Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.mft
File: vygFmS5lMdPaMe4a9rzVwG0Ctso.mft (raw, json)
Hash identifier: dkdH80+v6vBdeTVqeaFYVJ2OZ1hikBF+IY1lH/CvGEw=
Subject key identifier: 55:93:AD:71:C5:AA:67:35:71:BE:CB:D7:16:C8:F6:0F:B0:75:C8:99
Authority key identifier: BF:28:05:99:2E:65:31:D3:DA:31:EE:1A:F6:BC:D5:C0:6D:02:B6:CA
Certificate issuer: /CN=bf2805992e6531d3da31ee1af6bcd5c06d02b6ca
Certificate serial: 0198D5838214A71862AD77F4C5A06F490972
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vygFmS5lMdPaMe4a9rzVwG0Ctso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 06:00:21 +0000
Manifest this update: Sat 23 Aug 2025 06:00:21 +0000
Manifest next update: Sun 24 Aug 2025 06:00:21 +0000
Files and hashes: 1: ZA2eo4PhOO6YarPBjFuZYerlXM8.roa (hash: OaUR9ntwZSMTqF4rae/f45ntDF7DCdGD74N9a3x5n8s=)
2: iU6o8UX2fMqdnVT4GPBZLMHQUVk.roa (hash: L7qS2Pktcg+3MFOhFw0UCguQbXdIgIfJZ4PXXKIQFAI=)
3: vygFmS5lMdPaMe4a9rzVwG0Ctso.crl (hash: Dv9OrwYEP9trx9NQ10u/S5tBTV5+jL/zVdZqWTBMVt8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.mft
rsync://rpki.ripe.net/repository/DEFAULT/vygFmS5lMdPaMe4a9rzVwG0Ctso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:82:14:a7:18:62:ad:77:f4:c5:a0:6f:49:09:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf2805992e6531d3da31ee1af6bcd5c06d02b6ca
Validity
Not Before: Aug 23 06:00:21 2025 GMT
Not After : Aug 24 06:00:21 2025 GMT
Subject: CN=5593ad71c5aa673571becbd716c8f60fb075c899
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a0:7b:cb:bc:ff:fd:e3:83:9c:5f:f3:b7:80:
ff:07:f9:42:a1:34:9a:b3:39:5f:18:6d:48:0d:fb:
c7:65:b9:cc:22:0c:d1:57:10:8c:19:c2:cf:a0:ad:
8d:07:82:5b:f9:30:a0:89:54:16:fb:85:26:9b:f3:
f3:cd:e0:41:0f:f9:62:a0:be:69:a7:89:00:c6:c3:
e3:62:7f:51:e6:ab:bf:b9:e0:44:d3:81:b5:65:d4:
69:cd:04:c2:e2:54:cf:60:0f:4a:47:83:63:c5:66:
e5:c5:6e:b5:44:1e:b7:8e:49:2d:8b:2c:22:10:74:
48:f9:e7:27:e7:61:14:6d:0b:63:97:48:02:ac:f7:
b5:f2:8a:84:f9:48:95:55:8f:49:49:5b:c6:2e:18:
7c:96:8c:54:cb:9c:90:b9:4d:c0:45:e9:0b:bd:fb:
07:17:15:15:f3:fd:ca:03:17:34:e6:16:ee:03:ba:
45:71:a0:53:3a:d6:af:ad:f4:d5:c7:26:8b:2f:db:
fe:f3:ac:f7:84:5f:b5:01:2b:28:4c:7a:ec:de:78:
c4:ca:ea:e8:f8:c4:a5:b8:c0:bf:a4:81:b0:42:f0:
e8:1e:fc:42:0a:a8:9f:99:8e:43:70:2f:dd:5b:d1:
48:97:23:c0:93:be:f6:3d:97:08:3b:dc:64:13:77:
fb:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:93:AD:71:C5:AA:67:35:71:BE:CB:D7:16:C8:F6:0F:B0:75:C8:99
X509v3 Authority Key Identifier:
keyid:BF:28:05:99:2E:65:31:D3:DA:31:EE:1A:F6:BC:D5:C0:6D:02:B6:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vygFmS5lMdPaMe4a9rzVwG0Ctso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:d1:0b:5a:c2:06:5d:f4:ba:01:fe:b9:a0:82:1a:6d:87:67:
b9:5b:eb:d0:4e:43:25:5a:cb:cc:c7:26:23:3d:8f:46:78:5e:
e8:1c:b2:0f:d3:c9:9b:51:8d:b2:18:14:36:e5:d8:f1:4b:68:
57:4e:61:c0:58:0d:9f:1d:a9:88:73:74:f5:e3:17:a0:b6:1b:
b8:17:83:c7:58:08:c9:f2:4b:fa:b1:8d:d1:0d:b3:51:aa:ef:
6b:e1:4a:bd:6e:fa:a8:20:98:f3:a0:1f:8a:aa:54:67:df:a6:
e2:0e:1e:8b:dc:b4:f8:6a:fc:52:15:8e:cc:57:a6:24:bc:ca:
4c:65:35:b4:9a:67:05:6c:b0:38:3a:a1:d4:ec:7a:4f:54:83:
77:f0:b8:13:05:f4:7a:f4:07:a2:7d:39:3b:73:2c:78:8d:dd:
bc:26:fb:0e:14:a8:12:6d:b2:b1:d0:3e:c4:55:2a:63:58:ba:
7e:41:3e:a3:9c:1c:a4:e2:e4:b3:5b:00:05:f3:07:1b:7f:0e:
99:de:be:22:da:32:26:45:8c:ca:6a:c3:12:aa:ed:61:97:9f:
58:38:c8:34:4a:1d:ac:66:64:af:8a:45:12:ec:e8:5b:28:a3:
1c:b7:66:ad:38:70:17:78:a7:44:6d:f3:c6:32:c0:9b:1c:96:
0f:d8:29:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:41:43 2025 by rpki-client