Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/VSrToLS3ToWvVPWK11owJrffcYE.mft
File: VSrToLS3ToWvVPWK11owJrffcYE.mft (raw, json)
Hash identifier: S9RX7/G7Ou2fwqEZmWB6nUEIn8391VKMeRz0zBpY/n4=
Subject key identifier: BA:35:35:4F:60:F4:3A:43:0D:B6:B2:BC:B4:51:F3:18:93:1F:10:AB
Authority key identifier: 55:2A:D3:A0:B4:B7:4E:85:AF:54:F5:8A:D7:5A:30:26:B7:DF:71:81
Certificate issuer: /CN=552ad3a0b4b74e85af54f58ad75a3026b7df7181
Certificate serial: 01984CD4176BB446901856BBF669EE68CD7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VSrToLS3ToWvVPWK11owJrffcYE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/VSrToLS3ToWvVPWK11owJrffcYE.mft
Manifest number: 163D
Signing time: Sun 27 Jul 2025 17:00:24 +0000
Manifest this update: Sun 27 Jul 2025 17:00:24 +0000
Manifest next update: Mon 28 Jul 2025 17:00:24 +0000
Files and hashes: 1: 6jmBqQ69ucquob5LYoU8XO0aoaM.roa (hash: iVwx0LgAhkHT9krjXAM19RbPrDxsVzpzta/Wm4cdzGM=)
2: Tc3s-2xco0JsiKKHs4HafxTscjs.roa (hash: ldDhuMj8RJQOwqkPXb97Us2/HhGxeidwxkit00ybDDk=)
3: VSrToLS3ToWvVPWK11owJrffcYE.crl (hash: HhOtxeAPkJ3W6FXKSyo1cBbuGzurZ6b1L70sZ0dbawc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/VSrToLS3ToWvVPWK11owJrffcYE.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/VSrToLS3ToWvVPWK11owJrffcYE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VSrToLS3ToWvVPWK11owJrffcYE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 09:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4c:d4:17:6b:b4:46:90:18:56:bb:f6:69:ee:68:cd:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=552ad3a0b4b74e85af54f58ad75a3026b7df7181
Validity
Not Before: Jul 27 17:00:24 2025 GMT
Not After : Jul 28 17:00:24 2025 GMT
Subject: CN=ba35354f60f43a430db6b2bcb451f318931f10ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:61:e2:2c:71:3b:79:0a:1c:b9:d2:70:42:2d:
65:6f:97:9a:70:9c:82:71:60:25:b6:5d:c9:f8:c7:
f1:96:12:8a:c3:9e:a1:60:1c:d8:08:3b:70:7e:6b:
5c:c2:9b:8b:68:1f:8d:0b:69:04:bb:2f:47:3e:a2:
fa:89:1a:33:e1:1f:e3:7e:7b:e0:b5:88:d4:85:0f:
b0:b7:89:17:36:7d:3e:3e:ba:e2:74:fc:82:11:7a:
a8:aa:33:ba:6a:44:2c:d6:8d:65:bd:cc:90:47:bc:
f9:3a:1d:b8:36:50:93:51:02:fb:f9:2a:9c:45:02:
2b:9c:db:10:26:b4:2e:ab:e4:76:0e:21:f2:6d:86:
11:22:26:af:87:03:25:34:8c:15:6f:57:a3:aa:1a:
4a:e8:80:0f:2c:d3:b5:35:10:6f:5b:a3:14:f0:bb:
c7:d2:96:26:2e:97:5d:dc:32:ac:a9:7d:81:c1:59:
5e:40:2b:dd:86:73:a5:bb:69:08:a8:54:ae:67:3e:
8c:e8:40:e0:e5:01:e0:0e:fd:97:b9:67:0b:56:b2:
60:e5:f1:3a:89:f4:ee:9c:0d:1e:50:82:1e:4b:78:
f8:ab:7c:7a:07:ad:aa:93:84:a6:8f:7b:c6:a4:95:
58:93:fc:e1:9a:ad:3b:a4:b6:26:49:0a:49:7f:3b:
20:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:35:35:4F:60:F4:3A:43:0D:B6:B2:BC:B4:51:F3:18:93:1F:10:AB
X509v3 Authority Key Identifier:
keyid:55:2A:D3:A0:B4:B7:4E:85:AF:54:F5:8A:D7:5A:30:26:B7:DF:71:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VSrToLS3ToWvVPWK11owJrffcYE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/VSrToLS3ToWvVPWK11owJrffcYE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/VSrToLS3ToWvVPWK11owJrffcYE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:e0:3c:65:7b:01:f5:4b:b1:27:f2:39:2d:ef:d4:ec:ff:9b:
b1:7f:d9:7d:7f:b2:46:e2:67:f5:ea:c2:c4:7a:89:4f:c3:fd:
79:8c:17:d9:9d:49:b4:52:33:98:b1:7e:d2:ab:41:05:6a:74:
28:15:58:d8:f3:ba:c8:c3:0b:77:52:b1:62:80:08:f1:06:6f:
94:26:d9:42:ae:69:53:53:9c:5f:1f:f7:4f:6b:4b:de:60:18:
98:16:81:91:ee:7d:54:0b:c0:59:f9:5b:fc:64:00:e1:48:56:
3b:c2:f1:63:47:eb:c0:0e:72:73:50:f1:56:d9:31:1e:a7:09:
ad:39:a3:9d:00:01:0e:40:ac:a0:77:90:7f:1b:b7:d7:79:21:
83:03:cb:90:fd:9d:18:62:f6:c0:44:11:88:da:aa:b2:94:13:
59:fa:0e:36:a8:09:17:64:59:5c:ea:94:4f:b0:83:4a:72:9d:
bb:70:63:02:99:5e:dc:7f:6e:0e:f3:cf:5e:c9:13:bc:f2:3d:
7e:12:00:f0:bd:75:b4:24:b3:62:d3:f5:93:8d:28:67:4e:a3:
45:29:bf:c2:08:9f:86:75:62:e1:68:53:4e:5e:66:b8:e7:48:
2c:fe:47:47:33:36:89:46:7f:43:d8:d9:55:58:42:01:a1:c0:
af:b2:04:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 19:10:22 2025 by rpki-client