Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/1bcb8b-a3f8-48cc-8db9-3df9e21f4bcc/1/vs7FMeXDd1a4KGY_nMIK1iF3E6w.mft
File: vs7FMeXDd1a4KGY_nMIK1iF3E6w.mft (raw, json)
Hash identifier: Dmu5Oe2w9vPIV2+Ne+aA3WeiWhegVour6zp5Gt34F2Q=
Subject key identifier: 8D:2B:14:AB:0B:BB:C4:03:98:D0:98:B1:6B:51:8B:2F:A8:F4:CB:90
Authority key identifier: BE:CE:C5:31:E5:C3:77:56:B8:28:66:3F:9C:C2:0A:D6:21:77:13:AC
Certificate issuer: /CN=becec531e5c37756b828663f9cc20ad6217713ac
Certificate serial: 019922C301964581C54EA7F654663BEA0F73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vs7FMeXDd1a4KGY_nMIK1iF3E6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/1bcb8b-a3f8-48cc-8db9-3df9e21f4bcc/1/vs7FMeXDd1a4KGY_nMIK1iF3E6w.mft
Manifest number: 0FA0
Signing time: Sun 07 Sep 2025 06:00:29 +0000
Manifest this update: Sun 07 Sep 2025 06:00:29 +0000
Manifest next update: Mon 08 Sep 2025 06:00:29 +0000
Files and hashes: 1: _d2EFT-OpH3an9-ei2qvPBIPUiU.roa (hash: vjR4Zv9+5SsZfFKRbF6P42t9rz0q1nIneBSdni9L3pM=)
2: ciNzVE1_d0-QMInDSswN3EHLVNg.roa (hash: Wmjyk4Nl2dmeXznw2MTEjEcjFaiybhooG5LGrJ1VKM8=)
3: vs7FMeXDd1a4KGY_nMIK1iF3E6w.crl (hash: WO1Mk1XPYgG/DuUVPVAMqVPD5/Jyw4ZDwIlflsHiUR4=)
4: yAQLvR2REqCYEITifDYxhFTzX4k.roa (hash: uZgm/9JfNjYwGkoXS3hlL76KCjtvK/3swtvi79WEUbo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/1bcb8b-a3f8-48cc-8db9-3df9e21f4bcc/1/vs7FMeXDd1a4KGY_nMIK1iF3E6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/1bcb8b-a3f8-48cc-8db9-3df9e21f4bcc/1/vs7FMeXDd1a4KGY_nMIK1iF3E6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/vs7FMeXDd1a4KGY_nMIK1iF3E6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:01:96:45:81:c5:4e:a7:f6:54:66:3b:ea:0f:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=becec531e5c37756b828663f9cc20ad6217713ac
Validity
Not Before: Sep 7 06:00:29 2025 GMT
Not After : Sep 8 06:00:29 2025 GMT
Subject: CN=8d2b14ab0bbbc40398d098b16b518b2fa8f4cb90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:88:f3:c3:e2:a9:df:d2:e1:8c:77:d1:9d:1e:
a9:93:b1:32:25:0a:57:f3:a5:30:1d:11:31:ae:b1:
17:48:cf:52:e0:76:ee:f1:3c:ad:0e:59:c6:32:8d:
c0:a8:50:e5:2f:cf:a2:72:fe:8f:07:69:d1:a9:ff:
9d:de:cf:3e:4d:c4:79:d9:37:ce:37:e9:62:fb:f1:
f9:7e:a0:0d:40:07:c0:2e:37:40:fe:2a:de:63:ff:
4c:1c:46:36:68:35:58:85:d2:dc:64:fc:ce:fa:10:
52:6b:d2:67:1d:a6:9a:85:e6:3e:76:20:07:dd:80:
5e:0a:46:ed:5a:3c:00:ef:9d:7c:e1:ab:5a:3c:68:
ad:d1:71:1a:82:71:d9:90:12:d8:7b:8d:1c:12:66:
0a:dc:d9:9a:6c:da:b9:0b:07:fe:3a:cd:1d:3a:2b:
1c:8f:ba:b6:52:80:3e:be:30:8d:e8:f1:3e:78:fd:
71:85:d6:91:0a:85:46:e3:6c:ae:c5:9d:ea:25:a1:
c2:c0:76:a6:94:45:26:1c:08:fa:c3:8c:c3:29:c1:
3e:2c:c9:8c:41:0f:b7:4a:fa:26:91:fb:3c:0d:79:
cd:db:b0:86:31:06:69:8c:4b:ea:d4:f1:90:36:e6:
d8:3b:f5:e1:c8:db:70:7e:68:65:39:50:9b:ce:c6:
ac:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:2B:14:AB:0B:BB:C4:03:98:D0:98:B1:6B:51:8B:2F:A8:F4:CB:90
X509v3 Authority Key Identifier:
keyid:BE:CE:C5:31:E5:C3:77:56:B8:28:66:3F:9C:C2:0A:D6:21:77:13:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vs7FMeXDd1a4KGY_nMIK1iF3E6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/1bcb8b-a3f8-48cc-8db9-3df9e21f4bcc/1/vs7FMeXDd1a4KGY_nMIK1iF3E6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/1bcb8b-a3f8-48cc-8db9-3df9e21f4bcc/1/vs7FMeXDd1a4KGY_nMIK1iF3E6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:31:ab:6f:5f:7f:8e:7f:04:19:53:a4:41:8c:f3:86:c1:b6:
a1:e1:3d:86:10:54:cd:64:b1:bd:78:3b:3f:60:f3:9f:f2:fa:
ca:f3:57:78:a1:01:07:61:80:14:b5:1d:59:a7:7d:78:04:c1:
93:9e:90:e4:80:ef:97:8d:d3:89:f4:6d:64:2b:0e:b4:05:85:
c0:d7:05:c6:6f:af:bc:9e:f9:22:02:a8:ee:88:c1:4b:2e:7f:
8a:d0:4c:3e:11:10:4e:16:66:45:a3:37:72:1c:03:e4:98:66:
5a:24:3c:15:4e:ad:a7:2a:6d:6f:67:bc:33:52:7b:ea:37:9e:
ff:52:83:19:81:98:c7:b8:57:60:54:fb:e7:42:3f:6d:1c:47:
20:89:eb:06:a5:d8:71:c8:5c:76:0c:91:42:52:a3:76:0b:e4:
a1:56:ec:49:b7:7c:25:c8:4e:11:8d:a4:6d:e2:32:cf:50:ad:
8f:b4:5d:11:0f:30:bd:32:64:af:9d:8e:ae:87:41:36:c2:30:
cf:60:00:09:20:ba:ef:cf:e9:ab:a6:bd:4a:df:5d:4e:7e:7c:
63:10:f0:ea:3a:9f:38:a4:e9:bd:89:d8:94:2c:83:c3:20:f2:
c1:c1:45:6d:e6:da:c7:aa:37:70:5c:3a:33:fb:85:cd:30:8f:
0a:19:1f:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:50:48 2025 by rpki-client