:33:27:c1:75:b0:29:0a:0f:09:ed:
b2:86:6a:a8:2b:fb:c9:bd:18:08:b1:17:b7:34:03:
36:88:6d:3e:2e:66:29:36:5c:27:24:90:12:c0:56:
e3:54:f0:f2:bb:09:74:41:1e:77:61:a0:43:c7:f3:
09:0a:3d:19:a3:c6:9e:79:7e:13:68:db:1c:b7:56:
4a:99:ad:53:40:90:b4:6f:12:77:c0:de:d1:ec:b8:
86:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:58:31:18:8D:E7:C5:F6:73:24:7A:7A:48:A3:73:E5:F3:5B:91:3C
X509v3 Authority Key Identifier:
keyid:BC:85:D3:79:1F:58:36:C4:15:FF:D3:91:F2:D5:85:C7:3D:BE:CA:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vIXTeR9YNsQV_9OR8tWFxz2-yjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/af950f-c193-45df-90d7-b842b990689e/1/vIXTeR9YNsQV_9OR8tWFxz2-yjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/af950f-c193-45df-90d7-b842b990689e/1/vIXTeR9YNsQV_9OR8tWFxz2-yjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:5f:99:cb:6b:9c:49:89:6b:f5:d0:61:1d:28:82:58:c5:9e:
4f:e6:c9:b1:57:90:af:93:f1:4b:5e:25:f8:47:2a:04:32:be:
46:39:59:d0:51:9a:ce:40:29:ac:e4:dc:3a:92:35:a5:08:01:
33:5b:ef:39:d4:4f:76:1d:f2:44:5d:f7:7d:cc:1a:db:93:f1:
87:34:9f:2d:19:a0:90:32:e3:07:31:bf:d3:fe:7a:b0:af:38:
75:50:82:b9:0d:f4:d8:d1:e9:26:7a:a3:f2:78:dc:ae:8e:ee:
9c:58:44:54:49:2a:f8:f9:94:4b:a5:8f:72:c5:59:15:af:3a:
38:a8:e2:e9:0e:e6:11:f8:d8:13:35:91:d6:9e:8f:23:f5:ee:
1a:02:ea:36:3a:21:35:a4:3f:0f:bb:1c:c5:7d:64:00:7f:5a:
95:87:6a:cf:78:80:2a:b3:78:db:23:af:db:16:3c:9a:e2:72:
b7:83:a0:0b:7f:c6:06:f6:10:18:ab:5b:af:c1:d9:46:71:2f:
e5:f7:fc:75:2d:f1:eb:89:de:a2:57:71:0e:c3:36:10:40:0d:
20:26:c0:ae:df:8d:45:4a:e8:42:9d:80:f2:81:d1:73:5a:67:
ea:29:fe:ba:ff:36:06:b5:10:9b:ba:5b:91:2d:4e:64:54:7d:
d3:23:5d:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:05:44 2025 by rpki-client