Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/dca257-d163-4ed9-94ad-c170091283eb/1/Vhx8zFI3Z4c3QJLq-sJiPgVxqB4.mft
File: Vhx8zFI3Z4c3QJLq-sJiPgVxqB4.mft (raw, json)
Hash identifier: ZA+Ni+M636x3vxvVqmWEIz258VhsqcrRS9dP8ouYpCQ=
Subject key identifier: 79:B7:52:DA:32:7A:01:9B:D3:46:79:6F:29:FC:70:40:A9:B0:85:58
Authority key identifier: 56:1C:7C:CC:52:37:67:87:37:40:92:EA:FA:C2:62:3E:05:71:A8:1E
Certificate issuer: /CN=561c7ccc52376787374092eafac2623e0571a81e
Certificate serial: 01984BF872793D3DF90364537B1AD34A19A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vhx8zFI3Z4c3QJLq-sJiPgVxqB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/dca257-d163-4ed9-94ad-c170091283eb/1/Vhx8zFI3Z4c3QJLq-sJiPgVxqB4.mft
Manifest number: 10EB
Signing time: Sun 27 Jul 2025 13:00:30 +0000
Manifest this update: Sun 27 Jul 2025 13:00:30 +0000
Manifest next update: Mon 28 Jul 2025 13:00:30 +0000
Files and hashes: 1: HGBJjgjbxKOwS-tzE8qO9Sb0DTk.roa (hash: IycrXxPRq8sHYUqWekjaODjaqQ8VZx13yD5H8Pnu6n8=)
2: Vhx8zFI3Z4c3QJLq-sJiPgVxqB4.crl (hash: tm/5kS3j3YxTL3jh5nGaNg35WXO5E0+OQjsB1S81KhM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/dca257-d163-4ed9-94ad-c170091283eb/1/Vhx8zFI3Z4c3QJLq-sJiPgVxqB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/dca257-d163-4ed9-94ad-c170091283eb/1/Vhx8zFI3Z4c3QJLq-sJiPgVxqB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vhx8zFI3Z4c3QJLq-sJiPgVxqB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 09:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:f8:72:79:3d:3d:f9:03:64:53:7b:1a:d3:4a:19:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=561c7ccc52376787374092eafac2623e0571a81e
Validity
Not Before: Jul 27 13:00:30 2025 GMT
Not After : Jul 28 13:00:30 2025 GMT
Subject: CN=79b752da327a019bd346796f29fc7040a9b08558
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:ce:3d:63:04:8f:e5:37:db:d7:73:6b:30:e0:
56:35:25:17:7e:7b:5b:45:21:c1:79:88:da:85:8d:
60:04:aa:0e:25:17:ec:5b:43:b7:ed:8b:5e:59:7f:
f7:78:dc:9b:88:07:86:d1:e2:35:2b:9b:81:20:65:
80:49:e4:62:c4:7e:61:d8:ae:e7:29:54:d1:7f:32:
8a:9b:37:e0:cf:a4:e7:e4:07:71:dd:5b:ad:07:01:
da:5c:fe:81:19:d1:93:7e:0e:0b:76:38:67:f2:c4:
8e:24:c6:0a:14:0e:f5:72:d8:f7:65:51:b0:6c:5d:
0a:6a:03:39:3a:a1:3f:73:63:f6:2e:02:7a:95:e8:
dc:cf:ba:0a:8f:7c:68:ce:f3:63:a7:a9:e6:8a:ab:
e2:39:e7:f6:81:f2:f0:50:d0:d5:39:38:dd:21:08:
69:db:55:08:60:14:f7:22:98:6d:b9:9e:46:61:82:
03:2b:03:e7:21:d7:a9:66:16:fb:3d:45:04:86:ab:
04:77:f2:93:d4:cf:37:0f:e2:56:2e:6e:82:65:b9:
c5:a7:b5:8a:d0:3d:23:16:75:2f:89:86:d2:4b:f0:
0e:6b:4d:c9:58:7c:6a:9d:3b:69:a0:29:ad:87:04:
da:45:d0:53:e9:2b:d9:50:78:9f:a8:8f:d2:ed:43:
80:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:B7:52:DA:32:7A:01:9B:D3:46:79:6F:29:FC:70:40:A9:B0:85:58
X509v3 Authority Key Identifier:
keyid:56:1C:7C:CC:52:37:67:87:37:40:92:EA:FA:C2:62:3E:05:71:A8:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vhx8zFI3Z4c3QJLq-sJiPgVxqB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/dca257-d163-4ed9-94ad-c170091283eb/1/Vhx8zFI3Z4c3QJLq-sJiPgVxqB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/dca257-d163-4ed9-94ad-c170091283eb/1/Vhx8zFI3Z4c3QJLq-sJiPgVxqB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:f2:7b:81:eb:9c:bc:b6:23:93:63:70:33:77:3b:80:77:0e:
2c:74:6d:7d:66:98:d6:31:0e:a4:a9:dc:02:ad:f9:d1:04:2b:
23:b7:d9:56:ee:16:47:0b:f1:c3:a6:8e:94:48:35:13:36:e9:
2e:c6:58:e2:7b:35:e6:5d:7b:f0:44:e2:9a:42:cd:5e:29:24:
a9:92:f7:53:0e:ad:0f:b1:ce:38:24:b2:b8:e2:f8:56:4b:71:
ad:7d:c5:e0:83:35:08:f1:0b:17:f1:48:40:de:a8:63:1e:d1:
8d:9d:fc:e5:73:69:53:75:b3:5d:9e:9e:6b:84:95:dd:db:75:
7d:de:10:18:74:27:b7:2f:4f:00:31:e5:e1:1f:34:60:6e:f1:
8b:19:30:d2:47:de:01:42:92:0c:de:fb:7d:51:4f:c3:e7:62:
44:51:2c:cd:48:47:5e:d4:4d:ec:8e:23:0b:13:3b:2e:76:5b:
7c:a3:40:6a:b2:1b:38:b2:aa:6e:1f:83:50:40:b7:cb:ee:4c:
ba:c8:03:2a:76:53:26:9a:84:af:eb:48:d6:63:57:c5:30:8d:
58:90:db:4e:c2:d1:7f:67:78:a8:6c:b5:1b:89:5a:25:e7:76:
5c:6c:34:de:24:1c:ed:ed:62:44:1c:a1:ef:dc:26:35:5d:0b:
09:be:94:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 19:04:02 2025 by rpki-client