Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/5db8eb-cccc-498a-81cb-65ae58a9bee8/1/vmxJf_TUqLtaJL3SBRV1tJoIPHU.mft
File: vmxJf_TUqLtaJL3SBRV1tJoIPHU.mft (raw, json)
Hash identifier: 4uOgsjYAQo2tn77pYMIrjtZbGhJzy/E/yfebftkD5n4=
Subject key identifier: 76:2B:FA:C2:C5:2B:32:0F:59:32:9A:26:06:DE:76:07:2F:75:A5:99
Authority key identifier: BE:6C:49:7F:F4:D4:A8:BB:5A:24:BD:D2:05:15:75:B4:9A:08:3C:75
Certificate issuer: /CN=be6c497ff4d4a8bb5a24bdd2051575b49a083c75
Certificate serial: 019854FBFD10A773878A94BD8A5EB16E78A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vmxJf_TUqLtaJL3SBRV1tJoIPHU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/5db8eb-cccc-498a-81cb-65ae58a9bee8/1/vmxJf_TUqLtaJL3SBRV1tJoIPHU.mft
Manifest number: 1607
Signing time: Tue 29 Jul 2025 07:00:57 +0000
Manifest this update: Tue 29 Jul 2025 07:00:57 +0000
Manifest next update: Wed 30 Jul 2025 07:00:57 +0000
Files and hashes: 1: 04aeLB2DOt1K2QS3FV3HPiOFTOY.roa (hash: A0BDulMr2mADVn63DP1McJaXG3hUV8E5IfZVNPfU4eA=)
2: bO2ZdwM21enGaKwe_1iSEPBIIts.roa (hash: uBMm/tJP0uLUJeJM+1YEtRm4BQYL1PFKNrER1Hr5ksk=)
3: vmxJf_TUqLtaJL3SBRV1tJoIPHU.crl (hash: BZiKu6lVHtRWAVYikbiJERt0tlaoT3a4bSdrxzxXB98=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/5db8eb-cccc-498a-81cb-65ae58a9bee8/1/vmxJf_TUqLtaJL3SBRV1tJoIPHU.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/5db8eb-cccc-498a-81cb-65ae58a9bee8/1/vmxJf_TUqLtaJL3SBRV1tJoIPHU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vmxJf_TUqLtaJL3SBRV1tJoIPHU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 07:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:54:fb:fd:10:a7:73:87:8a:94:bd:8a:5e:b1:6e:78:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be6c497ff4d4a8bb5a24bdd2051575b49a083c75
Validity
Not Before: Jul 29 07:00:57 2025 GMT
Not After : Jul 30 07:00:57 2025 GMT
Subject: CN=762bfac2c52b320f59329a2606de76072f75a599
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:45:a9:ad:b8:a3:6f:51:59:13:0e:63:20:8e:
e6:67:a1:ac:42:bb:11:9d:b0:b2:a8:94:15:c3:28:
9f:2f:e7:c3:0a:b5:59:24:52:59:30:f9:bd:09:05:
bf:4a:34:4c:d7:78:b3:11:6c:be:1b:c3:8a:8b:dc:
42:c2:99:24:ed:75:0c:ff:fb:e5:a1:06:1a:36:bf:
bc:0f:f3:3d:48:c9:45:d9:14:8e:97:63:41:57:8a:
b7:78:fa:1c:e8:bf:a8:d0:7b:67:91:e6:25:ab:b7:
b1:40:1b:9f:a2:26:09:9c:d3:3c:93:5e:e0:2d:ab:
84:e3:41:66:17:21:1c:63:e2:58:b8:53:8e:bb:ae:
96:46:34:7d:44:a1:a2:32:d3:2b:d7:59:77:f3:e6:
7d:05:77:65:f3:af:80:06:30:68:2b:49:2b:86:51:
c4:b3:5a:bd:4b:e9:67:bc:a9:95:dc:6e:82:24:66:
1e:f1:5d:d0:4e:6d:6e:c5:b3:d0:2d:43:f3:30:38:
a5:11:03:10:5f:cc:4e:da:db:27:06:65:bd:6e:4a:
cc:76:65:a3:ba:1a:a6:78:cf:97:6f:cc:47:8c:12:
38:ac:6e:a1:52:51:ee:fd:63:4f:a3:45:fa:b3:6f:
68:e3:5e:5e:c3:9b:8e:63:29:78:03:b0:67:69:e9:
20:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:2B:FA:C2:C5:2B:32:0F:59:32:9A:26:06:DE:76:07:2F:75:A5:99
X509v3 Authority Key Identifier:
keyid:BE:6C:49:7F:F4:D4:A8:BB:5A:24:BD:D2:05:15:75:B4:9A:08:3C:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vmxJf_TUqLtaJL3SBRV1tJoIPHU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5db8eb-cccc-498a-81cb-65ae58a9bee8/1/vmxJf_TUqLtaJL3SBRV1tJoIPHU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5db8eb-cccc-498a-81cb-65ae58a9bee8/1/vmxJf_TUqLtaJL3SBRV1tJoIPHU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:ff:29:1e:42:7b:6c:5c:f4:d1:c2:ce:a9:c1:60:03:b1:16:
60:dc:5e:b1:2b:70:a9:dd:6b:97:b8:43:f3:c8:87:19:1d:7b:
9c:ed:e6:b9:1b:e0:ae:db:c0:33:03:2e:46:eb:18:8c:39:44:
6f:2c:2b:72:89:6d:24:c2:de:6c:82:cb:ac:99:b4:cf:18:55:
93:3c:0a:e8:7b:e3:5c:d9:c5:73:6f:31:5e:d3:d4:5e:5b:04:
cf:a5:c7:54:98:48:97:4e:49:2c:f8:07:be:ad:c0:d2:6b:c5:
23:30:7e:70:0c:a7:06:f5:0a:e4:d4:c3:f2:8f:c8:b7:ae:eb:
81:fd:43:8b:94:43:e7:7e:4b:0a:d3:11:dc:61:c3:af:c7:ef:
21:b3:c9:8b:05:51:bd:ca:a9:70:99:00:dc:9e:35:2e:b3:92:
31:5e:bb:dc:3d:8b:20:c7:34:ed:ae:d5:a1:ca:fd:bd:25:37:
4e:b3:91:05:fc:7b:ed:bc:12:dc:a3:4a:ed:98:24:8f:8f:3f:
96:d9:0c:2e:75:93:ca:48:58:48:9c:ab:bb:6d:2b:7a:49:cd:
a2:21:76:ff:9b:87:45:72:2f:8e:1d:13:e2:b6:b8:b1:b1:c3:
01:a7:8e:e5:ff:9b:a3:7b:e2:6c:68:8d:72:22:08:75:7a:6d:
e7:db:a0:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 11:25:42 2025 by rpki-client