Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/041b9f-1a07-42e5-b487-29b97a1877fb/1/vnIqmXMsnDy8ILCkcpKoI3gmA6w.mft
File: vnIqmXMsnDy8ILCkcpKoI3gmA6w.mft (raw, json)
Hash identifier: 9VGGHq8TfREgWyp2Qgx8u6f8LJDZ5Kf65YtbQqSlmqw=
Subject key identifier: 7F:DA:D3:F2:36:8B:76:97:84:86:F2:2B:BF:99:EF:E2:A3:4B:BE:1E
Authority key identifier: BE:72:2A:99:73:2C:9C:3C:BC:20:B0:A4:72:92:A8:23:78:26:03:AC
Certificate issuer: /CN=be722a99732c9c3cbc20b0a47292a823782603ac
Certificate serial: 0198537B51A5BB4CFF9165CBAA1EB954034F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vnIqmXMsnDy8ILCkcpKoI3gmA6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/041b9f-1a07-42e5-b487-29b97a1877fb/1/vnIqmXMsnDy8ILCkcpKoI3gmA6w.mft
Manifest number: 1597
Signing time: Tue 29 Jul 2025 00:00:47 +0000
Manifest this update: Tue 29 Jul 2025 00:00:47 +0000
Manifest next update: Wed 30 Jul 2025 00:00:47 +0000
Files and hashes: 1: KEoMu2N6_T8O9ufaf0Y2clZ16n8.roa (hash: TtnWx5gcstoPtaU3BdfsPkG0EZi+JY/3eJmxv3P7PTM=)
2: vnIqmXMsnDy8ILCkcpKoI3gmA6w.crl (hash: ptAbgfaevB3GgvTUDLGmIzbV1KXwM8x1/prEwr/FEzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/041b9f-1a07-42e5-b487-29b97a1877fb/1/vnIqmXMsnDy8ILCkcpKoI3gmA6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/041b9f-1a07-42e5-b487-29b97a1877fb/1/vnIqmXMsnDy8ILCkcpKoI3gmA6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/vnIqmXMsnDy8ILCkcpKoI3gmA6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:7b:51:a5:bb:4c:ff:91:65:cb:aa:1e:b9:54:03:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be722a99732c9c3cbc20b0a47292a823782603ac
Validity
Not Before: Jul 29 00:00:47 2025 GMT
Not After : Jul 30 00:00:47 2025 GMT
Subject: CN=7fdad3f2368b76978486f22bbf99efe2a34bbe1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:05:07:9c:af:22:26:54:da:d7:b5:df:20:bc:
6e:c6:82:cc:12:b0:59:10:b1:85:54:35:d4:8e:5a:
12:d8:4a:27:ae:a5:a6:04:fd:81:98:d5:52:b7:da:
2d:f1:8d:ae:f3:23:8e:d2:59:f7:f3:cb:d4:6d:6e:
e8:ee:d5:e6:f7:85:37:78:28:70:07:9b:e7:e4:c4:
34:f9:aa:a5:9a:ca:56:d8:23:87:ff:fb:75:a8:20:
bd:23:34:9c:8c:43:0e:cd:f0:05:b4:df:ca:b4:e9:
ac:83:c1:dc:70:51:cc:3c:29:b0:d5:00:7b:4f:cb:
09:5f:2e:b8:0b:83:6b:fd:95:be:b6:d0:07:76:b5:
4b:10:42:7b:f9:5e:8e:5f:bf:d4:e5:1e:76:c9:37:
0f:a6:58:d8:a1:dd:6e:26:ad:37:ad:f1:ba:42:bb:
d6:17:4a:ca:6d:96:f6:c5:b9:73:32:01:c8:df:27:
23:b5:3d:a3:b5:45:8b:4f:fb:0f:df:04:11:00:fb:
99:12:6a:c3:da:28:85:54:4a:07:8e:91:e2:1f:7d:
4e:cc:a9:3b:fe:f8:66:3e:dd:2f:15:55:84:4b:58:
0c:be:33:d8:b1:ef:68:0e:c0:47:9a:23:00:fc:b9:
f3:ca:1f:85:ba:8a:6d:0a:0b:8e:eb:8c:1d:84:07:
55:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:DA:D3:F2:36:8B:76:97:84:86:F2:2B:BF:99:EF:E2:A3:4B:BE:1E
X509v3 Authority Key Identifier:
keyid:BE:72:2A:99:73:2C:9C:3C:BC:20:B0:A4:72:92:A8:23:78:26:03:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vnIqmXMsnDy8ILCkcpKoI3gmA6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/041b9f-1a07-42e5-b487-29b97a1877fb/1/vnIqmXMsnDy8ILCkcpKoI3gmA6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/041b9f-1a07-42e5-b487-29b97a1877fb/1/vnIqmXMsnDy8ILCkcpKoI3gmA6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:41:c6:39:d4:80:0a:fd:5e:d5:0b:e4:22:d9:15:b4:8c:ae:
37:54:da:77:6f:74:6f:9c:54:c9:a6:8d:db:e3:9c:b4:00:e2:
bd:4b:ef:ed:a8:7c:c4:10:bd:84:21:2e:0c:42:5b:cf:2b:02:
d7:3a:e5:d9:bf:6a:89:75:3e:5b:73:11:5e:33:a4:be:4d:a0:
d6:dd:26:ed:40:30:75:d8:d4:80:a1:96:64:66:13:3a:46:12:
ed:0d:ee:b4:6e:fc:66:dc:5f:02:58:97:cb:bc:fc:8b:1f:9d:
d8:ff:2f:b9:55:80:20:4e:3d:aa:22:4c:22:57:c8:28:f9:b9:
e0:83:02:0f:06:8f:b1:dd:f3:93:8f:5f:a6:1f:17:08:8f:31:
4b:5c:80:1f:86:2e:84:f1:a0:10:62:bf:8e:e8:15:ca:d6:53:
74:2f:c6:05:e5:d8:c2:ef:78:aa:ec:7c:67:1e:f6:ca:10:56:
05:1a:79:f8:60:b6:6b:bc:dc:09:ff:5a:0f:de:28:a5:ce:6f:
83:84:6b:42:cf:22:74:28:e2:4a:18:da:68:66:7f:27:a2:50:
be:34:74:4c:34:7f:cc:61:18:09:e4:ce:ef:af:72:77:c2:ff:
11:40:d6:73:a3:de:c3:80:d6:1b:5d:42:e7:91:16:b7:85:79:
fa:20:6f:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 03:54:58 2025 by rpki-client