Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.mft
File: vCYT4PJtOQfwljQL4FDCAdNY1tU.mft (raw, json)
Hash identifier: AnFQhfQNEfYpsnOJIU+MmLPptJMKNHaCeJSkg7bjAn8=
Subject key identifier: B2:23:61:72:52:0A:F8:DB:9C:37:00:CE:10:0F:D1:1A:92:54:D3:D4
Authority key identifier: BC:26:13:E0:F2:6D:39:07:F0:96:34:0B:E0:50:C2:01:D3:58:D6:D5
Certificate issuer: /CN=bc2613e0f26d3907f096340be050c201d358d6d5
Certificate serial: 0199228D23F5A4BD4CDCCD2E704590B89A47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vCYT4PJtOQfwljQL4FDCAdNY1tU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.mft
Manifest number: 0329
Signing time: Sun 07 Sep 2025 05:01:39 +0000
Manifest this update: Sun 07 Sep 2025 05:01:39 +0000
Manifest next update: Mon 08 Sep 2025 05:01:39 +0000
Files and hashes: 1: urJ49fIkD8qF9GsD_zFu82_16aQ.roa (hash: CgkfZ2tObyCZ5wcx0o7Zqg/j5Bh2RYB4YUbPkk96BQA=)
2: vCYT4PJtOQfwljQL4FDCAdNY1tU.crl (hash: 5MT+4aM7HHzwSbJab68ckmwldln6QBKRNwY7Ci2aHHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vCYT4PJtOQfwljQL4FDCAdNY1tU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8d:23:f5:a4:bd:4c:dc:cd:2e:70:45:90:b8:9a:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc2613e0f26d3907f096340be050c201d358d6d5
Validity
Not Before: Sep 7 05:01:39 2025 GMT
Not After : Sep 8 05:01:39 2025 GMT
Subject: CN=b2236172520af8db9c3700ce100fd11a9254d3d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:90:4f:97:3e:b9:42:3d:23:27:ca:c7:77:9d:
b0:84:b1:6b:f6:77:21:21:e8:44:fd:be:63:7a:b5:
a0:7f:bb:78:07:98:07:54:fc:0c:cc:77:c0:39:0f:
f2:5f:ff:ae:14:3a:10:96:a0:cd:64:ff:34:47:ad:
e6:ee:46:ed:23:b0:85:28:00:54:d5:9f:ae:dc:58:
42:c8:58:11:3c:a8:40:47:15:1c:16:23:79:89:d4:
19:d6:32:51:57:77:b0:72:3f:aa:97:01:7f:9d:e2:
4c:d9:26:14:15:f8:19:6c:5e:33:2b:4c:3c:b7:c9:
11:ec:c0:6c:af:a3:03:80:00:13:79:96:1d:cb:ec:
e2:59:fc:47:48:c8:e4:5e:6a:e9:96:8f:0f:93:52:
2e:16:48:eb:6b:16:35:88:4a:c3:e3:d0:fc:0a:a2:
b1:22:98:57:58:c3:4f:e4:1c:e3:fe:01:0b:44:da:
84:ae:a4:8b:27:69:1a:5c:bf:0e:85:64:b4:49:63:
b2:84:f8:e4:79:d6:3b:c4:c3:54:3d:66:22:4b:05:
36:a8:95:5c:9f:a6:53:81:30:a8:d0:ee:4b:2a:8e:
06:82:cd:d3:11:1a:2b:f6:4f:88:bd:61:85:6d:fe:
78:ca:9f:6d:80:24:cd:d7:28:45:f9:a5:3d:eb:22:
c9:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:23:61:72:52:0A:F8:DB:9C:37:00:CE:10:0F:D1:1A:92:54:D3:D4
X509v3 Authority Key Identifier:
keyid:BC:26:13:E0:F2:6D:39:07:F0:96:34:0B:E0:50:C2:01:D3:58:D6:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vCYT4PJtOQfwljQL4FDCAdNY1tU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:f6:2a:2f:73:b6:1c:82:a2:84:87:dc:c4:89:8e:4e:6b:01:
cb:c8:1d:ab:a7:ee:5c:f7:3b:35:43:e6:c8:b7:d8:ed:27:30:
28:76:ad:f7:52:bb:67:5f:ad:08:46:07:a1:32:48:0a:ae:9e:
d3:c4:2c:0e:c6:9d:1f:6e:a0:67:ee:6b:06:d2:71:90:53:a3:
eb:4f:96:1b:aa:af:9a:ef:7d:6c:93:b3:0a:d5:6b:a0:2d:05:
d6:2a:cd:8b:92:2c:4f:3d:48:e3:c5:0e:43:dd:02:d2:5e:0a:
e6:be:f5:8f:e3:cf:6f:47:63:83:80:82:ad:bd:1c:a4:d2:20:
a0:cf:43:75:0a:2c:e0:ce:77:21:6f:de:f1:20:5f:d6:1d:c3:
b6:30:1c:ff:d7:e5:36:f6:f8:6a:b3:9e:06:19:b2:e4:7f:2b:
3f:37:a5:78:ac:a0:a3:fe:4f:8a:2a:22:10:e3:2d:b4:d9:ac:
b3:c5:45:40:6b:75:a6:ec:e7:16:9c:7f:9b:52:54:a3:55:d2:
d3:80:2c:a0:7c:22:ee:2e:ae:7d:b9:fc:ca:ac:f1:f8:ba:60:
8d:f6:26:13:08:5f:d2:84:ce:af:e8:cb:a0:fb:a1:6e:44:1b:
81:30:6c:17:f9:39:ee:1f:dd:d1:0e:bd:43:27:6c:c3:82:61:
ea:61:ac:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:38:38 2025 by rpki-client