Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/vFbbeW3vDb20x48kRavswVcKb9k.mft
File: vFbbeW3vDb20x48kRavswVcKb9k.mft (raw, json)
Hash identifier: oeWAXvFs02qbrcNuD2rTjkJ4qUI3XvedWARWV1myK18=
Subject key identifier: F0:B3:55:8A:F8:57:47:64:C0:14:8B:BD:3C:8F:9B:54:63:17:D6:2C
Authority key identifier: BC:56:DB:79:6D:EF:0D:BD:B4:C7:8F:24:45:AB:EC:C1:57:0A:6F:D9
Certificate issuer: /CN=bc56db796def0dbdb4c78f2445abecc1570a6fd9
Certificate serial: 019928204CA03E6E5E37FE13D8AFF904B57F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vFbbeW3vDb20x48kRavswVcKb9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/vFbbeW3vDb20x48kRavswVcKb9k.mft
Manifest number: 1678
Signing time: Mon 08 Sep 2025 07:00:29 +0000
Manifest this update: Mon 08 Sep 2025 07:00:29 +0000
Manifest next update: Tue 09 Sep 2025 07:00:29 +0000
Files and hashes: 1: In0Jw5JnZ3csEpEbMyZKw9CZJLc.roa (hash: BQTqQKqx4zlJm4JxcLJcv6hnVItXcaWcLAa74Tq6oYo=)
2: NapDO-qA7UAI5E6E7u_3VLwwM-s.roa (hash: iMhIICohdfOIKJztiTyPfcGxnS6EMr6CVn/3WJubO/g=)
3: ogHgQyaDJwRla-L-NRcofE85Dtc.roa (hash: Am1SCJNRHKVY/nX1SY991hSY0JScSD8ppmyuS/bIXqY=)
4: vFbbeW3vDb20x48kRavswVcKb9k.crl (hash: lldk+ALhQaAgjQ3njmNEab0WnCANria8MjZ/dSn6xKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/vFbbeW3vDb20x48kRavswVcKb9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/vFbbeW3vDb20x48kRavswVcKb9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/vFbbeW3vDb20x48kRavswVcKb9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 07:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:28:20:4c:a0:3e:6e:5e:37:fe:13:d8:af:f9:04:b5:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc56db796def0dbdb4c78f2445abecc1570a6fd9
Validity
Not Before: Sep 8 07:00:29 2025 GMT
Not After : Sep 9 07:00:29 2025 GMT
Subject: CN=f0b3558af8574764c0148bbd3c8f9b546317d62c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:53:8f:c1:2d:bd:12:bb:d2:16:30:8f:33:f3:
8b:81:5c:48:b7:82:43:ef:17:bc:a5:8f:f7:55:6a:
b5:f4:9e:82:60:c5:fc:d6:5b:61:27:76:5c:46:cb:
b9:d8:d9:88:a1:c7:ac:3f:9f:a4:89:7a:ea:01:be:
4d:e9:b3:21:03:2f:11:70:02:a7:f4:1d:f8:4c:94:
a6:ec:b7:01:7f:e1:c4:dd:f9:e7:37:92:4d:b5:ce:
9a:f3:fa:c9:f9:3e:9c:20:53:50:2f:f8:19:31:3b:
44:08:ff:55:a4:5e:96:7c:05:80:b2:d3:4c:98:6f:
e9:e0:98:88:2d:80:5a:06:63:97:4d:84:22:17:be:
30:19:51:80:5f:38:91:60:e2:6e:89:39:82:17:f9:
b4:7b:b1:c3:09:d1:05:78:cc:d1:63:bf:97:1f:af:
a2:78:9a:57:f2:80:dd:fe:b9:0f:c9:69:f0:1d:84:
cf:09:b1:37:8b:55:c9:53:b6:5b:51:58:49:01:c1:
e7:47:a3:ee:07:bb:84:05:bb:d4:59:7a:3e:87:0a:
b0:47:28:df:62:3a:7d:df:92:65:13:92:1c:7c:77:
db:d4:29:ba:32:c7:5f:f7:66:c9:7c:1f:00:58:0b:
ae:e8:bd:ca:13:9e:b2:15:7a:ec:b4:8b:b0:a6:8d:
49:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:B3:55:8A:F8:57:47:64:C0:14:8B:BD:3C:8F:9B:54:63:17:D6:2C
X509v3 Authority Key Identifier:
keyid:BC:56:DB:79:6D:EF:0D:BD:B4:C7:8F:24:45:AB:EC:C1:57:0A:6F:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vFbbeW3vDb20x48kRavswVcKb9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/vFbbeW3vDb20x48kRavswVcKb9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/vFbbeW3vDb20x48kRavswVcKb9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:b5:4a:ba:2c:8f:47:62:f9:a8:12:2d:8a:64:17:d5:ce:22:
bf:4e:45:de:b6:94:a5:bc:00:18:bd:e3:e3:7f:6d:c7:e8:3c:
5d:5c:85:1e:b0:e8:2a:37:93:09:8e:fc:cb:20:5d:68:c5:5b:
f7:4e:05:58:31:2e:93:23:fb:59:d8:ac:8a:5c:38:37:66:f2:
53:ea:d9:1a:cc:4a:46:2c:b8:ca:6b:da:29:27:58:10:03:f0:
9e:59:aa:51:47:9b:24:dd:64:af:3d:1d:9f:e4:15:e2:6b:3f:
60:99:c8:ab:42:99:33:be:2e:0c:1f:7c:9d:24:d1:c2:68:33:
1d:65:1e:24:94:83:2a:7e:f8:f8:0c:c5:0d:e8:73:06:75:54:
97:87:a5:52:24:cc:96:25:18:15:86:23:3a:7d:22:b1:a7:24:
b9:ae:6e:de:b9:7a:c6:0e:05:72:d1:2d:32:5c:af:d5:ba:15:
ef:70:9d:49:5e:c4:d9:36:15:18:3b:fe:1e:0a:38:28:09:53:
8a:6a:fa:b0:ac:14:9b:f0:7f:72:a8:f8:68:3f:17:d1:d7:37:
b3:f0:4a:b6:d3:ac:f5:a8:3f:88:87:d5:ff:1a:90:f9:c1:81:
b2:d4:d1:28:5a:0b:5e:93:6d:b1:8a:94:d4:4e:15:36:1b:95:
b2:55:72:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 16:06:00 2025 by rpki-client