Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/243b53-4b94-4244-a8ec-7c549f1ed16c/1/vKDsWVZDJCN0INUGubSY11LuIWg.mft
File: vKDsWVZDJCN0INUGubSY11LuIWg.mft (raw, json)
Hash identifier: 1PfZ2hmcZRtJOGzj85HOfmE8x/7XVHPgNU2Dgr7ZZZY=
Subject key identifier: F6:14:BC:33:40:87:47:20:09:14:DD:8F:9A:2F:40:5E:1C:B2:74:BF
Authority key identifier: BC:A0:EC:59:56:43:24:23:74:20:D5:06:B9:B4:98:D7:52:EE:21:68
Certificate issuer: /CN=bca0ec59564324237420d506b9b498d752ee2168
Certificate serial: 0198D515C29CE8DAB21E1995E52831CE4D2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vKDsWVZDJCN0INUGubSY11LuIWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/243b53-4b94-4244-a8ec-7c549f1ed16c/1/vKDsWVZDJCN0INUGubSY11LuIWg.mft
Manifest number: 1650
Signing time: Sat 23 Aug 2025 04:00:29 +0000
Manifest this update: Sat 23 Aug 2025 04:00:29 +0000
Manifest next update: Sun 24 Aug 2025 04:00:29 +0000
Files and hashes: 1: 4Yqz6mzAxsTp7LTA9pLRdzvqp7A.roa (hash: Ow3YpmTpRMl6qMkXjave/Z2C+8qskJo+DojTdIc7TV4=)
2: angMmzMX4gcbPlkGiqliyl-4RsY.roa (hash: EA5h2yHtnaMB3WqoR9kfvdgGUE89WgrdN7IrWKjGg8w=)
3: quctJA6JvCwqA-qZHXeVYB1FfY8.roa (hash: ktXd2zEikg+b61S+QwkN+l6BxFbDccaraJMDVmopSSI=)
4: vKDsWVZDJCN0INUGubSY11LuIWg.crl (hash: PXfISlM6INocVM1mJBZSalJsuMdRNdLHklLRcFFsE60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/243b53-4b94-4244-a8ec-7c549f1ed16c/1/vKDsWVZDJCN0INUGubSY11LuIWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/243b53-4b94-4244-a8ec-7c549f1ed16c/1/vKDsWVZDJCN0INUGubSY11LuIWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vKDsWVZDJCN0INUGubSY11LuIWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:c2:9c:e8:da:b2:1e:19:95:e5:28:31:ce:4d:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bca0ec59564324237420d506b9b498d752ee2168
Validity
Not Before: Aug 23 04:00:29 2025 GMT
Not After : Aug 24 04:00:29 2025 GMT
Subject: CN=f614bc33408747200914dd8f9a2f405e1cb274bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a8:a6:4b:63:d1:35:44:bd:b5:bc:cc:d0:58:
c3:72:9c:bb:3c:cb:c1:e4:a1:e8:b9:3e:64:b8:b4:
0b:c9:75:ac:9e:77:6c:f6:de:53:b2:aa:da:5e:db:
97:1d:db:37:46:5b:20:cb:74:7e:5f:62:b3:bb:cf:
0c:d0:4c:d0:85:8e:20:85:78:92:41:c5:74:b9:4b:
e9:37:b4:3c:5a:39:80:fa:0b:38:3f:70:be:29:99:
d1:92:f4:3f:b0:91:fe:c7:cb:70:d2:9d:f9:c4:30:
ff:27:1d:53:73:d1:d7:a0:3e:4e:83:98:df:90:c6:
df:a1:10:d8:ba:1e:d7:9d:84:87:cf:01:0d:c2:f7:
98:85:bf:92:ec:78:4d:da:de:0d:7d:52:e8:88:5a:
97:2b:1d:c5:d2:5b:4f:d7:5a:e1:e0:89:61:13:de:
26:20:f8:83:f1:2b:87:9d:76:2c:f4:6c:ca:36:ce:
f9:fc:f0:ad:d8:7a:ea:aa:5d:7a:3c:6a:12:ea:be:
e4:ed:24:61:7e:6b:2c:24:22:21:3d:ca:d4:22:6a:
7d:9f:94:3d:1e:b2:ab:36:85:e1:af:ef:1b:d6:d7:
22:b5:6a:09:18:8e:6d:f1:c2:6e:38:cf:ff:a9:3c:
b3:aa:18:c6:07:10:e5:c1:af:47:21:8a:37:b9:d7:
0d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:14:BC:33:40:87:47:20:09:14:DD:8F:9A:2F:40:5E:1C:B2:74:BF
X509v3 Authority Key Identifier:
keyid:BC:A0:EC:59:56:43:24:23:74:20:D5:06:B9:B4:98:D7:52:EE:21:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vKDsWVZDJCN0INUGubSY11LuIWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/243b53-4b94-4244-a8ec-7c549f1ed16c/1/vKDsWVZDJCN0INUGubSY11LuIWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/243b53-4b94-4244-a8ec-7c549f1ed16c/1/vKDsWVZDJCN0INUGubSY11LuIWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:e8:a7:27:d7:a6:ff:cf:c0:15:76:bd:be:0f:eb:83:05:b2:
c9:0d:93:57:d1:d8:48:8d:3b:a1:16:0d:3d:f0:58:0f:12:9d:
a2:b6:3c:87:58:29:e8:9d:fa:b6:af:c8:c8:da:04:e8:6a:0d:
6a:21:fb:4c:32:9f:dd:96:97:e5:25:2d:4a:5a:09:24:d4:cd:
9e:bf:5f:9b:51:c1:41:6c:75:ef:99:fb:4c:54:38:35:fc:4f:
9d:e7:2b:1a:00:d6:cb:20:ef:71:6f:d7:5e:71:d2:4d:07:08:
3e:7d:d8:fc:e6:86:76:0a:5b:f2:19:f7:24:eb:c5:42:40:eb:
c3:a5:12:e8:b2:7f:f0:ee:06:33:3c:3e:c8:e6:52:37:2a:77:
bd:75:73:ef:ea:15:8f:f5:55:95:1e:39:a5:19:a7:a8:02:b9:
3c:0f:26:e2:94:ef:9a:e4:25:51:c5:2c:8e:69:6b:5e:02:47:
0d:3c:f2:89:d4:35:5b:1b:fc:6b:50:0a:43:5c:45:e8:29:a3:
6c:70:34:15:bf:f3:99:52:da:09:0d:33:cd:a1:74:1b:de:72:
bc:b9:0a:33:85:8a:cd:f1:36:8b:d3:5e:35:90:77:de:b5:5a:
ae:a6:bf:02:60:e1:15:e9:ac:f0:26:b5:db:38:c3:85:df:09:
1e:57:8d:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:06:43 2025 by rpki-client