
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/16339a-2603-4e8f-901c-cfe2c7ff018b/1/vnx56aIdsmvWrgdQJ22xsK-n7Ns.mft
File: vnx56aIdsmvWrgdQJ22xsK-n7Ns.mft (raw, json)
Hash identifier: baeZpHtzPgNj9MFZOF5jlehyD6b2ea7bf4ULBitz2KI=
Subject key identifier: 34:2D:25:9B:79:77:C6:5C:8A:3D:36:76:13:3D:DB:36:E9:73:C8:8E
Authority key identifier: BE:7C:79:E9:A2:1D:B2:6B:D6:AE:07:50:27:6D:B1:B0:AF:A7:EC:DB
Certificate issuer: /CN=be7c79e9a21db26bd6ae0750276db1b0afa7ecdb
Certificate serial: 01984E8C0AC351F2D9F766BF84293E8BD55E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vnx56aIdsmvWrgdQJ22xsK-n7Ns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/16339a-2603-4e8f-901c-cfe2c7ff018b/1/vnx56aIdsmvWrgdQJ22xsK-n7Ns.mft
Manifest number: 02C2
Signing time: Mon 28 Jul 2025 01:00:57 +0000
Manifest this update: Mon 28 Jul 2025 01:00:57 +0000
Manifest next update: Tue 29 Jul 2025 01:00:57 +0000
Files and hashes: 1: ESyujln-2nVv5qE0Ocb3rFFYwrc.roa (hash: 9N7X4vItU38NZABFQIUssF/ZL+oPI7YggVHGdRqlqfw=)
2: vnx56aIdsmvWrgdQJ22xsK-n7Ns.crl (hash: DGaAGCwdxyepVk2GrVTSpT5sSFy+2tXL/iK/2Ue/pQY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/16339a-2603-4e8f-901c-cfe2c7ff018b/1/vnx56aIdsmvWrgdQJ22xsK-n7Ns.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/16339a-2603-4e8f-901c-cfe2c7ff018b/1/vnx56aIdsmvWrgdQJ22xsK-n7Ns.mft
rsync://rpki.ripe.net/repository/DEFAULT/vnx56aIdsmvWrgdQJ22xsK-n7Ns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4e:8c:0a:c3:51:f2:d9:f7:66:bf:84:29:3e:8b:d5:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be7c79e9a21db26bd6ae0750276db1b0afa7ecdb
Validity
Not Before: Jul 28 01:00:57 2025 GMT
Not After : Jul 29 01:00:57 2025 GMT
Subject: CN=342d259b7977c65c8a3d3676133ddb36e973c88e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c1:55:97:98:ba:4d:12:8d:b9:a1:43:14:f8:
a5:05:0f:f6:60:85:04:07:28:e2:6d:69:de:77:82:
1a:ee:9c:38:81:20:20:49:77:2f:03:3d:37:33:52:
79:42:38:bd:74:ba:22:cf:95:cc:b7:66:c9:c5:f9:
a4:c4:0c:e4:1a:eb:49:f6:9f:30:56:fd:f9:e0:57:
9f:be:b8:61:72:b5:72:5b:e7:65:a0:a8:d9:ee:76:
03:94:db:80:0b:cc:ed:b7:af:63:f9:a4:86:2d:a8:
8a:c2:a3:e7:10:a0:c0:77:74:3d:7b:79:f3:ba:75:
0b:8c:41:99:0c:f1:27:94:8a:e5:d1:ca:54:b2:88:
4a:f6:c9:13:ab:a0:83:d1:56:79:b6:26:eb:4f:90:
3b:e7:3b:4c:0e:c4:6a:f5:6a:89:48:df:a4:39:c9:
0f:ed:2f:18:b7:69:00:b9:0e:9c:19:ca:9d:62:d9:
36:21:87:a1:1c:05:63:9f:42:9a:f3:f0:9d:fa:48:
0a:66:93:2e:ca:4d:06:c7:5c:92:ad:0c:0c:12:7e:
35:37:d7:30:82:9d:63:46:d2:4b:fd:af:4f:04:8f:
1c:38:0e:75:84:3f:27:23:95:c3:1c:88:fb:b7:89:
0c:62:b8:39:fb:13:57:e4:71:10:6e:20:10:24:fc:
33:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:2D:25:9B:79:77:C6:5C:8A:3D:36:76:13:3D:DB:36:E9:73:C8:8E
X509v3 Authority Key Identifier:
keyid:BE:7C:79:E9:A2:1D:B2:6B:D6:AE:07:50:27:6D:B1:B0:AF:A7:EC:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vnx56aIdsmvWrgdQJ22xsK-n7Ns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/16339a-2603-4e8f-901c-cfe2c7ff018b/1/vnx56aIdsmvWrgdQJ22xsK-n7Ns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/16339a-2603-4e8f-901c-cfe2c7ff018b/1/vnx56aIdsmvWrgdQJ22xsK-n7Ns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:6d:b2:6f:6d:89:ee:48:b1:b6:33:20:c4:99:56:cc:35:f4:
2e:0a:76:66:4a:c1:e0:ca:bf:c3:3a:7d:70:14:30:0c:9a:2f:
49:91:0c:c7:c7:8c:a5:fe:85:89:f3:58:c6:09:fe:56:62:83:
fb:55:6d:5b:51:42:45:4c:20:cd:ce:5b:cb:96:04:2d:d6:b3:
02:99:c5:df:09:87:18:8f:75:20:aa:f1:ae:11:41:ab:98:11:
76:49:7d:4c:a8:85:c8:a6:a4:19:fb:a1:d9:e0:1e:33:91:36:
5b:6e:3b:9e:1b:b3:63:8c:97:0c:0a:29:78:23:b2:2e:fd:70:
ae:e4:fc:f4:dc:bc:72:9a:3c:6b:99:13:aa:7e:31:9c:f4:9a:
40:d8:8a:9d:bf:f0:cd:2f:8f:56:c5:bd:a1:59:fb:a4:71:42:
cb:03:34:72:90:f9:a0:62:fb:26:02:fa:2a:40:fa:b1:d2:56:
a6:80:6d:a1:d6:7a:fa:e4:be:29:53:76:51:03:d2:59:7a:90:
ed:2a:aa:ca:a9:0e:f2:2c:37:e2:6c:c7:2a:9c:8a:dd:ec:b9:
20:91:96:41:a8:fa:59:4e:48:52:3d:db:ef:51:f6:d7:44:16:
d8:f8:51:6e:39:74:98:45:6f:b8:40:78:94:38:5a:58:28:2d:
b6:02:db:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 28 05:49:41 2025 by rpki-client