Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/7d2cb5-bddf-4201-baf8-1b24484e55ec/1/VEBNpgLasGJb5yI9CTILHNeq_O0.mft
File: VEBNpgLasGJb5yI9CTILHNeq_O0.mft (raw, json)
Hash identifier: BvtMsWvsAfpL7Qe3Iv+1fY1QAVSpic3h4MpxQvEZLRg=
Subject key identifier: 22:40:5E:8A:A8:A2:EF:E4:B6:7F:2E:71:3B:5C:B2:C0:14:10:C7:17
Authority key identifier: 54:40:4D:A6:02:DA:B0:62:5B:E7:22:3D:09:32:0B:1C:D7:AA:FC:ED
Certificate issuer: /CN=54404da602dab0625be7223d09320b1cd7aafced
Certificate serial: 019923A0F37CC4CCA4EC86164675153B7459
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VEBNpgLasGJb5yI9CTILHNeq_O0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/7d2cb5-bddf-4201-baf8-1b24484e55ec/1/VEBNpgLasGJb5yI9CTILHNeq_O0.mft
Manifest number: 1675
Signing time: Sun 07 Sep 2025 10:02:54 +0000
Manifest this update: Sun 07 Sep 2025 10:02:54 +0000
Manifest next update: Mon 08 Sep 2025 10:02:54 +0000
Files and hashes: 1: AVXIwLCLhIME5EnzGQR1npjdBLE.roa (hash: 1umjvWLRSMzW2RXwAqjP/wPqEKQLsMIeWrHdQp5MSFI=)
2: VEBNpgLasGJb5yI9CTILHNeq_O0.crl (hash: yGdFr/VnIxjGQBstq9R6ixYnK+yCmNjMmSCsUkMW1IA=)
3: alBKH0o_4kzhleiX69soFknJKkc.roa (hash: 0xl3ZFg/7Sno8/QF5nbiqzzuYWBqhpcMDwGXyIlAUiw=)
4: kVbSHrAHHzDssRXONUlwJ1GWoHU.roa (hash: mu0OOdtXupXjhLysliKeG+XZYEBhpCYVNN9APqeB6iQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/7d2cb5-bddf-4201-baf8-1b24484e55ec/1/VEBNpgLasGJb5yI9CTILHNeq_O0.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/7d2cb5-bddf-4201-baf8-1b24484e55ec/1/VEBNpgLasGJb5yI9CTILHNeq_O0.mft
rsync://rpki.ripe.net/repository/DEFAULT/VEBNpgLasGJb5yI9CTILHNeq_O0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:f3:7c:c4:cc:a4:ec:86:16:46:75:15:3b:74:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54404da602dab0625be7223d09320b1cd7aafced
Validity
Not Before: Sep 7 10:02:54 2025 GMT
Not After : Sep 8 10:02:54 2025 GMT
Subject: CN=22405e8aa8a2efe4b67f2e713b5cb2c01410c717
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:9f:89:0b:65:16:e9:6d:9e:b2:c8:e2:d3:95:
5f:ae:cd:7c:48:b8:20:fa:a0:bf:fc:05:fb:e4:34:
f6:b8:9a:c9:c6:8f:a3:a0:c1:d9:a6:c2:fc:7d:1a:
2e:92:ca:51:c2:3c:b1:d0:c2:a4:9e:33:64:28:19:
66:da:b4:81:63:3e:05:11:37:28:c3:00:94:3f:90:
47:df:13:6c:f3:b6:98:fd:b4:f9:29:98:46:b7:fe:
4e:01:e3:85:15:8c:cf:7c:52:d9:52:46:8d:8d:89:
81:90:94:d2:0c:58:2d:02:ff:10:41:5a:bf:54:12:
ab:53:a8:4a:be:73:39:e1:9c:97:04:a5:e9:3e:eb:
8d:6e:3a:d4:09:d3:3f:67:32:34:0b:c6:b2:28:aa:
3d:9b:8f:3a:81:45:32:5a:2a:e0:3f:c2:09:80:27:
21:6e:6b:f2:93:b5:4a:2e:60:6a:8b:81:4d:49:9f:
38:b8:f5:98:14:d2:cc:ae:b7:ff:e5:af:3f:ea:fe:
e7:f9:be:b1:4a:83:85:51:a7:a5:e9:da:ad:04:08:
22:14:6a:5f:07:8f:83:d3:98:59:e5:f2:fe:69:27:
a1:d0:36:d7:bb:cb:e9:1f:d8:63:ab:57:91:b7:9b:
93:59:d0:6d:01:22:67:2f:c9:63:18:1d:57:34:95:
c4:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:40:5E:8A:A8:A2:EF:E4:B6:7F:2E:71:3B:5C:B2:C0:14:10:C7:17
X509v3 Authority Key Identifier:
keyid:54:40:4D:A6:02:DA:B0:62:5B:E7:22:3D:09:32:0B:1C:D7:AA:FC:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VEBNpgLasGJb5yI9CTILHNeq_O0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/7d2cb5-bddf-4201-baf8-1b24484e55ec/1/VEBNpgLasGJb5yI9CTILHNeq_O0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/7d2cb5-bddf-4201-baf8-1b24484e55ec/1/VEBNpgLasGJb5yI9CTILHNeq_O0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:b7:e5:19:ac:53:e3:d0:82:f6:24:ee:75:6d:01:50:de:8c:
90:10:e2:7c:bb:a9:87:a2:08:d4:e2:56:71:51:69:bb:b8:bc:
27:a0:6c:c2:e9:60:a1:1d:48:0a:a1:ed:f8:81:a9:17:38:c6:
b0:05:05:4c:c1:a7:9d:93:28:d4:4c:5a:c2:30:4b:18:0a:61:
0c:5e:9c:c3:3b:fb:fc:fe:63:ef:fa:2f:a9:e5:34:5d:e1:41:
55:7c:09:b3:f8:69:4a:52:6f:4b:0a:dc:84:53:bd:db:bb:c4:
47:3a:e2:04:7b:8c:3e:68:13:63:99:7c:c6:05:23:d7:18:9c:
55:53:d6:a6:6b:16:4c:01:3c:d7:58:a5:48:30:79:e6:e4:72:
d6:ce:7b:7f:6a:50:34:a6:37:b6:1c:32:76:39:25:7b:85:99:
82:e2:37:da:3e:b9:10:76:81:c5:5a:73:62:a9:57:f5:c0:89:
a8:1f:39:6a:44:ce:b3:f1:fd:f5:ae:0f:fa:a7:8f:61:22:a8:
f4:2b:75:56:06:aa:52:9a:40:6c:74:23:56:5e:b7:03:69:74:
f5:36:51:35:bb:8f:6c:29:a7:79:f7:2a:77:0a:12:ee:21:de:
a6:1e:bc:e9:18:9e:6c:ce:3c:53:0a:2a:fb:c1:e3:00:ed:1d:
48:c6:f2:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:35:38 2025 by rpki-client