Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/6645d5-d193-4a63-85e6-2ca0e5c104fd/1/vhji2fUJydO0VREqoojTNhhYAaA.mft
File: vhji2fUJydO0VREqoojTNhhYAaA.mft (raw, json)
Hash identifier: PBV0emNLla+1U8z+SXOjNpdsjY0vmm8HkwRH3bsRsTA=
Subject key identifier: 21:77:94:13:E1:18:44:8A:34:AF:78:29:AE:25:60:02:E0:08:92:EE
Authority key identifier: BE:18:E2:D9:F5:09:C9:D3:B4:55:11:2A:A2:88:D3:36:18:58:01:A0
Certificate issuer: /CN=be18e2d9f509c9d3b455112aa288d336185801a0
Certificate serial: 01984852DEF14B4A7D6E3348F5B7602B3549
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vhji2fUJydO0VREqoojTNhhYAaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/6645d5-d193-4a63-85e6-2ca0e5c104fd/1/vhji2fUJydO0VREqoojTNhhYAaA.mft
Manifest number: 0FE3
Signing time: Sat 26 Jul 2025 20:00:47 +0000
Manifest this update: Sat 26 Jul 2025 20:00:47 +0000
Manifest next update: Sun 27 Jul 2025 20:00:47 +0000
Files and hashes: 1: K7bdbq2NQi5Og3pBR0VNiKqzF3o.roa (hash: Y5TCg/QVPxm4ctwH0Vu0TBEdMj0uZUrfAJN0ICvLjOc=)
2: vhji2fUJydO0VREqoojTNhhYAaA.crl (hash: U/MCgwahpcTivgK5xzTNCwBZSbPhkJC7ripb8uw4Yls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/6645d5-d193-4a63-85e6-2ca0e5c104fd/1/vhji2fUJydO0VREqoojTNhhYAaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/6645d5-d193-4a63-85e6-2ca0e5c104fd/1/vhji2fUJydO0VREqoojTNhhYAaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/vhji2fUJydO0VREqoojTNhhYAaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:52:de:f1:4b:4a:7d:6e:33:48:f5:b7:60:2b:35:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be18e2d9f509c9d3b455112aa288d336185801a0
Validity
Not Before: Jul 26 20:00:47 2025 GMT
Not After : Jul 27 20:00:47 2025 GMT
Subject: CN=21779413e118448a34af7829ae256002e00892ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:55:2c:4f:e8:7c:d2:69:79:a7:c1:a2:2c:b6:
fd:39:2a:a7:3a:a0:7b:67:7b:5e:ad:da:30:1c:4f:
93:c9:e7:38:2a:7c:ef:37:f6:3c:1b:a9:77:56:5e:
14:ca:83:7f:1b:16:41:5b:45:e4:30:f3:e8:cf:3c:
ab:5f:12:c4:ac:45:b3:90:dc:52:79:03:8d:1b:9d:
f5:b0:9e:38:f2:42:72:c7:72:bf:19:9a:ca:58:1e:
22:b7:bc:be:21:b1:10:83:5f:ac:95:92:13:f0:4d:
77:db:eb:a6:2d:75:e1:ac:2b:da:24:f7:e2:c0:72:
98:94:ab:22:5a:0f:e8:64:c2:9f:65:50:30:6b:23:
97:ee:09:7f:c9:5f:fa:25:91:24:4f:d0:30:80:9f:
f3:12:ee:c0:1b:b7:b5:46:f7:f4:69:5d:93:98:cf:
78:4c:2f:1a:0c:80:93:11:54:8e:7a:1a:9b:a9:62:
71:19:f1:6a:d5:42:42:76:f7:a1:09:c2:45:62:00:
9e:7f:7f:05:a6:ba:fc:45:7c:33:a3:c3:14:7e:72:
20:41:15:0f:16:11:fd:e9:6c:fc:ac:57:2e:54:5e:
af:4d:5a:20:f0:61:ed:26:1e:09:54:da:cf:42:1a:
72:c7:6b:a6:a6:71:91:1e:64:d4:e5:72:d9:90:4a:
63:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:77:94:13:E1:18:44:8A:34:AF:78:29:AE:25:60:02:E0:08:92:EE
X509v3 Authority Key Identifier:
keyid:BE:18:E2:D9:F5:09:C9:D3:B4:55:11:2A:A2:88:D3:36:18:58:01:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vhji2fUJydO0VREqoojTNhhYAaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6645d5-d193-4a63-85e6-2ca0e5c104fd/1/vhji2fUJydO0VREqoojTNhhYAaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6645d5-d193-4a63-85e6-2ca0e5c104fd/1/vhji2fUJydO0VREqoojTNhhYAaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:98:4c:f4:f6:a9:21:03:b8:ca:c5:0f:44:69:5f:ca:26:1d:
e3:65:99:03:f8:b7:ac:45:7d:d5:ba:65:2e:b0:5a:09:e1:61:
fc:cf:cf:88:2d:40:3f:2f:e9:9d:96:d7:3c:0f:30:31:43:a9:
e3:77:f4:4e:be:be:12:c3:ec:1a:4d:e3:18:87:36:ca:51:f7:
23:a1:9a:2f:d5:3d:df:94:10:aa:f1:32:c1:fa:27:95:9c:5e:
92:93:dc:d2:39:ff:7a:90:10:9f:4d:7d:c4:79:64:1f:c3:2c:
4b:ad:64:ec:77:dc:6d:ed:0b:c1:ed:ed:a2:73:52:be:8f:3b:
0a:9e:09:76:3f:f3:eb:97:f4:b0:89:0b:d7:f1:94:cb:27:26:
d3:5b:ae:e1:ee:3e:ea:cc:c6:c4:49:78:32:80:70:fe:d2:0b:
de:c8:f5:c8:f6:00:56:17:eb:7d:7a:12:08:41:6e:f1:a3:47:
bb:60:40:b1:4c:3a:35:44:48:2a:c1:f3:2c:db:be:86:75:21:
4f:37:8f:ed:f3:8d:3e:60:d3:3d:a0:c9:1d:e5:cd:95:5a:01:
64:f9:6d:8f:3b:c0:5c:b1:1f:86:be:7e:f8:7e:5e:9b:3f:96:
28:e5:35:55:77:99:23:e9:aa:b7:d8:67:fc:79:2f:01:77:45:
cf:3f:c0:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:02:59 2025 by rpki-client