Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/25a747-8426-430a-9e30-45b3443a76f9/1/VWyanGGYCpC10MUfhtfLrJ_xQto.mft
File: VWyanGGYCpC10MUfhtfLrJ_xQto.mft (raw, json)
Hash identifier: qJE1RsRzs/NR2DBzStcy7ByJYP3zDOHQFnJLUECef78=
Subject key identifier: 8B:C8:22:3B:98:FA:66:E6:63:6C:9D:11:EF:E4:47:8C:EC:91:33:1D
Authority key identifier: 55:6C:9A:9C:61:98:0A:90:B5:D0:C5:1F:86:D7:CB:AC:9F:F1:42:DA
Certificate issuer: /CN=556c9a9c61980a90b5d0c51f86d7cbac9ff142da
Certificate serial: 01984A41357E22AB2417534D42F1E673921B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VWyanGGYCpC10MUfhtfLrJ_xQto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/25a747-8426-430a-9e30-45b3443a76f9/1/VWyanGGYCpC10MUfhtfLrJ_xQto.mft
Manifest number: 15FF
Signing time: Sun 27 Jul 2025 05:00:44 +0000
Manifest this update: Sun 27 Jul 2025 05:00:44 +0000
Manifest next update: Mon 28 Jul 2025 05:00:44 +0000
Files and hashes: 1: VWyanGGYCpC10MUfhtfLrJ_xQto.crl (hash: ucvjnUM3/peJixXqyY8J8SN5gojvqz1iyvLIm/6hCD0=)
2: haz-HdaagkevUDJWOKHcKbMpfs4.roa (hash: 4MYVAihmuy2VBnQslitsGPSQAlGwL1bJXLz/oBhLSUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/25a747-8426-430a-9e30-45b3443a76f9/1/VWyanGGYCpC10MUfhtfLrJ_xQto.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/25a747-8426-430a-9e30-45b3443a76f9/1/VWyanGGYCpC10MUfhtfLrJ_xQto.mft
rsync://rpki.ripe.net/repository/DEFAULT/VWyanGGYCpC10MUfhtfLrJ_xQto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:35:7e:22:ab:24:17:53:4d:42:f1:e6:73:92:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=556c9a9c61980a90b5d0c51f86d7cbac9ff142da
Validity
Not Before: Jul 27 05:00:44 2025 GMT
Not After : Jul 28 05:00:44 2025 GMT
Subject: CN=8bc8223b98fa66e6636c9d11efe4478cec91331d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f1:e4:58:99:0e:92:74:85:a6:01:20:7f:1a:
16:c8:a6:09:7c:17:8d:7f:a4:d3:c6:38:89:81:5d:
3b:29:b6:6b:11:56:e1:92:f9:7b:fc:3f:93:75:0a:
98:38:5c:4c:1e:ee:bf:28:a9:ce:13:c5:37:f4:0c:
ed:7e:53:d1:63:e6:17:d1:12:1a:63:9d:47:e8:6d:
c1:29:6f:d2:5d:e5:38:20:ac:1c:b3:c8:c6:61:f6:
f7:73:07:53:12:8e:b1:d9:5c:44:55:1b:ae:7a:fa:
26:d6:24:6d:ce:9f:b7:7a:4e:52:25:21:13:03:10:
39:2a:13:18:47:65:8e:fe:37:1b:a1:78:e3:fe:a3:
14:bd:2d:ec:ef:a7:42:d7:48:8d:a1:6a:b3:ed:bc:
d0:2d:18:af:8f:e8:9e:3f:55:bc:f2:b0:9e:28:8c:
26:5d:12:91:f0:84:68:b5:b6:64:51:4d:a3:e7:8d:
13:af:77:76:d8:d8:6a:ac:d8:52:a6:c2:ba:3b:5f:
b8:94:a4:3b:24:e1:67:2c:05:06:51:ff:e3:a9:43:
df:ec:98:42:e6:b0:b0:8a:7a:51:41:83:ec:93:d1:
5e:00:be:70:4a:21:f0:8f:eb:de:8c:8d:79:f1:a4:
05:63:3e:c3:45:1a:95:56:b1:ee:1c:d1:9b:d8:87:
5c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:C8:22:3B:98:FA:66:E6:63:6C:9D:11:EF:E4:47:8C:EC:91:33:1D
X509v3 Authority Key Identifier:
