Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/a0d73d-6564-4142-a6ee-83e73cb25ea5/1/vE4hsn1vhOvdiIxo55zlVchG2ss.mft
File: vE4hsn1vhOvdiIxo55zlVchG2ss.mft (raw, json)
Hash identifier: unCdXAXBwkOFaYiYnTLleaKNgLVsFduYw2G2K2KWtu0=
Subject key identifier: 95:55:C7:6B:FB:74:2F:79:47:C7:51:79:CF:81:13:34:51:40:01:86
Authority key identifier: BC:4E:21:B2:7D:6F:84:EB:DD:88:8C:68:E7:9C:E5:55:C8:46:DA:CB
Certificate issuer: /CN=bc4e21b27d6f84ebdd888c68e79ce555c846dacb
Certificate serial: 01984A418A7580B3A3F0DA5234F66C1AFEF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vE4hsn1vhOvdiIxo55zlVchG2ss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/a0d73d-6564-4142-a6ee-83e73cb25ea5/1/vE4hsn1vhOvdiIxo55zlVchG2ss.mft
Manifest number: 1603
Signing time: Sun 27 Jul 2025 05:01:05 +0000
Manifest this update: Sun 27 Jul 2025 05:01:05 +0000
Manifest next update: Mon 28 Jul 2025 05:01:05 +0000
Files and hashes: 1: F3kOmnX-kEtjSilXO2Pe0L_37Jo.roa (hash: lIJ2C488mP6Ma0OF6csW3I8GzUd4jiMp8CCjsO6b5Eg=)
2: Po0728QWErCTmXCeFPKP0UlTEug.roa (hash: IpBaviswNtBt65qOWaQEl9AqBmhUCEIpYlrqfl+L76A=)
3: vE4hsn1vhOvdiIxo55zlVchG2ss.crl (hash: A6iyOdOBNpuyFvMEQ5fXmNUGZYk0bOhth+aLTZi9ZUY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/a0d73d-6564-4142-a6ee-83e73cb25ea5/1/vE4hsn1vhOvdiIxo55zlVchG2ss.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/a0d73d-6564-4142-a6ee-83e73cb25ea5/1/vE4hsn1vhOvdiIxo55zlVchG2ss.mft
rsync://rpki.ripe.net/repository/DEFAULT/vE4hsn1vhOvdiIxo55zlVchG2ss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:8a:75:80:b3:a3:f0:da:52:34:f6:6c:1a:fe:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc4e21b27d6f84ebdd888c68e79ce555c846dacb
Validity
Not Before: Jul 27 05:01:05 2025 GMT
Not After : Jul 28 05:01:05 2025 GMT
Subject: CN=9555c76bfb742f7947c75179cf81133451400186
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:e9:f8:83:3c:5e:a5:ff:82:b2:2e:1d:45:1c:
c5:23:0a:cf:77:99:df:68:14:8b:8c:92:8f:ca:bc:
27:fb:73:7a:b4:db:51:ee:09:71:42:f6:62:fb:1e:
11:6d:d3:cb:8f:15:36:80:dd:45:a8:56:30:ec:ac:
71:1e:c6:fc:68:2a:e8:5a:35:f1:9f:24:a8:d6:58:
ec:11:cf:af:37:8d:58:b1:b9:1a:a7:32:64:7f:82:
c4:cd:c4:9c:ac:73:58:0b:6e:91:5a:ac:b8:c9:20:
59:7b:96:6a:9e:de:81:a5:e8:24:24:10:67:50:b5:
7f:6f:ce:ed:4c:4a:4a:75:6d:7d:37:9e:25:b0:56:
f5:1d:f7:68:b8:e3:13:8b:6c:51:b6:38:3f:3d:ab:
31:ba:13:c4:a5:9a:8e:aa:3f:65:51:67:b9:d1:11:
b8:a0:ab:01:4b:d1:ea:d7:02:ad:09:73:12:8b:67:
30:af:ee:2d:09:87:84:34:d1:bc:8d:46:e1:80:90:
fd:0e:45:aa:ee:cf:c7:32:e2:d5:7a:43:e8:5b:a1:
91:22:48:ad:d0:83:8b:0f:fd:48:23:2b:2f:f4:9f:
2d:39:ad:db:1e:50:68:ac:61:e3:03:92:a4:d9:03:
b1:8a:03:4c:61:90:26:21:ca:2e:8f:05:e6:2f:51:
1a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:55:C7:6B:FB:74:2F:79:47:C7:51:79:CF:81:13:34:51:40:01:86
X509v3 Authority Key Identifier:
keyid:BC:4E:21:B2:7D:6F:84:EB:DD:88:8C:68:E7:9C:E5:55:C8:46:DA:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vE4hsn1vhOvdiIxo55zlVchG2ss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/a0d73d-6564-4142-a6ee-83e73cb25ea5/1/vE4hsn1vhOvdiIxo55zlVchG2ss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/a0d73d-6564-4142-a6ee-83e73cb25ea5/1/vE4hsn1vhOvdiIxo55zlVchG2ss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:da:ee:00:20:aa:76:4c:03:c3:50:42:11:4a:95:8e:5f:b5:
54:5e:8d:92:2a:6f:25:84:99:fe:af:1f:01:c5:af:1d:83:92:
28:21:96:75:fe:a4:d4:69:05:e0:d9:88:f0:0f:07:0e:c6:fa:
c4:4e:1f:db:29:be:18:33:a5:06:90:b3:87:db:8e:57:1f:30:
e5:7b:61:69:41:74:e3:16:42:4b:25:3d:b7:87:b4:50:6b:4a:
20:45:bf:64:6a:de:cf:bc:52:b7:69:99:50:72:a8:b3:ed:53:
17:b4:f4:3c:74:0b:d5:a0:91:f1:6e:c1:32:6e:7b:1d:c3:f7:
88:cb:28:8b:8e:dd:ed:ad:6e:19:24:0e:a9:ab:32:62:c5:08:
e0:57:53:56:a6:52:84:01:d1:d3:74:e3:c1:e5:a3:24:d7:f5:
83:e4:c2:36:7a:85:23:e4:d8:4b:6b:55:fd:c1:e7:89:45:9a:
ef:d1:bb:f5:1a:b9:84:91:30:56:c4:bc:5d:d6:09:3d:59:7d:
37:e1:5e:fb:79:c8:d1:04:bf:3e:b5:4b:e7:0e:33:f0:ba:ca:
fd:95:d2:28:1c:e1:b8:70:c3:51:89:dd:ef:96:c2:10:5f:14:
e4:06:cb:45:2e:f8:f9:b2:81:11:2c:6b:e2:dc:54:49:07:67:
97:0d:8c:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 06:16:24 2025 by rpki-client