Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/501f2b-fd1f-45ea-b494-d73dc4b41ce1/1/vEZLqdJjhfVN9iVKwkiSbTcERbA.mft
File: vEZLqdJjhfVN9iVKwkiSbTcERbA.mft (raw, json)
Hash identifier: TFhT7ID/Yt8VeAMePCgqYS3OMrhWf319i6MDrFRvdOQ=
Subject key identifier: 90:97:55:FD:E8:FF:24:44:BA:49:B6:75:A8:DB:47:23:F6:21:BE:BC
Authority key identifier: BC:46:4B:A9:D2:63:85:F5:4D:F6:25:4A:C2:48:92:6D:37:04:45:B0
Certificate issuer: /CN=bc464ba9d26385f54df6254ac248926d370445b0
Certificate serial: 019848899786936D021B7F33C79342746BF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vEZLqdJjhfVN9iVKwkiSbTcERbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/501f2b-fd1f-45ea-b494-d73dc4b41ce1/1/vEZLqdJjhfVN9iVKwkiSbTcERbA.mft
Manifest number: 1609
Signing time: Sat 26 Jul 2025 21:00:33 +0000
Manifest this update: Sat 26 Jul 2025 21:00:33 +0000
Manifest next update: Sun 27 Jul 2025 21:00:33 +0000
Files and hashes: 1: gAF5yk6vmaOq2Uung0D_8Gub1gc.roa (hash: eVAKmeO8heHGdx9Kcy2Kx3p7IXGpACADu9i5ILdct+c=)
2: vEZLqdJjhfVN9iVKwkiSbTcERbA.crl (hash: PMZnLFzA+Joi/yxyZE4rngu3fUWUUzG79nf3AB/aDIA=)
3: zyyxpnYwsTYjNu4Wy5twrx2x4fk.roa (hash: NQRYx+K4EclccAZE0WPjuwlvX5dADgQnuUhPYSSnRgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/501f2b-fd1f-45ea-b494-d73dc4b41ce1/1/vEZLqdJjhfVN9iVKwkiSbTcERbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/501f2b-fd1f-45ea-b494-d73dc4b41ce1/1/vEZLqdJjhfVN9iVKwkiSbTcERbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/vEZLqdJjhfVN9iVKwkiSbTcERbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:89:97:86:93:6d:02:1b:7f:33:c7:93:42:74:6b:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc464ba9d26385f54df6254ac248926d370445b0
Validity
Not Before: Jul 26 21:00:33 2025 GMT
Not After : Jul 27 21:00:33 2025 GMT
Subject: CN=909755fde8ff2444ba49b675a8db4723f621bebc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:97:3f:a8:4e:16:a2:43:68:6c:79:96:42:58:
84:77:53:01:48:92:31:65:9e:08:62:d3:6a:96:5b:
c6:2b:a8:26:15:47:53:1f:a4:32:22:5e:95:13:db:
9a:10:93:c5:9c:73:c3:eb:e7:ac:ae:16:e1:4c:8e:
91:1c:08:07:07:f5:1a:22:41:7e:51:b4:0c:49:21:
98:df:9f:d6:82:33:03:8b:f9:e2:1c:a4:e8:1a:bd:
89:17:5d:ba:44:db:9f:de:e7:71:0d:6a:56:02:b1:
7f:a8:d4:df:d1:74:9d:9b:dc:2c:2e:76:63:da:8d:
d3:86:5d:4a:ac:7c:45:db:e0:7f:45:26:17:07:13:
5d:aa:ee:e5:fa:e7:29:9a:e6:68:ae:1b:00:eb:dd:
46:91:ca:00:86:c2:e7:93:47:a4:5a:c0:e5:04:54:
c2:53:2d:1e:22:55:3a:81:a9:6f:24:a9:9c:e9:7c:
47:db:c1:61:bb:dc:08:a4:bf:ea:7f:11:e1:7d:93:
23:69:07:55:d3:ad:9a:60:0c:96:9b:e5:d1:fc:5b:
da:98:a4:be:cf:cb:b9:4e:92:6c:ac:f6:1a:f3:90:
a4:e5:8d:3a:e5:a1:91:c7:34:ba:4a:b1:46:cc:f7:
7e:a2:58:6e:f2:76:f9:b0:84:82:fd:3c:b5:85:22:
b5:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:97:55:FD:E8:FF:24:44:BA:49:B6:75:A8:DB:47:23:F6:21:BE:BC
X509v3 Authority Key Identifier:
keyid:BC:46:4B:A9:D2:63:85:F5:4D:F6:25:4A:C2:48:92:6D:37:04:45:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vEZLqdJjhfVN9iVKwkiSbTcERbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/501f2b-fd1f-45ea-b494-d73dc4b41ce1/1/vEZLqdJjhfVN9iVKwkiSbTcERbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/501f2b-fd1f-45ea-b494-d73dc4b41ce1/1/vEZLqdJjhfVN9iVKwkiSbTcERbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:d7:e0:ec:ea:5a:77:28:11:4a:db:7a:32:29:74:85:c7:57:
5b:83:99:8f:06:7b:6e:85:a3:27:14:0c:09:e5:fa:30:bd:9f:
1d:4e:6f:dd:91:be:e1:6a:ff:89:73:f3:3b:29:d4:c7:a1:d4:
21:01:8e:89:17:c1:60:63:71:ff:70:d5:eb:84:92:1e:2f:13:
8e:4d:7d:27:8f:fb:b1:61:2f:73:d3:78:63:9c:bc:ef:79:f5:
90:f2:2d:e3:9f:1d:52:11:e1:c2:2a:cc:e4:69:e9:34:19:a8:
47:3c:54:2a:e0:6c:7b:4e:a6:71:f6:f3:43:0d:5b:ed:3e:b7:
99:94:e4:12:5e:14:c4:52:d9:4a:c1:ed:75:ac:60:77:19:a2:
3d:db:6c:40:da:c0:ed:61:36:f4:98:fd:8c:86:dd:70:b3:20:
3b:29:79:f4:c1:c4:c4:f5:00:fb:ea:de:6d:b6:80:a6:5a:74:
57:40:d3:48:2b:a0:8d:57:86:76:2a:f2:ce:9f:44:3a:5e:d4:
33:20:da:b3:9b:91:b0:df:6c:af:f6:00:7d:89:32:0d:59:32:
7a:11:0a:f4:0c:44:96:93:5e:d0:66:f3:68:07:80:06:1d:24:
71:99:b6:07:ba:77:85:30:9a:77:dd:86:b4:2d:f8:09:97:4d:
c5:ec:67:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:33:40 2025 by rpki-client