keyid:55:6C:9A:9C:61:98:0A:90:B5:D0:C5:1F:86:D7:CB:AC:9F:F1:42:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VWyanGGYCpC10MUfhtfLrJ_xQto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/25a747-8426-430a-9e30-45b3443a76f9/1/VWyanGGYCpC10MUfhtfLrJ_xQto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/25a747-8426-430a-9e30-45b3443a76f9/1/VWyanGGYCpC10MUfhtfLrJ_xQto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:94:09:51:26:75:4f:a4:c4:0d:96:2f:b2:88:31:e8:88:2f:
a9:4f:fc:a0:69:4f:24:d3:99:85:55:60:e8:95:85:2f:cd:21:
12:7d:5e:67:ac:a9:4d:ce:b0:46:91:cf:a0:d9:bf:bb:01:16:
f4:07:55:8f:8f:02:7d:2c:17:eb:eb:3c:de:87:ad:31:db:20:
35:c2:ad:88:b2:3f:46:90:76:45:6a:94:f4:dd:24:28:e8:99:
0b:a3:90:ca:37:a0:c2:71:77:8b:3c:ff:e8:d5:f0:96:d3:f8:
12:c8:56:f0:04:7a:bd:b9:e4:85:67:e2:a4:f7:2e:9f:5c:06:
c6:bd:11:a9:80:ce:a9:4b:8c:78:b3:ef:76:29:ea:00:9c:ad:
a0:5c:02:07:76:df:98:25:c8:bf:c0:5b:60:5c:97:81:dc:83:
9e:2c:36:de:b5:07:19:7f:18:d6:84:9f:4e:a0:bf:be:60:50:
6d:c3:38:b7:1c:e8:e4:15:21:71:94:b8:ed:35:f9:9a:e0:95:
f2:75:9c:0c:ab:44:60:71:de:56:ba:f7:23:a8:fd:f6:1a:b9:
1d:d4:06:50:b5:24:4c:8d:a8:30:71:08:0a:0d:c5:20:e6:55:
18:df:35:a6:19:d2:7c:05:2f:ed:57:09:e6:62:99:4d:ee:84:
41:08:5b:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKQTV+IqskF1NNQvHmc5IbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1NmM5YTljNjE5ODBhOTBiNWQwYzUxZjg2ZDdjYmFjOWZm
MTQyZGEwHhcNMjUwNzI3MDUwMDQ0WhcNMjUwNzI4MDUwMDQ0WjAzMTEwLwYDVQQD
Eyg4YmM4MjIzYjk4ZmE2NmU2NjM2YzlkMTFlZmU0NDc4Y2VjOTEzMzFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/HkWJkOknSFpgEgfxoWyKYJfBeN
f6TTxjiJgV07KbZrEVbhkvl7/D+TdQqYOFxMHu6/KKnOE8U39AztflPRY+YX0RIa
Y51H6G3BKW/SXeU4IKwcs8jGYfb3cwdTEo6x2VxEVRuuevom1iRtzp+3ek5SJSET
AxA5KhMYR2WO/jcboXjj/qMUvS3s76dC10iNoWqz7bzQLRivj+ieP1W88rCeKIwm
XRKR8IRotbZkUU2j540Tr3d22NhqrNhSpsK6O1+4lKQ7JOFnLAUGUf/jqUPf7JhC
5rCwinpRQYPsk9FeAL5wSiHwj+vejI158aQFYz7DRRqVVrHuHNGb2Idc5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIvIIjuY+mbmY2ydEe/kR4zskTMdMB8GA1UdIwQY
MBaAFFVsmpxhmAqQtdDFH4bXy6yf8ULaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVld5YW5HR1lDcEMxME1VZmh0ZkxySl94UXRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy8yNWE3NDctODQyNi00MzBhLTllMzAt
NDViMzQ0M2E3NmY5LzEvVld5YW5HR1lDcEMxME1VZmh0ZkxySl94UXRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy8yNWE3NDctODQyNi00MzBhLTllMzAtNDViMzQ0M2E3NmY5
LzEvVld5YW5HR1lDcEMxME1VZmh0ZkxySl94UXRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAapQJUSZ1
T6TEDZYvsogx6IgvqU/8oGlPJNOZhVVg6JWFL80hEn1eZ6ypTc6wRpHPoNm/uwEW
9AdVj48CfSwX6+s83oetMdsgNcKtiLI/RpB2RWqU9N0kKOiZC6OQyjegwnF3izz/
6NXwltP4EshW8AR6vbnkhWfipPcun1wGxr0RqYDOqUuMeLPvdinqAJytoFwCB3bf
mCXIv8BbYFyXgdyDniw23rUHGX8Y1oSfTqC/vmBQbcM4txzo5BUhcZS47TX5muCV
8nWcDKtEYHHeVrr3I6j99hq5HdQGULUkTI2oMHEICg3FIOZVGN81phnSfAUv7VcJ
5mKZTe6EQQhbGA==
-----END CERTIFICATE-----
Generated at Sun Jul 27 10:41:03 2025 by rpki-client