
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/vfegoEi2jsz6TUnqtPFtx5LA0xg.mft
File: vfegoEi2jsz6TUnqtPFtx5LA0xg.mft (raw, json)
Hash identifier: fG0gZL9EiwEkr9/RnP4RmlGHvvSV+F/0YIhso81/WOU=
Subject key identifier: 89:B4:FF:B9:9E:94:76:FB:FC:03:61:1B:28:80:5C:A9:52:5F:72:A7
Authority key identifier: BD:F7:A0:A0:48:B6:8E:CC:FA:4D:49:EA:B4:F1:6D:C7:92:C0:D3:18
Certificate issuer: /CN=bdf7a0a048b68eccfa4d49eab4f16dc792c0d318
Certificate serial: 0197B96B0E4CF71817552D66AD7DF961CDEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfegoEi2jsz6TUnqtPFtx5LA0xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/vfegoEi2jsz6TUnqtPFtx5LA0xg.mft
Manifest number: 15B8
Signing time: Sun 29 Jun 2025 02:01:30 +0000
Manifest this update: Sun 29 Jun 2025 02:01:30 +0000
Manifest next update: Mon 30 Jun 2025 02:01:30 +0000
Files and hashes: 1: GKC-zruGo7Y0lHBj7AqmYPwzc8c.roa (hash: u2pwVxzKoBKyV0Dimg3sj9jXDAo9fvdhwaO1o32GlnA=)
2: X_m5ZAvxIpZScImZ01eKwHRPNDY.roa (hash: beEA3W7SColLkSlnHacB1waBPlogRmM3jPPLz78ItOg=)
3: v1Kwwfd8ZjjCs2Mu7l5Mtdf-PVI.roa (hash: ulU0aPB2ZxGebVfubT+AGsI+A+WmNT0R9PT7Ovu3cU0=)
4: vfegoEi2jsz6TUnqtPFtx5LA0xg.crl (hash: FWL8RSUPXXwvpCGYaZgkjullYiALKdSekCKTzaWzwJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/vfegoEi2jsz6TUnqtPFtx5LA0xg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/vfegoEi2jsz6TUnqtPFtx5LA0xg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vfegoEi2jsz6TUnqtPFtx5LA0xg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:6b:0e:4c:f7:18:17:55:2d:66:ad:7d:f9:61:cd:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdf7a0a048b68eccfa4d49eab4f16dc792c0d318
Validity
Not Before: Jun 29 02:01:30 2025 GMT
Not After : Jun 30 02:01:30 2025 GMT
Subject: CN=89b4ffb99e9476fbfc03611b28805ca9525f72a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b2:14:54:8f:8f:ee:da:d1:8f:7a:91:93:9f:
f5:e6:14:b7:85:b5:d9:cc:a8:d2:a4:1c:2b:10:07:
46:96:2b:86:4c:64:ac:cb:f4:e1:c6:18:55:83:e8:
fc:62:e9:bf:6b:aa:6f:9f:b1:14:e7:e2:aa:bd:04:
2b:81:b5:f1:b5:1d:b6:f5:0c:29:00:ff:78:05:97:
8b:56:32:4a:33:25:9f:ad:d1:fe:65:db:b7:f4:b1:
59:0f:4a:a2:9e:7b:d1:3e:18:15:d0:8b:9d:2d:b7:
4f:fc:49:43:84:c9:82:83:9e:41:9f:58:98:04:91:
b1:eb:a7:08:80:e1:b8:82:0b:29:5d:ff:df:b4:cc:
53:46:f4:d2:b6:de:80:9c:5d:33:a3:79:fa:7d:ef:
f3:17:99:74:b7:34:4e:aa:4d:fa:38:cc:aa:c9:b6:
48:17:23:b6:21:ad:98:e0:1d:5a:42:3c:c7:38:44:
ff:76:16:83:4b:4b:b3:1e:23:76:75:16:fa:de:3a:
6d:98:16:94:33:ac:f6:ac:3b:87:63:de:5a:c8:99:
25:f9:d8:18:2b:d5:75:3c:fb:3c:1d:85:d7:0f:a6:
b3:02:f0:36:57:53:90:69:b2:56:4c:1f:1e:21:84:
56:e7:1f:bf:4a:d6:d5:e5:ab:18:1e:41:2a:e0:24:
cc:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:B4:FF:B9:9E:94:76:FB:FC:03:61:1B:28:80:5C:A9:52:5F:72:A7
X509v3 Authority Key Identifier:
keyid:BD:F7:A0:A0:48:B6:8E:CC:FA:4D:49:EA:B4:F1:6D:C7:92:C0:D3:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfegoEi2jsz6TUnqtPFtx5LA0xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/vfegoEi2jsz6TUnqtPFtx5LA0xg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/vfegoEi2jsz6TUnqtPFtx5LA0xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:21:1a:88:d2:30:4f:91:48:b5:0d:4f:d7:50:b2:e6:e2:79:
66:2d:f6:09:7f:cb:db:c1:7e:30:d9:ee:5c:a4:89:a1:2f:f1:
e2:bd:df:64:cf:80:8c:86:1d:11:3a:8a:67:83:8c:ea:cc:87:
2f:28:27:e3:7c:22:38:7f:32:10:cd:28:cc:a7:8e:cd:1e:c3:
f0:93:6f:17:94:48:e7:3d:d8:4d:84:2a:2e:c2:3e:e0:54:c7:
7f:be:57:b3:ee:3f:c2:07:53:57:14:67:20:1e:5d:24:1b:7e:
84:11:4c:3a:18:76:82:55:68:27:1c:05:bc:4f:25:b3:f2:0d:
21:54:84:2f:cf:50:c8:2e:ee:69:66:de:44:de:33:d9:0f:c7:
62:88:c4:21:5c:08:15:50:ed:a9:4d:3b:db:02:62:a7:79:58:
1c:54:c2:21:b6:5b:0d:1d:88:ca:39:cb:d1:56:b2:ea:b8:31:
45:97:c6:6e:50:ea:4e:c0:82:94:98:ca:b8:ef:d1:f7:e9:cf:
c1:e0:14:62:4b:7e:2b:3a:d0:0b:9d:c8:8f:24:55:5c:39:35:
58:c7:5d:fc:a9:76:93:d0:45:4f:d1:a6:4e:54:ab:8f:57:ba:
97:0d:78:51:a3:8c:9a:23:86:5c:fb:a7:ca:41:8d:e4:b9:ca:
f6:58:02:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:40:21 2025 by rpki-client