
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/754af9-78df-4bd1-b480-527c81958649/1/Vr1_at_sbUTRbT4_eY4_K9INo_8.mft
File: Vr1_at_sbUTRbT4_eY4_K9INo_8.mft (raw, json)
Hash identifier: RsbEpI4Jm+taIH7c8Hos3t7E78LW6faxwqD3XcjpxI0=
Subject key identifier: 0D:F3:96:F9:9F:E2:35:37:56:71:14:73:1F:47:BF:23:E0:52:36:86
Authority key identifier: 56:BD:7F:6A:DF:EC:6D:44:D1:6D:3E:3F:79:8E:3F:2B:D2:0D:A3:FF
Certificate issuer: /CN=56bd7f6adfec6d44d16d3e3f798e3f2bd20da3ff
Certificate serial: 01991A2DF3D1A35DE6460CBCAAE9DEF4506E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vr1_at_sbUTRbT4_eY4_K9INo_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/754af9-78df-4bd1-b480-527c81958649/1/Vr1_at_sbUTRbT4_eY4_K9INo_8.mft
Manifest number: 166D
Signing time: Fri 05 Sep 2025 14:00:43 +0000
Manifest this update: Fri 05 Sep 2025 14:00:43 +0000
Manifest next update: Sat 06 Sep 2025 14:00:43 +0000
Files and hashes: 1: 1-uUqLBRi2l8Qom0YXKGFyiE_52s.roa (hash: 6O0uoZsxwqn/ZRSGGUR/YkC5bDCXgCwLU9wV4dkd6Ng=)
2: Vr1_at_sbUTRbT4_eY4_K9INo_8.crl (hash: TNdFvonWT/M9tf/81CKSHyhPXrn50xv0hyftvGhLRo8=)
3: Yhyd6_3--40XbUHLiYyj2qr-Yoc.roa (hash: 1oOXBnBBaEwXQlaBh7+MdVkKyYQvik1W61cIDXTDdBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/754af9-78df-4bd1-b480-527c81958649/1/Vr1_at_sbUTRbT4_eY4_K9INo_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/754af9-78df-4bd1-b480-527c81958649/1/Vr1_at_sbUTRbT4_eY4_K9INo_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vr1_at_sbUTRbT4_eY4_K9INo_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 10:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:1a:2d:f3:d1:a3:5d:e6:46:0c:bc:aa:e9:de:f4:50:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56bd7f6adfec6d44d16d3e3f798e3f2bd20da3ff
Validity
Not Before: Sep 5 14:00:43 2025 GMT
Not After : Sep 6 14:00:43 2025 GMT
Subject: CN=0df396f99fe23537567114731f47bf23e0523686
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:cb:49:34:f9:99:92:eb:29:30:ff:97:70:7f:
b7:d6:f3:e6:42:bb:62:2f:f2:f4:ba:13:60:47:92:
00:e5:0b:5c:ff:b0:1b:58:c6:21:d2:c6:57:18:da:
27:1c:26:1c:87:79:61:eb:cd:46:90:d3:0f:81:ef:
28:03:58:d5:3a:37:46:88:8a:af:20:e0:7e:e3:34:
ab:0b:6b:50:9a:5a:87:b4:af:2e:e9:b6:d3:75:67:
4a:37:07:e0:2c:c3:43:0a:62:5a:04:1a:e2:f0:66:
51:58:c7:ab:ab:78:70:85:18:02:b8:72:3d:89:62:
60:b2:21:03:29:5f:28:16:e3:95:b7:2e:25:55:2a:
71:42:f9:dc:c4:b5:43:ac:14:e0:7b:54:bd:f8:14:
57:a8:2c:f6:18:2f:ec:12:a6:d0:25:78:82:79:77:
3f:75:e7:51:16:dc:cd:07:6a:49:5a:ba:74:23:55:
ae:62:17:42:11:74:ac:a9:0b:6b:d5:09:b9:d1:84:
65:98:9a:c4:86:3e:b7:4a:4d:2f:c6:3b:7f:21:85:
4d:f4:ef:44:ad:8d:d3:a6:18:06:1c:a7:0e:5b:69:
2a:e9:cd:0a:b1:cb:9e:5a:7c:ae:f9:6a:7d:2b:f4:
ab:10:f0:fb:0a:01:af:6a:7c:48:9d:13:e3:33:e5:
76:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:F3:96:F9:9F:E2:35:37:56:71:14:73:1F:47:BF:23:E0:52:36:86
X509v3 Authority Key Identifier:
keyid:56:BD:7F:6A:DF:EC:6D:44:D1:6D:3E:3F:79:8E:3F:2B:D2:0D:A3:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vr1_at_sbUTRbT4_eY4_K9INo_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/754af9-78df-4bd1-b480-527c81958649/1/Vr1_at_sbUTRbT4_eY4_K9INo_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/754af9-78df-4bd1-b480-527c81958649/1/Vr1_at_sbUTRbT4_eY4_K9INo_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:7d:a3:6d:c3:d3:d2:b0:73:d4:b7:4b:13:47:e3:02:3a:48:
34:ac:73:d5:e6:66:f7:20:df:0e:c2:71:17:c1:b3:63:18:e7:
f5:e1:ab:18:88:90:ef:57:19:2c:ad:d1:7e:fc:39:98:6b:f8:
34:ec:fe:58:bd:66:28:56:95:41:5a:56:df:cb:ec:a2:c5:88:
57:18:df:64:03:ad:90:22:82:74:1e:ff:a3:57:d2:91:f3:09:
9a:bd:bb:c3:e7:fd:f3:ed:79:3f:8c:25:ba:10:bf:89:9d:5a:
bc:76:54:51:43:68:f4:c0:21:ac:8e:3d:aa:55:90:a6:c9:e8:
d0:63:b4:83:6f:66:06:75:e2:d5:53:28:b4:9c:a1:54:82:f1:
ed:70:3e:6b:ea:e4:6e:dc:49:1a:69:3f:fc:8d:6d:da:76:58:
b2:e0:1f:61:c1:91:b3:62:a1:b2:ac:4f:53:b6:7c:6e:9d:d1:
35:66:b5:15:f1:1a:4c:9c:f2:61:6d:6d:f0:3e:48:fc:32:f7:
5b:9e:60:88:a8:c4:a0:ee:43:e2:46:2e:38:2b:76:9a:db:e4:
26:2f:69:44:49:a3:f2:9c:df:74:f7:a7:ee:b6:4c:88:9f:0e:
de:0d:12:4f:c4:23:ab:fd:ec:5e:4f:d9:5e:2a:eb:c2:e6:71:
30:62:fb:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 19:08:16 2025 by rpki-client