Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/119130-dbfd-4027-a16e-c35d5d5401da/1/VRGWi3l6ylfWEYAak6hcuGTkPnI.mft
File: VRGWi3l6ylfWEYAak6hcuGTkPnI.mft (raw, json)
Hash identifier: RCHiG6uBoDH8gCKc92PB4gW9qGPLiOkIMMKcSXyjC7w=
Subject key identifier: 7C:9F:A8:C5:7C:BB:EA:91:00:12:04:44:9D:80:E6:05:30:5A:40:C9
Authority key identifier: 55:11:96:8B:79:7A:CA:57:D6:11:80:1A:93:A8:5C:B8:64:E4:3E:72
Certificate issuer: /CN=5511968b797aca57d611801a93a85cb864e43e72
Certificate serial: 01983EAA8B2374A09D32CEB6EE55D320806B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VRGWi3l6ylfWEYAak6hcuGTkPnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/119130-dbfd-4027-a16e-c35d5d5401da/1/VRGWi3l6ylfWEYAak6hcuGTkPnI.mft
Manifest number: 0ED2
Signing time: Thu 24 Jul 2025 23:00:20 +0000
Manifest this update: Thu 24 Jul 2025 23:00:20 +0000
Manifest next update: Fri 25 Jul 2025 23:00:20 +0000
Files and hashes: 1: FkEK24gMOi9MxsRr642Srdl8lHQ.roa (hash: DtYbP2drcIzf0g2tEEsCLYpdXSaGIQ0MZgdI48xnP+Q=)
2: VRGWi3l6ylfWEYAak6hcuGTkPnI.crl (hash: 3JnRhYXHzG9zSThQJYRw+TNM+ZGIiKmGSVjXxFbeHtY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/119130-dbfd-4027-a16e-c35d5d5401da/1/VRGWi3l6ylfWEYAak6hcuGTkPnI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/119130-dbfd-4027-a16e-c35d5d5401da/1/VRGWi3l6ylfWEYAak6hcuGTkPnI.mft
rsync://rpki.ripe.net/repository/DEFAULT/VRGWi3l6ylfWEYAak6hcuGTkPnI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Jul 2025 22:13:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3e:aa:8b:23:74:a0:9d:32:ce:b6:ee:55:d3:20:80:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5511968b797aca57d611801a93a85cb864e43e72
Validity
Not Before: Jul 24 23:00:20 2025 GMT
Not After : Jul 25 23:00:20 2025 GMT
Subject: CN=7c9fa8c57cbbea91001204449d80e605305a40c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7c:82:32:18:52:ee:cf:58:82:08:2b:64:18:
30:75:57:ea:09:10:cf:1b:43:52:00:46:4c:eb:1f:
66:a1:f3:c3:cf:82:a7:57:38:93:66:aa:46:4d:3c:
d6:51:f8:f4:a1:eb:6e:14:6c:fa:50:ec:96:94:c6:
59:52:7c:d5:86:2e:6c:a3:7e:a7:f1:84:01:a7:e5:
ee:c3:ad:d2:26:e9:9e:51:a9:cd:2c:57:94:d5:54:
fa:06:88:a1:5b:0e:3d:c4:96:a5:22:9e:12:30:cf:
ec:b8:66:53:b9:1e:f2:ab:9d:55:ac:1e:d3:0e:ed:
e6:db:f6:04:75:a8:bf:16:6a:77:4b:b9:81:6d:d8:
15:70:38:da:a0:09:36:7b:41:29:7a:33:bc:b8:03:
f3:59:4b:57:33:30:bc:98:52:e9:c1:c3:6a:47:29:
94:e0:21:0d:90:c8:d3:26:e6:7c:79:11:0f:62:a9:
a3:17:68:e8:10:54:33:99:e9:ab:5f:0f:c1:4e:b4:
8e:de:a4:70:90:f1:ac:77:97:a9:d6:6f:e2:c4:da:
52:f4:6b:65:49:b6:ed:0a:c6:75:97:ea:0b:45:3d:
c3:e5:de:4d:7f:78:af:8a:c2:ea:04:ac:ce:77:41:
32:2d:fd:90:c8:cf:34:17:17:ae:ba:c6:87:d5:c3:
40:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:9F:A8:C5:7C:BB:EA:91:00:12:04:44:9D:80:E6:05:30:5A:40:C9
X509v3 Authority Key Identifier:
keyid:55:11:96:8B:79:7A:CA:57:D6:11:80:1A:93:A8:5C:B8:64:E4:3E:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VRGWi3l6ylfWEYAak6hcuGTkPnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/119130-dbfd-4027-a16e-c35d5d5401da/1/VRGWi3l6ylfWEYAak6hcuGTkPnI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/119130-dbfd-4027-a16e-c35d5d5401da/1/VRGWi3l6ylfWEYAak6hcuGTkPnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:1d:a9:06:40:a7:33:90:7a:30:3e:b0:c0:5e:ff:0f:a0:b8:
32:5f:c4:c4:45:0b:25:b5:6c:f2:99:09:6f:4a:01:8e:17:47:
18:99:ca:ee:e5:80:dc:52:b8:a6:d3:03:5b:d2:6c:3c:b1:37:
87:00:0d:20:42:73:d0:8f:1b:3a:07:6d:88:72:51:f3:45:17:
8b:bf:3c:b1:7f:99:53:c5:9c:21:df:22:6e:6b:ed:bb:8d:81:
42:fc:1f:f7:6c:0c:33:bf:d8:8d:d4:b6:5a:3b:70:79:df:a9:
29:d1:ba:a5:55:d0:01:a1:4f:e4:65:58:84:2d:65:30:c2:75:
ef:66:10:dd:48:3e:e5:0a:57:cf:b5:9b:af:1f:44:44:ba:c3:
28:35:4d:8f:3c:8a:e3:cd:18:86:a2:7a:58:b7:93:19:2f:2a:
0e:4c:04:92:8a:49:d3:8a:c2:90:f8:81:93:90:dc:b3:74:cc:
da:e5:87:81:da:b7:d8:b4:4f:38:2f:c3:70:5a:ef:d5:90:c2:
b2:9c:36:0e:e8:b0:62:5b:9d:e8:4e:ea:35:6f:55:e1:c3:19:
ea:5b:ab:ac:d4:25:d9:9f:3e:ce:8f:d6:09:ea:98:35:cb:b0:
06:54:65:06:8b:bf:32:03:50:2c:55:e0:93:f5:67:36:88:01:
7a:82:6f:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 00:51:49 2025 by rpki-client