Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/68b75c-83df-474e-a9fe-01bf1f145c26/1/0xryhyw_VQMHOGbf_vSItxeD2rY.mft
File: 0xryhyw_VQMHOGbf_vSItxeD2rY.mft (raw, json)
Hash identifier: +U81Xt7WvxnEKfKnMM8Y9EEUjdIVwaUCNgpRZMr1Pok=
Subject key identifier: E0:B2:87:15:8B:B1:42:DF:14:41:8D:0F:04:31:A4:DA:92:1D:71:E9
Authority key identifier: D3:1A:F2:87:2C:3F:55:03:07:38:66:DF:FE:F4:88:B7:17:83:DA:B6
Certificate issuer: /CN=d31af2872c3f5503073866dffef488b71783dab6
Certificate serial: 0198D5BBE60918D6C03659593E1563EF2566
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0xryhyw_VQMHOGbf_vSItxeD2rY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/68b75c-83df-474e-a9fe-01bf1f145c26/1/0xryhyw_VQMHOGbf_vSItxeD2rY.mft
Manifest number: 1349
Signing time: Sat 23 Aug 2025 07:01:57 +0000
Manifest this update: Sat 23 Aug 2025 07:01:57 +0000
Manifest next update: Sun 24 Aug 2025 07:01:57 +0000
Files and hashes: 1: 0xryhyw_VQMHOGbf_vSItxeD2rY.crl (hash: u5n3GuihIuJb11qyXScH5BljeGFWkgswy1yiEtHW0Tw=)
2: Vr2MHbk4BkpwijegPw7svFXxpY8.roa (hash: J4FlYQ16tBtXCX4bdbpdB9oishsKJVSj1Pc1U4pte9s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/68b75c-83df-474e-a9fe-01bf1f145c26/1/0xryhyw_VQMHOGbf_vSItxeD2rY.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/68b75c-83df-474e-a9fe-01bf1f145c26/1/0xryhyw_VQMHOGbf_vSItxeD2rY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0xryhyw_VQMHOGbf_vSItxeD2rY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:e6:09:18:d6:c0:36:59:59:3e:15:63:ef:25:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d31af2872c3f5503073866dffef488b71783dab6
Validity
Not Before: Aug 23 07:01:57 2025 GMT
Not After : Aug 24 07:01:57 2025 GMT
Subject: CN=e0b287158bb142df14418d0f0431a4da921d71e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:db:9c:9f:f5:e1:37:af:c0:10:d8:04:15:77:
e0:b7:12:ca:33:51:b8:23:4d:c5:3c:12:7a:16:06:
f7:85:45:7d:d8:d1:98:32:d7:06:63:59:f2:14:56:
f7:29:88:79:16:31:5d:21:64:30:bf:75:c7:f0:ce:
a9:9c:b2:22:ef:08:e0:94:b5:b7:65:8e:e7:45:37:
b9:3c:e4:e9:2b:26:5b:99:85:ba:ab:d9:b6:3a:7c:
55:e3:d1:fb:fa:a2:e4:d4:47:37:81:e8:30:25:00:
60:0e:b0:9c:49:61:0f:04:93:1e:1c:40:8b:ef:50:
1b:b4:12:56:88:10:61:f3:0e:d2:4c:3f:d6:37:25:
5b:78:be:52:9d:74:51:b1:fd:7a:cf:05:48:27:9f:
b4:f7:39:ca:61:8a:ab:5c:e5:3d:a0:af:00:c5:24:
3e:d6:36:35:f1:81:68:60:e8:7a:df:96:27:a3:37:
f6:05:b2:4a:c5:6f:c2:24:02:f8:91:65:6e:e1:9d:
f3:e6:f1:7b:a5:fe:92:68:b6:5b:a5:21:e0:4f:1d:
cd:82:9e:7f:cf:68:da:5c:64:0f:73:35:ad:5d:22:
84:1a:7a:e4:9d:57:64:a9:50:ba:83:0b:dd:cd:7f:
e1:2a:e6:dd:27:f6:4a:cd:9d:ea:36:2e:b9:ae:f3:
a9:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:B2:87:15:8B:B1:42:DF:14:41:8D:0F:04:31:A4:DA:92:1D:71:E9
X509v3 Authority Key Identifier:
keyid:D3:1A:F2:87:2C:3F:55:03:07:38:66:DF:FE:F4:88:B7:17:83:DA:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0xryhyw_VQMHOGbf_vSItxeD2rY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/68b75c-83df-474e-a9fe-01bf1f145c26/1/0xryhyw_VQMHOGbf_vSItxeD2rY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/68b75c-83df-474e-a9fe-01bf1f145c26/1/0xryhyw_VQMHOGbf_vSItxeD2rY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:f1:64:5a:86:5b:71:02:15:48:d0:30:e5:40:28:d0:de:42:
6f:a9:0b:24:86:4e:88:67:58:d5:af:3e:64:c1:ae:fb:d2:38:
f8:9e:17:84:df:52:7e:11:c4:91:8a:50:f9:a2:7f:67:53:42:
6e:78:5b:21:dc:cc:13:39:96:86:be:ad:3e:30:a1:98:9a:fe:
8e:73:13:66:cc:a4:bb:f3:6f:f2:2b:bc:ae:0f:85:b0:27:7c:
a6:ea:9b:ba:3e:ca:86:ee:05:b5:e6:01:8f:8a:6e:4b:a5:91:
4c:14:d3:7c:f0:a0:c6:f0:7a:a6:64:27:27:b3:cb:1a:cc:b2:
5d:79:6c:eb:c9:77:1d:8c:ab:e4:44:64:08:6f:73:7b:f8:d5:
57:da:7c:a0:7b:88:f6:34:32:b7:40:f3:10:d8:3e:9c:11:e3:
3d:24:1a:3a:2e:d5:16:bd:f6:7b:ed:1a:80:8f:25:8c:1a:e4:
33:d2:5e:41:18:5d:bd:0e:d3:1f:09:71:e4:32:47:75:f8:d4:
ec:35:fd:4c:93:51:f3:86:d1:cb:ae:f0:41:2d:13:4b:d2:bf:
41:78:b8:e6:41:6b:0a:43:13:64:26:8a:f9:1d:63:9c:e4:d8:
b7:26:a5:c0:b5:c1:5c:45:6a:27:7d:00:8a:c1:57:26:59:9e:
84:bb:1f:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:11:54 2025 by rpki-client