Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/833aa2-af04-4f10-a167-6acd86686e85/1/vyk4WQ4NABlyVmLUtK5Myew6c00.mft
File: vyk4WQ4NABlyVmLUtK5Myew6c00.mft (raw, json)
Hash identifier: UJuo+dd2zjhLIl8wDCke/Rpw7+gYxn5kqS4C94qx1zg=
Subject key identifier: 82:E3:83:3F:7C:4C:AB:2F:F5:9B:49:91:4D:9B:54:40:9C:BC:CA:8E
Authority key identifier: BF:29:38:59:0E:0D:00:19:72:56:62:D4:B4:AE:4C:C9:EC:3A:73:4D
Certificate issuer: /CN=bf2938590e0d0019725662d4b4ae4cc9ec3a734d
Certificate serial: 019923D5F6510615EB852EAEB0F5E1D51D5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vyk4WQ4NABlyVmLUtK5Myew6c00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/833aa2-af04-4f10-a167-6acd86686e85/1/vyk4WQ4NABlyVmLUtK5Myew6c00.mft
Manifest number: 0911
Signing time: Sun 07 Sep 2025 11:00:48 +0000
Manifest this update: Sun 07 Sep 2025 11:00:48 +0000
Manifest next update: Mon 08 Sep 2025 11:00:48 +0000
Files and hashes: 1: vQtF-L-9ooOZxF-UCZufP97_4Tk.roa (hash: uZu5EdE4zrTNj+JjaQISrCgWGaWpGkfUNjvMVUEKljA=)
2: vyk4WQ4NABlyVmLUtK5Myew6c00.crl (hash: 2Po7IKgclEE5jjfQh11kqFzmA713JcgUEtxcc41San4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/833aa2-af04-4f10-a167-6acd86686e85/1/vyk4WQ4NABlyVmLUtK5Myew6c00.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/833aa2-af04-4f10-a167-6acd86686e85/1/vyk4WQ4NABlyVmLUtK5Myew6c00.mft
rsync://rpki.ripe.net/repository/DEFAULT/vyk4WQ4NABlyVmLUtK5Myew6c00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:d5:f6:51:06:15:eb:85:2e:ae:b0:f5:e1:d5:1d:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf2938590e0d0019725662d4b4ae4cc9ec3a734d
Validity
Not Before: Sep 7 11:00:48 2025 GMT
Not After : Sep 8 11:00:48 2025 GMT
Subject: CN=82e3833f7c4cab2ff59b49914d9b54409cbcca8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:46:81:08:0f:cc:ef:79:5c:33:5b:8d:e0:59:
b0:32:3f:be:36:59:98:88:fa:62:b1:de:db:d9:65:
a1:7b:d2:c2:f1:19:2e:7e:12:6d:42:02:79:8f:43:
23:77:39:73:d1:84:c0:c1:05:1b:74:11:87:5b:10:
44:2a:4e:2f:c7:ce:e1:8f:bb:06:58:7d:d1:87:90:
c0:b4:42:54:85:10:30:fd:5f:52:13:c5:49:1f:80:
2c:f8:df:b6:67:e5:5b:a5:9c:79:c2:25:7d:2b:d5:
01:b4:0b:cf:7c:57:a7:a6:98:bc:f5:b3:4d:35:9b:
0f:e2:c8:0c:0e:2c:f5:be:ce:2a:8a:61:53:c6:97:
7d:24:63:91:ae:12:9e:b7:4e:85:61:3e:35:b0:f9:
24:c2:35:c3:da:30:87:05:04:76:e5:c0:f7:d4:61:
36:09:73:9a:96:db:d8:40:f6:83:08:01:03:d7:a7:
e6:f5:cc:42:2c:4a:18:c3:b4:27:29:fd:2d:a9:a8:
d4:0f:17:ae:dd:af:cd:2d:32:30:da:31:31:8a:25:
83:9c:49:b6:85:1d:c4:15:ac:90:dc:ea:6b:66:05:
af:3e:10:0f:3c:f9:f0:a0:04:5a:d9:56:2e:c9:ab:
c8:47:ba:d3:a2:23:cf:4b:22:24:79:cd:09:7c:a2:
96:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:E3:83:3F:7C:4C:AB:2F:F5:9B:49:91:4D:9B:54:40:9C:BC:CA:8E
X509v3 Authority Key Identifier:
keyid:BF:29:38:59:0E:0D:00:19:72:56:62:D4:B4:AE:4C:C9:EC:3A:73:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vyk4WQ4NABlyVmLUtK5Myew6c00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/833aa2-af04-4f10-a167-6acd86686e85/1/vyk4WQ4NABlyVmLUtK5Myew6c00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/833aa2-af04-4f10-a167-6acd86686e85/1/vyk4WQ4NABlyVmLUtK5Myew6c00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:3f:19:14:27:39:e5:ec:10:93:8d:16:4f:67:50:ed:7f:40:
b1:db:6f:ef:ac:70:a6:19:ad:28:eb:fb:39:38:71:ab:90:ca:
d3:81:53:a7:13:34:ae:3c:56:4b:07:12:cb:34:03:c4:0f:39:
a5:dd:ba:29:3d:1c:1b:df:20:7f:b9:f7:87:10:80:b9:5b:31:
c6:3f:52:09:98:62:95:e6:fa:49:72:b8:2f:cd:4e:64:b1:43:
ff:c9:8f:ec:68:ae:f3:62:f3:df:4e:91:70:60:a5:fe:ae:37:
41:bb:a7:bf:ed:f4:75:be:da:94:a9:f4:01:4a:1e:9d:ce:54:
73:c2:3a:82:4b:32:6e:b6:4d:65:54:51:84:59:21:86:7a:67:
76:1a:89:17:a3:32:a8:d5:0a:ea:4f:48:7c:33:ff:b1:6e:ac:
26:91:37:53:94:f2:2e:ac:62:a3:98:65:e9:3c:99:de:92:40:
d3:f9:0c:53:5e:5e:08:d4:9d:bd:b4:ad:76:f7:60:7b:13:d4:
3d:82:19:61:54:14:30:77:3c:bc:61:48:06:2b:7b:47:65:8a:
d5:4f:52:59:c2:92:ed:89:8b:f9:36:ea:20:13:26:10:1e:29:
e8:68:93:e1:e6:c9:cc:50:a9:08:62:9b:6a:f0:ef:1e:72:b0:
ea:54:53:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:20:26 2025 by rpki-client