Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/501f2b-fd1f-45ea-b494-d73dc4b41ce1/1/vEZLqdJjhfVN9iVKwkiSbTcERbA.mft
File: vEZLqdJjhfVN9iVKwkiSbTcERbA.mft (raw, json)
Hash identifier: 755YoJzp0qOe6qYIlbYKCgcpfni7vusNDPerMhCHkPM=
Subject key identifier: 14:08:B5:C7:61:5B:72:15:14:F2:51:A5:C5:94:3D:A8:00:6D:39:96
Authority key identifier: BC:46:4B:A9:D2:63:85:F5:4D:F6:25:4A:C2:48:92:6D:37:04:45:B0
Certificate issuer: /CN=bc464ba9d26385f54df6254ac248926d370445b0
Certificate serial: 0198D960950E746D7DFAE459836D8D7AF9F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vEZLqdJjhfVN9iVKwkiSbTcERbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/501f2b-fd1f-45ea-b494-d73dc4b41ce1/1/vEZLqdJjhfVN9iVKwkiSbTcERbA.mft
Manifest number: 1654
Signing time: Sun 24 Aug 2025 00:00:42 +0000
Manifest this update: Sun 24 Aug 2025 00:00:42 +0000
Manifest next update: Mon 25 Aug 2025 00:00:42 +0000
Files and hashes: 1: gAF5yk6vmaOq2Uung0D_8Gub1gc.roa (hash: eVAKmeO8heHGdx9Kcy2Kx3p7IXGpACADu9i5ILdct+c=)
2: vEZLqdJjhfVN9iVKwkiSbTcERbA.crl (hash: QsWzCb76VVNhm8fdSRWMYENy0WLG2ZJIXaOT1dQQkhE=)
3: zyyxpnYwsTYjNu4Wy5twrx2x4fk.roa (hash: NQRYx+K4EclccAZE0WPjuwlvX5dADgQnuUhPYSSnRgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/501f2b-fd1f-45ea-b494-d73dc4b41ce1/1/vEZLqdJjhfVN9iVKwkiSbTcERbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/501f2b-fd1f-45ea-b494-d73dc4b41ce1/1/vEZLqdJjhfVN9iVKwkiSbTcERbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/vEZLqdJjhfVN9iVKwkiSbTcERbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 23:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d9:60:95:0e:74:6d:7d:fa:e4:59:83:6d:8d:7a:f9:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc464ba9d26385f54df6254ac248926d370445b0
Validity
Not Before: Aug 24 00:00:42 2025 GMT
Not After : Aug 25 00:00:42 2025 GMT
Subject: CN=1408b5c7615b721514f251a5c5943da8006d3996
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9e:86:07:84:e1:ba:2f:96:73:d4:e7:95:21:
42:25:e6:b2:0d:b1:b0:26:00:f6:64:13:7c:6d:20:
b1:54:0b:76:9d:3b:8a:57:49:16:52:94:45:d6:4b:
7f:76:09:1d:40:4f:9c:50:23:03:7a:96:97:80:38:
d7:4c:0d:c9:a7:86:50:01:e2:fa:9a:80:6f:95:e6:
e2:e4:42:29:8a:e0:bc:b6:cf:51:6b:b3:e1:4f:98:
e9:96:2d:9b:45:0f:89:b8:0f:42:b0:3f:64:78:8a:
db:93:b3:6e:8f:1c:fc:0f:34:76:e5:f6:d5:6a:ca:
bd:4d:5e:be:a1:59:cb:84:1b:34:be:61:bd:a3:f5:
9b:44:46:70:c7:aa:ff:eb:b9:e3:97:66:71:d1:a9:
b1:ad:01:b2:47:0c:4b:5f:6d:82:2c:e1:9c:d3:4e:
98:19:ec:b9:dc:98:0e:f0:2f:82:59:59:1e:de:3b:
04:ee:6c:92:34:2a:fd:b1:83:e0:a2:f7:d4:68:d2:
64:8b:82:f7:b1:7f:63:72:f9:37:1f:09:b3:b0:21:
26:e1:29:79:67:27:e1:a1:39:de:3b:40:53:2f:06:
11:e6:d4:4d:4c:9f:a5:6d:94:e6:f3:1a:7d:b1:1c:
66:0c:49:97:d3:15:25:65:93:9c:96:9f:fe:43:e8:
64:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:08:B5:C7:61:5B:72:15:14:F2:51:A5:C5:94:3D:A8:00:6D:39:96
X509v3 Authority Key Identifier:
keyid:BC:46:4B:A9:D2:63:85:F5:4D:F6:25:4A:C2:48:92:6D:37:04:45:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vEZLqdJjhfVN9iVKwkiSbTcERbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/501f2b-fd1f-45ea-b494-d73dc4b41ce1/1/vEZLqdJjhfVN9iVKwkiSbTcERbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/501f2b-fd1f-45ea-b494-d73dc4b41ce1/1/vEZLqdJjhfVN9iVKwkiSbTcERbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:b2:39:dc:c4:13:95:9d:7d:d9:96:ea:1b:53:fc:08:48:16:
8a:80:47:12:9d:e3:d7:eb:3a:bd:1a:9a:b0:41:ab:50:cc:7e:
2a:89:c6:53:7c:88:a2:76:80:1c:dd:5c:66:d3:0a:fb:d2:ce:
ba:b3:a9:74:4e:54:6d:80:20:21:f0:e8:a7:2f:e8:e6:dc:57:
4f:b2:74:73:62:d8:57:67:fd:f4:ac:6a:36:e9:76:b4:98:72:
1b:3a:e3:15:90:09:e3:e1:fd:41:65:16:10:14:db:d1:b0:00:
ec:4b:e9:3d:e8:59:d7:6d:5b:0d:fe:36:90:18:27:ad:c4:21:
ad:37:88:e5:ba:da:02:e6:33:03:82:0b:84:26:01:27:96:f7:
8b:0f:33:bf:f8:9a:c4:96:8d:ce:a6:f0:07:0c:f9:5c:a1:69:
82:5f:a0:94:bd:3f:37:8e:25:69:58:b8:f7:e6:bb:6a:78:07:
50:35:70:80:6e:5e:aa:81:7a:2d:99:d5:3b:8d:88:14:7f:a7:
a5:7d:7f:cc:a2:d4:25:ac:de:d6:ae:c2:02:f0:20:e7:0c:3f:
d5:26:58:06:3a:64:77:86:b2:55:d6:c2:ab:3e:cd:65:d6:11:
85:ab:c4:2d:c1:42:7d:aa:bd:7c:8c:c5:46:40:01:61:54:28:
ac:93:3c:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:25:29 2025 by rpki-client