Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/a69fd7-8e1f-4176-a5df-42837cca00c3/1/_VOKrk7E0KLzwKZfifSHRrUV5Xs.mft
File: _VOKrk7E0KLzwKZfifSHRrUV5Xs.mft (raw, json)
Hash identifier: Qnb2xVevTOkEm+bM/Wagbt8D+wPTWF1QYD+O0PwhVu4=
Subject key identifier: 53:DF:E4:B2:92:35:92:8A:6A:14:D5:F4:B9:59:51:92:54:50:83:9B
Authority key identifier: FD:53:8A:AE:4E:C4:D0:A2:F3:C0:A6:5F:89:F4:87:46:B5:15:E5:7B
Certificate issuer: /CN=fd538aae4ec4d0a2f3c0a65f89f48746b515e57b
Certificate serial: 01984A0A482F99B3BE885CFEABE79FBB3FBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_VOKrk7E0KLzwKZfifSHRrUV5Xs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/a69fd7-8e1f-4176-a5df-42837cca00c3/1/_VOKrk7E0KLzwKZfifSHRrUV5Xs.mft
Manifest number: 0C9A
Signing time: Sun 27 Jul 2025 04:00:44 +0000
Manifest this update: Sun 27 Jul 2025 04:00:44 +0000
Manifest next update: Mon 28 Jul 2025 04:00:44 +0000
Files and hashes: 1: YD_zTsYXZHwOdGihQ9GGGJD2yQ4.roa (hash: MiVKISLoY4yTYfozn6ttBVBGLS9pCG7wKWYNtkMouG8=)
2: _VOKrk7E0KLzwKZfifSHRrUV5Xs.crl (hash: x7d1q/C5VoskVshWXAqqDTSXH1+IAcZI7KcHXr3NyXw=)
3: wcV-PUcCwSD1_bZOyNtF92C9c9E.roa (hash: YHNUenZzn6rHgL2dA2+pXb/I7NXwkpjXztGNWnA0xb0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/a69fd7-8e1f-4176-a5df-42837cca00c3/1/_VOKrk7E0KLzwKZfifSHRrUV5Xs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/a69fd7-8e1f-4176-a5df-42837cca00c3/1/_VOKrk7E0KLzwKZfifSHRrUV5Xs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_VOKrk7E0KLzwKZfifSHRrUV5Xs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:0a:48:2f:99:b3:be:88:5c:fe:ab:e7:9f:bb:3f:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd538aae4ec4d0a2f3c0a65f89f48746b515e57b
Validity
Not Before: Jul 27 04:00:44 2025 GMT
Not After : Jul 28 04:00:44 2025 GMT
Subject: CN=53dfe4b29235928a6a14d5f4b95951925450839b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0b:57:31:0a:08:74:f8:4c:c4:12:90:81:a4:
c5:d7:e6:08:41:69:b0:f3:0e:de:a1:2b:d1:80:a4:
89:5f:c7:2d:95:ff:2d:61:83:99:94:e4:7a:ec:bc:
85:9e:09:b3:15:05:bf:94:30:27:fd:74:4a:b4:de:
2e:aa:36:41:7f:e2:43:65:e3:21:7b:b4:6b:0a:a9:
06:ad:89:68:c9:05:c4:69:63:66:ec:81:61:39:8a:
7e:ac:f3:1e:b3:b4:14:a6:cf:82:d2:5f:86:fc:56:
a5:d1:b4:a7:e8:01:03:41:45:d5:9f:33:0c:0c:b7:
fe:78:9d:69:35:75:ea:61:cc:04:35:92:cd:94:ac:
3b:cc:e8:fb:5b:c0:9e:05:16:69:d3:14:62:f1:04:
20:11:e3:ce:7f:69:5f:f0:9f:df:31:c1:55:bb:22:
a4:a9:3a:71:fe:58:24:a5:46:7e:9e:bf:44:0f:9f:
c9:5f:7a:f0:e4:3f:bf:b1:16:44:0d:cf:ae:c6:cc:
18:fe:63:83:e3:53:9d:c6:d4:d6:d1:c4:cb:c6:20:
2c:8c:0d:ae:3d:f0:dd:74:c8:03:ac:0f:18:e5:d2:
34:e4:df:f2:b2:e2:dd:f2:a6:1f:0f:1c:96:cc:13:
81:1b:88:1d:2e:3d:de:41:31:1d:c1:6f:2f:72:3b:
fa:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:DF:E4:B2:92:35:92:8A:6A:14:D5:F4:B9:59:51:92:54:50:83:9B
X509v3 Authority Key Identifier:
keyid:FD:53:8A:AE:4E:C4:D0:A2:F3:C0:A6:5F:89:F4:87:46:B5:15:E5:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_VOKrk7E0KLzwKZfifSHRrUV5Xs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/a69fd7-8e1f-4176-a5df-42837cca00c3/1/_VOKrk7E0KLzwKZfifSHRrUV5Xs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/a69fd7-8e1f-4176-a5df-42837cca00c3/1/_VOKrk7E0KLzwKZfifSHRrUV5Xs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:9d:d0:88:77:83:a8:26:c4:f5:f7:af:db:2c:fe:8a:6b:9d:
ef:38:b2:3c:41:89:60:da:99:b6:86:9d:59:71:2f:8b:d5:db:
6a:06:5f:ad:2f:e1:a8:5c:00:b6:fc:2b:23:42:0c:c2:e5:18:
e5:a9:21:b6:3f:ce:39:c3:d3:df:cd:32:42:b4:60:da:0e:f0:
53:89:c4:9e:3d:dd:ad:34:c7:fc:97:ae:5c:97:8b:b8:68:c4:
08:f2:e6:b6:af:ce:7a:37:65:7a:03:cc:20:a3:d9:06:7b:c1:
e7:72:d8:84:a5:34:8e:6b:9e:3c:69:4a:0c:35:40:bc:2b:99:
ab:1c:97:05:85:27:cf:2e:45:9a:50:d9:8a:e2:ed:92:6f:df:
f5:25:bb:e8:a6:e0:e4:07:53:f1:3e:b1:08:f0:e8:9c:c5:8d:
c8:64:c4:47:7f:80:93:36:8a:41:bd:2f:78:72:9b:5c:c5:d8:
41:96:0d:b4:e0:17:f2:41:f3:ad:42:09:3a:5a:9c:bd:81:fb:
88:09:a3:f3:4e:fc:66:34:34:65:b7:34:9f:2d:b3:ae:78:62:
3b:cb:c2:a9:5d:1a:10:b5:04:9e:fe:b2:1f:8d:d8:f3:62:b8:
02:b3:25:d6:5f:d5:5b:c6:4d:0a:f2:8f:6b:34:54:ae:8b:b7:
4b:ad:c5:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:31:10 2025 by rpki-client