Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.mft
File: VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.mft (raw, json)
Hash identifier: XKbnNoB0gtcm4spLV3qx8Gwbc649joJbO3B+aYEsW/Y=
Subject key identifier: 2A:4D:9E:82:92:D2:0E:1A:C5:E5:40:B9:0A:44:FE:3F:D3:CE:94:A7
Authority key identifier: 57:13:0F:79:9F:8A:89:85:50:2A:2E:A3:35:60:37:67:40:85:CF:CA
Certificate issuer: /CN=57130f799f8a8985502a2ea3356037674085cfca
Certificate serial: 0198D5159ADCC562D3E2F7D08C0177DDB78E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.mft
Manifest number: 1651
Signing time: Sat 23 Aug 2025 04:00:19 +0000
Manifest this update: Sat 23 Aug 2025 04:00:19 +0000
Manifest next update: Sun 24 Aug 2025 04:00:19 +0000
Files and hashes: 1: 0cSnkMJkJHeFaYdY1KT0ScO6smc.roa (hash: Gcz0UPXLhZmjDb4FihMibqoJMQnP847xcHc8Qvl5GWc=)
2: 10H4MUNhSSva047O9EEp6SPRBJE.roa (hash: JmvtAf/+biHEI+go7XB/O90LiW31KmrT39neQ8bWDTc=)
3: 78KScp2LVWw2hOVmr_h_Gkcv34A.roa (hash: Ptq/z1pA4OnP8t08S5vn7Az3pzr/nZN/5vkEHzVtW1s=)
4: GhEBs7fMOUU2KjePNnbULHKRHoA.roa (hash: Dow24ARSNfhxgpUv5NrsgvZFPFxhNN0Fkn5hgDvl4wg=)
5: H9Yj6XrfYViqOy5X6VeUZJTi5tI.roa (hash: 4orcq82HkX9/XUoOT4IA7nH/E15MI2gX+xqdM0ifFYg=)
6: VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.crl (hash: rzGk3fh4qnqmK+ZaFPAbr/yAB4QFpHtM4dGBVICJmwc=)
7: tkuxtWzbusmwWQub2z4rjkdwXdc.roa (hash: JTVZbUmozTnvdMYKVuksSNIaPHfDAOZ4PEG/FbAO7wg=)
8: wPqYVNKJADvVgGucnETD7HuiSvs.roa (hash: 0eyTJy9gG8F8Xex/RtpsLoJCxS1EJ4y1hxoKVvkvOZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:9a:dc:c5:62:d3:e2:f7:d0:8c:01:77:dd:b7:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57130f799f8a8985502a2ea3356037674085cfca
Validity
Not Before: Aug 23 04:00:19 2025 GMT
Not After : Aug 24 04:00:19 2025 GMT
Subject: CN=2a4d9e8292d20e1ac5e540b90a44fe3fd3ce94a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:4b:b6:76:13:49:d2:ed:a8:9f:2f:34:c4:2c:
25:d9:b4:c5:be:ac:ee:c8:47:df:ac:b9:dd:33:fe:
a2:4a:38:bf:bc:d6:9e:af:c2:1d:9e:02:a2:89:73:
81:42:d3:68:b1:6d:47:ce:45:61:59:42:85:39:a1:
dc:13:b8:6c:72:87:10:44:d5:de:4f:05:e4:ac:a2:
37:f5:d0:86:b2:ef:20:ef:2c:53:24:5b:34:3c:db:
76:68:80:9a:a9:11:37:ff:be:89:8a:de:ab:93:b2:
c9:1a:15:b9:27:e3:e7:4c:c0:09:5b:56:64:c2:ac:
04:49:cb:20:dc:ba:c2:d3:74:21:ed:93:89:dd:5f:
d5:c9:6a:71:b3:fc:5b:c0:1e:67:63:aa:92:53:7a:
cb:26:e4:f1:66:62:9e:6a:5b:ae:8a:8f:b1:0b:35:
f4:82:56:e7:86:fd:b7:2f:4a:58:d4:6c:11:2f:ca:
df:8d:f2:09:16:e5:19:6d:aa:b3:76:c2:59:e4:92:
2b:4f:cb:7c:e3:22:32:ca:18:29:ac:64:5a:4b:9e:
32:ba:26:09:1a:b3:d5:db:3e:46:74:cb:6a:41:a6:
db:aa:19:b4:17:f9:a5:2b:20:38:05:1e:c5:27:cd:
d8:96:7a:dd:56:ff:5e:c2:58:33:4b:10:44:e4:46:
89:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:4D:9E:82:92:D2:0E:1A:C5:E5:40:B9:0A:44:FE:3F:D3:CE:94:A7
X509v3 Authority Key Identifier:
keyid:57:13:0F:79:9F:8A:89:85:50:2A:2E:A3:35:60:37:67:40:85:CF:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:c5:74:41:f6:da:e8:37:86:20:e5:cb:0e:a3:61:d5:fa:f7:
d1:32:6e:1c:43:29:cb:ca:78:62:81:89:6d:fb:1f:f8:58:5e:
c0:70:cc:14:39:fe:0b:15:b3:46:a3:67:12:9f:3e:32:fa:58:
54:1b:34:23:06:b7:2d:3e:1a:c2:b9:4b:a5:78:da:c6:bd:37:
d5:9e:d6:bf:c1:48:2a:ed:d7:ca:1b:9a:8a:b7:e6:cc:6e:a6:
2b:cd:d2:fa:d6:76:1b:2b:c1:d6:fb:6c:b9:4d:c0:6b:ff:7c:
f3:6a:74:a2:77:6b:4c:80:71:1b:a6:18:23:15:a2:38:3e:89:
e4:c0:b0:5c:11:f3:07:26:8f:5d:57:92:5a:a3:dd:21:75:2c:
55:80:5c:05:9a:69:ab:3d:3b:a5:3c:04:c1:8d:6f:86:9c:4e:
4f:5c:6e:3a:61:4a:7a:42:7d:51:12:9d:03:d5:fa:57:04:d3:
9b:c9:9c:51:9e:b5:de:87:2c:cc:a1:e4:53:f4:ed:50:f0:af:
47:c5:2d:aa:b0:cf:89:83:7a:9a:e7:1e:df:0d:21:d7:db:11:
1a:37:49:e7:f9:d4:5d:c7:15:59:31:5f:59:9d:49:d6:0e:fa:
4c:ff:e0:40:e5:70:21:1a:40:02:b8:90:14:8d:b5:44:8f:92:
3d:24:3f:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:18:43 2025 by rpki-client