
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/91fdb3-13e2-42b2-ac73-1a55d1e4c21c/1/VBWCA9o6HpYxjoUENBHn1NA9TEQ.mft
File: VBWCA9o6HpYxjoUENBHn1NA9TEQ.mft (raw, json)
Hash identifier: wMkFkdHwt9xzOg5qlfzHq2XRHpfWS2ptftqoKEzSlWM=
Subject key identifier: 34:9E:64:AF:0C:B9:6B:99:55:B5:8A:93:C6:C2:A5:C9:79:20:C0:DD
Authority key identifier: 54:15:82:03:DA:3A:1E:96:31:8E:85:04:34:11:E7:D4:D0:3D:4C:44
Certificate issuer: /CN=54158203da3a1e96318e85043411e7d4d03d4c44
Certificate serial: 0198D5BBC809D2E43F91DE698F6BBC30F849
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VBWCA9o6HpYxjoUENBHn1NA9TEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/91fdb3-13e2-42b2-ac73-1a55d1e4c21c/1/VBWCA9o6HpYxjoUENBHn1NA9TEQ.mft
Manifest number: 017A
Signing time: Sat 23 Aug 2025 07:01:50 +0000
Manifest this update: Sat 23 Aug 2025 07:01:50 +0000
Manifest next update: Sun 24 Aug 2025 07:01:50 +0000
Files and hashes: 1: VBWCA9o6HpYxjoUENBHn1NA9TEQ.crl (hash: rYeBIUMzn+lnqaQNlO4a2e2mxZJj4rBUOcwgbNzitd8=)
2: vP7OBBy6Rc-iXCzpNtqqwwaR6pA.roa (hash: MbpCA8/2M3yt7Y/21BLSADPFYL3YqJ9PW3u4Q8kGOqY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/91fdb3-13e2-42b2-ac73-1a55d1e4c21c/1/VBWCA9o6HpYxjoUENBHn1NA9TEQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/91fdb3-13e2-42b2-ac73-1a55d1e4c21c/1/VBWCA9o6HpYxjoUENBHn1NA9TEQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/VBWCA9o6HpYxjoUENBHn1NA9TEQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 07:01:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:c8:09:d2:e4:3f:91:de:69:8f:6b:bc:30:f8:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54158203da3a1e96318e85043411e7d4d03d4c44
Validity
Not Before: Aug 23 07:01:50 2025 GMT
Not After : Aug 24 07:01:50 2025 GMT
Subject: CN=349e64af0cb96b9955b58a93c6c2a5c97920c0dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:59:76:22:5c:68:66:89:1f:c8:2b:e6:59:7b:
54:e0:e8:df:b2:d2:08:a9:5f:ad:54:85:54:3e:c4:
ab:d1:f1:12:aa:26:0d:a6:4c:3b:71:9c:aa:71:4e:
63:ba:17:8e:aa:a5:c4:de:f5:b0:a0:91:9d:ce:82:
81:ea:cc:56:e4:e5:30:dd:08:20:f5:94:ee:ca:c1:
be:ef:6d:4e:c4:56:1e:6b:bd:2b:eb:a9:6b:8c:06:
92:7f:f5:b9:74:57:6d:5d:e9:6e:fd:00:14:0b:3e:
7b:2b:a9:a4:ae:0e:21:3f:ba:a1:6d:e5:dc:c3:97:
4e:5b:b7:91:5d:4d:06:29:1c:4e:d2:18:87:a4:62:
24:bf:05:2a:9e:82:27:b4:9a:6d:82:fb:e4:43:fe:
0d:c0:4d:f2:bd:68:d9:7e:ba:16:f4:f9:d1:ec:a6:
f7:45:3a:5f:3a:60:b8:8f:d4:3a:a9:c0:37:45:e5:
77:0a:18:34:37:e4:1d:c1:ce:d7:06:5e:e0:fb:6e:
30:bc:67:b8:d9:50:c9:3e:d2:21:9a:9e:80:8e:bf:
18:cb:27:97:8d:8f:89:51:24:e3:03:b9:6c:0c:50:
0e:13:c0:f8:e6:0a:16:66:a5:23:ea:ad:ab:74:40:
e6:fc:66:fa:78:dc:31:67:ed:87:cb:d3:d9:80:98:
a8:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:9E:64:AF:0C:B9:6B:99:55:B5:8A:93:C6:C2:A5:C9:79:20:C0:DD
X509v3 Authority Key Identifier:
keyid:54:15:82:03:DA:3A:1E:96:31:8E:85:04:34:11:E7:D4:D0:3D:4C:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VBWCA9o6HpYxjoUENBHn1NA9TEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/91fdb3-13e2-42b2-ac73-1a55d1e4c21c/1/VBWCA9o6HpYxjoUENBHn1NA9TEQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/91fdb3-13e2-42b2-ac73-1a55d1e4c21c/1/VBWCA9o6HpYxjoUENBHn1NA9TEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:94:cc:d4:2a:80:70:e5:87:1c:fe:0e:1a:db:5c:35:60:8d:
de:8b:f4:ab:c7:04:c8:c8:c0:19:39:60:f2:b9:1d:81:1e:ae:
ce:57:7e:fa:7c:96:43:bb:22:ca:df:dd:64:53:c5:1f:2a:f2:
84:e8:1b:61:24:2f:b7:9b:99:bb:20:f4:61:a3:fb:3a:4a:7b:
96:c4:df:4c:02:bf:e4:04:eb:8b:8a:ae:f2:47:55:c0:22:b4:
aa:05:2e:1b:15:a1:09:bb:9e:ee:e3:7b:b6:a6:1f:97:b1:9f:
36:b6:d3:90:ff:bb:33:18:ce:a5:76:f1:45:ce:90:c7:57:47:
4a:aa:a5:a0:e1:47:ba:5c:3c:fc:06:cf:de:c5:e7:1b:76:c1:
41:82:05:6a:4c:34:48:46:d3:c0:7c:48:bb:e3:f3:07:55:ec:
d3:d4:ba:ec:e5:27:38:9b:6e:4b:b7:f7:95:ce:6f:74:6d:7f:
54:53:e0:3c:a9:07:70:d3:2b:c5:7b:08:b6:3c:e3:7e:63:92:
30:de:67:d2:51:d3:5e:4c:8b:6d:53:e8:cb:ae:52:2a:9a:b2:
f6:d7:d1:2f:ce:91:76:bd:06:1f:35:f4:fe:18:a4:68:da:13:
00:79:62:47:00:99:ec:66:3b:0c:e4:69:f3:12:cd:08:30:6a:
14:e0:38:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:12:07 2025 by rpki-client