Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.mft
File: vjfHDxxn7KF3WnCckjXWovVVFrg.mft (raw, json)
Hash identifier: 8mXkk5O8TqbE5uxwntIxp09gnnsNkB+m2hIW55YZUAc=
Subject key identifier: 41:E2:87:16:5C:E5:2D:77:19:EB:CB:9B:22:AE:1C:98:AB:DE:26:AA
Authority key identifier: BE:37:C7:0F:1C:67:EC:A1:77:5A:70:9C:92:35:D6:A2:F5:55:16:B8
Certificate issuer: /CN=be37c70f1c67eca1775a709c9235d6a2f55516b8
Certificate serial: 0198530D72335133500E570306DCB6EB461D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vjfHDxxn7KF3WnCckjXWovVVFrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.mft
Manifest number: 0A07
Signing time: Mon 28 Jul 2025 22:00:46 +0000
Manifest this update: Mon 28 Jul 2025 22:00:46 +0000
Manifest next update: Tue 29 Jul 2025 22:00:46 +0000
Files and hashes: 1: ct0pyOPI6fIxvI90voKvQ2P09kc.roa (hash: HL+IQFJP+wo1WUNFcjpb/00F+VP2TuCmZyFITiHM4E4=)
2: gW5vsz1XHWHAiEv2XrHiZAPT2LM.roa (hash: /LPDMtSPu0KMCf6GqHsTiZ0o1jWTrz0r+OipJeljVUk=)
3: smZrnk_Yoz0MEPZqDKnYUoP-Opw.roa (hash: 24G5yjs0ZUoqUy4OoFHxczQzhAIkELffXisqhuw+2DI=)
4: vjfHDxxn7KF3WnCckjXWovVVFrg.crl (hash: SqC+0EXC/m0nRJoB8/E49E/co5EfmtOPskLKxQ0tvAE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vjfHDxxn7KF3WnCckjXWovVVFrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 22:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:0d:72:33:51:33:50:0e:57:03:06:dc:b6:eb:46:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be37c70f1c67eca1775a709c9235d6a2f55516b8
Validity
Not Before: Jul 28 22:00:46 2025 GMT
Not After : Jul 29 22:00:46 2025 GMT
Subject: CN=41e287165ce52d7719ebcb9b22ae1c98abde26aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8c:ad:f2:8c:5d:93:b3:57:0b:d8:84:9b:89:
9b:f6:7a:3e:5f:8c:f3:e8:88:c7:d1:b2:05:b2:31:
3a:7d:6c:7f:1d:37:ec:22:02:c3:a9:b5:65:9b:4b:
38:69:af:61:24:15:99:5b:37:b1:78:b9:a1:ff:3b:
7c:d8:bd:8b:34:a7:80:39:0b:85:1e:85:02:20:8d:
ac:79:6b:7f:56:a6:8f:f1:02:f6:2c:d3:6a:28:bb:
45:eb:a1:29:b4:e8:a2:13:c2:29:ae:0f:ee:fa:b6:
7c:47:47:c3:df:b2:ee:31:90:10:fe:3c:e7:f3:e0:
9f:dc:68:a9:b5:59:b7:87:5f:6c:dd:9a:2d:b8:80:
08:41:89:da:98:98:2c:ff:7f:23:66:bd:15:f0:0f:
42:ee:86:36:1c:2b:7c:02:66:88:0b:85:2e:57:8d:
1a:37:72:4a:36:17:fe:ec:48:fc:e5:ae:67:18:f9:
b6:3b:c1:a6:b1:81:e7:2b:69:e1:8a:d1:9f:c1:f4:
ea:bb:62:8d:54:00:42:ad:82:8f:00:82:60:ac:a7:
27:8f:6d:cd:b1:69:fd:86:49:f6:c6:8c:fd:45:60:
84:0b:1d:fe:20:5f:bc:06:10:38:08:f1:ca:f9:59:
be:53:4c:bc:93:d7:a3:bf:21:59:39:cc:99:32:46:
4b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:E2:87:16:5C:E5:2D:77:19:EB:CB:9B:22:AE:1C:98:AB:DE:26:AA
X509v3 Authority Key Identifier:
keyid:BE:37:C7:0F:1C:67:EC:A1:77:5A:70:9C:92:35:D6:A2:F5:55:16:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vjfHDxxn7KF3WnCckjXWovVVFrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:51:2c:e5:33:7c:93:ec:7f:1c:02:d9:13:32:76:03:e4:bf:
52:b4:aa:67:54:2a:83:29:6d:0e:d1:0e:60:83:85:1a:19:03:
40:ff:6d:38:0b:5c:8c:07:51:5f:bb:68:70:4e:0c:ac:2d:15:
e6:66:1f:e9:11:e1:54:97:0f:c3:7a:41:af:59:d1:e2:89:0a:
11:0c:45:26:b2:0a:25:14:dc:f1:e6:6f:85:ca:17:c2:fe:5a:
3a:fc:e8:b9:fa:90:22:0c:c6:f9:4e:4d:65:df:4a:6e:47:35:
01:c8:09:75:84:e7:77:a6:1a:34:bd:01:68:e2:c5:95:19:b7:
f9:2f:ab:d3:9a:05:b3:f2:3b:c9:15:aa:5f:76:26:97:3a:68:
de:3e:d3:94:ba:10:f5:f3:ec:aa:f8:2f:c8:c9:4a:46:a1:75:
c8:b4:34:c1:4b:ad:db:95:f0:06:80:7d:03:2c:cc:10:a6:6f:
9a:ee:3b:7e:e0:60:25:40:ba:1b:92:15:21:35:3d:d2:c8:bd:
32:1e:21:4e:1f:9b:b2:3e:d5:42:0d:8b:67:f0:b2:d9:74:df:
1a:db:de:10:f3:ee:5f:37:03:1a:7a:9b:7e:ee:9a:0b:9b:e5:
3c:bf:2d:44:c4:df:30:d8:b2:33:2b:eb:70:9e:1b:46:af:9c:
fb:ed:68:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:51:52 2025 by rpki-client