Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/442101-780b-47ac-857d-f9e7cb03c527/1/vGW0uk14adXLj5V08PT-7nDrxsU.mft
File: vGW0uk14adXLj5V08PT-7nDrxsU.mft (raw, json)
Hash identifier: 0EkCxgr3k7FNLGOQUKczgTS2PobT1sqwSUHodvVMuW8=
Subject key identifier: 55:C4:83:66:33:01:E3:FE:3D:4A:BA:D3:48:EC:CB:F2:36:4E:23:1E
Authority key identifier: BC:65:B4:BA:4D:78:69:D5:CB:8F:95:74:F0:F4:FE:EE:70:EB:C6:C5
Certificate issuer: /CN=bc65b4ba4d7869d5cb8f9574f0f4feee70ebc6c5
Certificate serial: 019845882EA0BC1F5D64B33471140A13C9D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vGW0uk14adXLj5V08PT-7nDrxsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/442101-780b-47ac-857d-f9e7cb03c527/1/vGW0uk14adXLj5V08PT-7nDrxsU.mft
Manifest number: 1600
Signing time: Sat 26 Jul 2025 07:00:09 +0000
Manifest this update: Sat 26 Jul 2025 07:00:09 +0000
Manifest next update: Sun 27 Jul 2025 07:00:09 +0000
Files and hashes: 1: Lyt3wxp7GPsYmae1yjcH7ZriVhY.roa (hash: hPKn4hG6PTy5BGSQf4AvDzlOXQQIjurdWjZynBc0Dss=)
2: tj6K5SjptWHwjdC118oFQLdh9d0.roa (hash: r+olKMGe/rwlvBp2fd9whUIN+tGxqF1STWjeBypW8Gg=)
3: vGW0uk14adXLj5V08PT-7nDrxsU.crl (hash: Bg1mKwl9kyrJ746bkKGvBieNq/4kmIus0UQ+OsVJ2KM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/442101-780b-47ac-857d-f9e7cb03c527/1/vGW0uk14adXLj5V08PT-7nDrxsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/442101-780b-47ac-857d-f9e7cb03c527/1/vGW0uk14adXLj5V08PT-7nDrxsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vGW0uk14adXLj5V08PT-7nDrxsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:88:2e:a0:bc:1f:5d:64:b3:34:71:14:0a:13:c9:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc65b4ba4d7869d5cb8f9574f0f4feee70ebc6c5
Validity
Not Before: Jul 26 07:00:09 2025 GMT
Not After : Jul 27 07:00:09 2025 GMT
Subject: CN=55c483663301e3fe3d4abad348eccbf2364e231e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:23:2e:b2:c6:81:95:f1:43:28:16:ff:97:8c:
88:51:13:0a:4a:36:d1:6f:02:c4:24:f3:6e:12:f0:
3c:d9:bd:99:be:bc:b9:7c:ad:ce:93:90:67:a1:0c:
57:0c:70:96:f9:5f:16:82:14:07:91:8b:bf:5c:8b:
80:79:b3:de:14:5c:8e:dd:03:ad:5e:e5:2a:82:5d:
41:9a:f2:78:39:b0:ed:4b:cf:aa:cf:dd:ae:ab:83:
73:5c:e9:da:0a:b8:31:0b:c7:25:00:2d:8b:92:42:
ea:4e:0d:d2:96:63:3b:2b:56:bc:37:8e:b6:05:93:
13:12:3c:3c:25:4d:15:50:70:85:7a:b0:04:ac:ac:
90:6a:56:34:95:57:ba:ed:3a:9c:09:34:fe:79:24:
6a:3e:02:bc:cb:3d:75:d6:76:c9:56:34:fa:1d:f1:
e8:86:b5:f6:46:20:e4:b1:b5:97:1d:f5:54:6e:50:
7e:82:81:b7:8a:09:75:4b:e2:61:77:0d:2d:f8:e9:
dc:69:a1:f1:e1:ad:ea:ab:93:31:f8:ec:cf:50:01:
5d:0f:0f:79:bd:a9:8a:60:29:e5:89:be:12:53:00:
be:63:21:f7:72:f6:e1:87:77:bd:e8:b5:91:e9:09:
55:b5:d8:24:84:90:1b:57:42:9d:ad:98:3d:5a:fa:
eb:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:C4:83:66:33:01:E3:FE:3D:4A:BA:D3:48:EC:CB:F2:36:4E:23:1E
X509v3 Authority Key Identifier:
keyid:BC:65:B4:BA:4D:78:69:D5:CB:8F:95:74:F0:F4:FE:EE:70:EB:C6:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vGW0uk14adXLj5V08PT-7nDrxsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/442101-780b-47ac-857d-f9e7cb03c527/1/vGW0uk14adXLj5V08PT-7nDrxsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/442101-780b-47ac-857d-f9e7cb03c527/1/vGW0uk14adXLj5V08PT-7nDrxsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:f0:6a:d3:81:6b:78:ea:b9:bf:a5:f4:63:88:ae:4a:d5:ed:
d5:9a:b3:47:9c:82:66:40:6a:9a:ec:7a:3c:cb:27:8f:21:e1:
06:25:1d:00:47:f5:40:3a:71:4d:46:bf:16:d2:ac:fb:43:20:
27:ba:25:d2:a7:05:7f:b6:c5:74:62:25:26:0a:c5:a4:e7:5c:
04:5d:9f:00:7a:16:40:76:26:d5:17:4a:a9:9e:61:43:fe:43:
cb:6b:69:e3:e0:f1:45:26:47:58:9c:c9:37:bb:32:eb:0e:77:
9a:cc:d7:d5:e9:86:6c:77:96:d6:03:df:41:21:ac:8c:9a:03:
51:6c:ae:f2:2b:ee:fb:9b:45:bc:e1:43:ad:34:07:9f:c8:c7:
45:ea:a6:bb:46:1f:d0:69:da:3f:36:03:94:5c:2c:cd:5d:47:
f3:dc:fb:c5:7b:a3:08:c7:63:7d:ce:09:8d:81:5e:b2:b2:c3:
65:22:d5:7f:bb:78:e6:53:6a:b9:ca:fd:84:db:25:66:33:15:
a8:e9:b7:d7:f3:28:f8:42:da:e5:12:fb:0d:a3:23:b4:cc:53:
e0:a6:f4:a9:3b:a1:e7:ef:8e:26:af:98:73:28:c8:0e:4e:64:
46:e4:b0:7f:94:32:f8:ac:3a:c9:ce:8e:71:7d:fb:a6:a9:14:
43:c8:b9:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 10:47:35 2025 by rpki-client