Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/714a8d-8cbc-48d0-8156-d8084733e980/1/Vjdt7xIkg5phE9HQzdOYEE-q8vs.mft
File: Vjdt7xIkg5phE9HQzdOYEE-q8vs.mft (raw, json)
Hash identifier: DQ3uE7k65j0HjljOGXoCX32XVPPHgP3H81PTDOmAJjM=
Subject key identifier: 47:6B:41:00:3F:38:73:59:35:5F:AD:7D:BA:3B:D3:93:16:95:1E:CB
Authority key identifier: 56:37:6D:EF:12:24:83:9A:61:13:D1:D0:CD:D3:98:10:4F:AA:F2:FB
Certificate issuer: /CN=56376def1224839a6113d1d0cdd398104faaf2fb
Certificate serial: 019923A0F88B6689B4D33F655390C4990AB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vjdt7xIkg5phE9HQzdOYEE-q8vs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/714a8d-8cbc-48d0-8156-d8084733e980/1/Vjdt7xIkg5phE9HQzdOYEE-q8vs.mft
Manifest number: 04EC
Signing time: Sun 07 Sep 2025 10:02:55 +0000
Manifest this update: Sun 07 Sep 2025 10:02:55 +0000
Manifest next update: Mon 08 Sep 2025 10:02:55 +0000
Files and hashes: 1: 8YyDmxndvd6azClM9JTsxIv2kz0.roa (hash: 0fvpyn3lFxp2N7HhgqqjnRwit9mrT13M79B8b6kGTr4=)
2: Vjdt7xIkg5phE9HQzdOYEE-q8vs.crl (hash: a+EKRgPgbscOFC0+b8zRwTDhHb7M7EqvEma4sJXVJr0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/714a8d-8cbc-48d0-8156-d8084733e980/1/Vjdt7xIkg5phE9HQzdOYEE-q8vs.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/714a8d-8cbc-48d0-8156-d8084733e980/1/Vjdt7xIkg5phE9HQzdOYEE-q8vs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vjdt7xIkg5phE9HQzdOYEE-q8vs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:f8:8b:66:89:b4:d3:3f:65:53:90:c4:99:0a:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56376def1224839a6113d1d0cdd398104faaf2fb
Validity
Not Before: Sep 7 10:02:55 2025 GMT
Not After : Sep 8 10:02:55 2025 GMT
Subject: CN=476b41003f387359355fad7dba3bd39316951ecb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:b0:24:b1:9c:5b:5b:44:4f:4c:c6:2f:ae:5e:
78:cb:17:f6:f4:b0:a3:78:5c:7d:45:0b:e6:9d:6d:
fe:9f:03:f5:d1:d8:28:34:d7:a2:c9:40:bf:64:82:
11:89:a1:1c:2e:e9:e5:b5:ee:76:9b:ff:ad:54:79:
01:d8:dd:ed:40:2e:0f:6c:01:c9:8e:3a:e2:33:90:
95:a3:21:d5:3e:a2:a5:a0:88:3b:81:d4:f0:ed:15:
05:40:e7:8a:8a:87:81:8f:79:33:13:ec:0d:86:c2:
42:50:91:3d:5b:c9:90:48:a9:34:4b:a2:56:89:43:
3f:97:78:9e:06:92:7e:2d:9d:3e:42:c2:ad:da:8a:
b9:1b:1d:c8:11:cc:2d:05:a5:ed:2d:14:8d:59:0e:
33:11:8f:32:6c:35:27:42:81:49:62:13:93:7b:a1:
9f:d4:f0:78:7e:3d:81:8a:26:fd:ef:56:32:c4:83:
b4:b0:9d:e2:e4:13:0f:ff:c2:e4:a4:71:d4:5c:28:
dd:e3:08:29:dd:10:ed:8a:93:92:c4:3f:8a:d7:8c:
80:5c:db:cf:b6:97:be:59:4b:2d:3d:1d:47:e2:e8:
48:34:e0:61:bb:00:46:1e:1d:16:6b:d7:9c:14:01:
27:9f:ef:8b:fe:45:4d:6f:ee:13:41:f4:a9:69:d3:
47:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:6B:41:00:3F:38:73:59:35:5F:AD:7D:BA:3B:D3:93:16:95:1E:CB
X509v3 Authority Key Identifier:
keyid:56:37:6D:EF:12:24:83:9A:61:13:D1:D0:CD:D3:98:10:4F:AA:F2:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vjdt7xIkg5phE9HQzdOYEE-q8vs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/714a8d-8cbc-48d0-8156-d8084733e980/1/Vjdt7xIkg5phE9HQzdOYEE-q8vs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/714a8d-8cbc-48d0-8156-d8084733e980/1/Vjdt7xIkg5phE9HQzdOYEE-q8vs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:e3:67:d4:96:b5:70:5f:1a:b1:34:48:ab:53:89:cb:b8:1f:
4a:2a:fb:fb:33:fd:73:dd:a7:f3:f9:88:a5:09:0c:a8:5a:16:
61:13:95:ea:d9:22:af:c4:fb:76:d2:22:3f:90:84:e3:89:a1:
d8:96:58:90:80:31:9d:c7:33:9c:16:e1:53:38:ad:53:e1:3f:
69:af:79:a7:05:a2:5a:bc:a3:37:a8:f9:03:1c:eb:ef:2a:1e:
62:a6:b6:1b:b4:df:a5:bf:74:ba:8a:bf:5d:cd:c9:c4:b8:32:
71:cc:e1:00:e6:fb:19:f3:a3:0e:8c:74:13:e1:f2:56:b5:2f:
32:52:8c:46:73:7f:a7:6d:97:86:d2:d2:a0:ba:db:a3:fd:59:
66:1e:ad:73:4f:58:e3:ba:51:bf:04:19:d5:06:5c:ec:37:9f:
72:66:e2:72:18:49:ad:8a:4d:a8:59:3b:c8:9d:fc:56:6d:2f:
14:aa:3e:ed:fb:24:d4:ae:e8:b2:eb:17:57:a6:18:f5:1a:9a:
f7:1c:94:4b:4f:b3:8b:35:d9:9f:44:83:34:5a:eb:7b:e9:5f:
63:ac:f3:37:95:0b:c7:34:d8:f5:b9:32:ae:5b:fd:98:9f:bb:
3e:72:eb:fb:66:19:01:c3:ca:05:65:7e:b9:f1:5f:5a:c8:11:
a3:95:a7:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:50:54 2025 by rpki-client