Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.mft
File: VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.mft (raw, json)
Hash identifier: tiNMmb49SuOdriBOTAjhGTt74W304ikYD2xE2Jlda9Q=
Subject key identifier: A1:88:59:B1:9B:71:52:EE:D5:72:30:D7:17:52:0A:34:F9:E5:8C:E1
Authority key identifier: 57:13:0F:79:9F:8A:89:85:50:2A:2E:A3:35:60:37:67:40:85:CF:CA
Certificate issuer: /CN=57130f799f8a8985502a2ea3356037674085cfca
Certificate serial: 019916BEFB52E637BE9F2EBF11CE935113A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.mft
Manifest number: 1673
Signing time: Thu 04 Sep 2025 22:00:38 +0000
Manifest this update: Thu 04 Sep 2025 22:00:38 +0000
Manifest next update: Fri 05 Sep 2025 22:00:38 +0000
Files and hashes: 1: 0cSnkMJkJHeFaYdY1KT0ScO6smc.roa (hash: Gcz0UPXLhZmjDb4FihMibqoJMQnP847xcHc8Qvl5GWc=)
2: 10H4MUNhSSva047O9EEp6SPRBJE.roa (hash: JmvtAf/+biHEI+go7XB/O90LiW31KmrT39neQ8bWDTc=)
3: 78KScp2LVWw2hOVmr_h_Gkcv34A.roa (hash: Ptq/z1pA4OnP8t08S5vn7Az3pzr/nZN/5vkEHzVtW1s=)
4: GhEBs7fMOUU2KjePNnbULHKRHoA.roa (hash: Dow24ARSNfhxgpUv5NrsgvZFPFxhNN0Fkn5hgDvl4wg=)
5: H9Yj6XrfYViqOy5X6VeUZJTi5tI.roa (hash: 4orcq82HkX9/XUoOT4IA7nH/E15MI2gX+xqdM0ifFYg=)
6: VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.crl (hash: hhM2PFw8mdTj5R7PZf+DKUcw0zR13V6lCIOYhiybIAg=)
7: tkuxtWzbusmwWQub2z4rjkdwXdc.roa (hash: JTVZbUmozTnvdMYKVuksSNIaPHfDAOZ4PEG/FbAO7wg=)
8: wPqYVNKJADvVgGucnETD7HuiSvs.roa (hash: 0eyTJy9gG8F8Xex/RtpsLoJCxS1EJ4y1hxoKVvkvOZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Sep 2025 22:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:16:be:fb:52:e6:37:be:9f:2e:bf:11:ce:93:51:13:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57130f799f8a8985502a2ea3356037674085cfca
Validity
Not Before: Sep 4 22:00:38 2025 GMT
Not After : Sep 5 22:00:38 2025 GMT
Subject: CN=a18859b19b7152eed57230d717520a34f9e58ce1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8f:d6:69:86:b0:31:1c:cb:54:65:d7:e1:15:
23:ec:05:70:53:40:d6:89:3e:e7:e8:2b:74:e9:6d:
69:82:7a:0e:17:32:23:71:ff:bd:52:0d:f3:83:b6:
85:2f:de:e6:64:56:c9:86:bf:89:48:3e:f7:a8:f5:
27:fa:a1:6d:b3:ae:85:76:42:50:64:60:96:dc:a5:
90:dc:9c:5f:8b:02:de:c9:5a:bd:56:e9:36:d5:cb:
ca:04:67:21:b6:13:c0:19:3f:34:da:43:ea:8e:b2:
1f:f1:53:b3:7a:6c:04:5c:56:f6:2b:62:9d:27:72:
a9:6a:c5:45:dc:6f:10:d2:1c:69:06:f1:5c:3e:74:
56:b0:79:0d:a1:c3:67:8a:d0:ae:85:ce:ac:00:a8:
b8:6b:26:51:9a:17:77:45:74:b6:1a:1b:5d:5d:b5:
a8:00:e8:c9:f9:87:fd:ae:ec:63:af:45:52:da:8e:
3e:c9:5a:42:dd:81:fc:b4:38:f6:68:61:cc:6e:f7:
e7:a1:2a:c3:80:b6:48:eb:32:11:da:93:d3:ec:ce:
54:f9:09:91:c2:66:1a:30:02:ab:cf:9c:a6:10:54:
53:75:d3:aa:5c:d0:eb:45:b9:c2:33:f7:94:a1:76:
3b:2c:b4:5b:29:f7:72:dd:46:d1:ba:93:c0:65:5d:
00:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:88:59:B1:9B:71:52:EE:D5:72:30:D7:17:52:0A:34:F9:E5:8C:E1
X509v3 Authority Key Identifier:
keyid:57:13:0F:79:9F:8A:89:85:50:2A:2E:A3:35:60:37:67:40:85:CF:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:11:cb:0f:62:1a:74:77:f0:3a:e1:21:2c:b1:f4:95:1e:f0:
d4:99:f6:07:2b:c0:37:79:bf:43:32:05:2b:96:3e:b3:6b:a0:
03:45:7f:6c:be:96:86:3c:8a:37:79:43:c7:06:df:ba:a5:31:
f3:73:59:17:ec:0a:97:58:2a:38:b9:ce:ff:b3:3a:14:0e:47:
4e:39:eb:74:a6:21:ce:f7:b0:be:56:8e:11:7d:31:39:4e:89:
20:54:da:f4:af:fc:18:2f:64:51:ce:d0:56:ac:04:e5:fc:01:
6c:5e:61:4c:35:80:d6:6c:bb:ec:53:ea:47:b3:70:33:4a:eb:
e2:3d:5b:65:ad:e1:8a:09:a3:58:8d:48:46:07:58:da:2c:44:
cc:f4:bb:3c:f1:ae:38:08:24:b5:72:64:90:e7:64:93:f2:76:
83:f1:15:81:a3:c8:89:28:7f:8f:42:4a:cb:18:c8:9d:59:45:
30:4e:e9:d1:c3:41:fd:c7:e0:ae:88:8b:1c:6e:c8:2c:5e:70:
18:a5:66:e0:ad:c2:b6:fb:31:94:39:1c:50:83:71:8c:af:f5:
54:9e:62:68:09:31:c3:1d:5b:44:fd:09:cf:87:87:12:25:1f:
70:89:63:22:73:43:ad:aa:d4:b2:b1:89:46:bf:b4:d0:4c:b1:
09:c4:d8:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 07:34:05 2025 by rpki-client