Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/6dbc2f-0f0b-4a2f-b149-b75983122455/1/1-vcGbaCaViJCYORuom3Jyx26jjc.mft
File: 1-vcGbaCaViJCYORuom3Jyx26jjc.mft (raw, json)
Hash identifier: R+lR5t2VoFVXKRpP8b1pXjjalj5X7oN5zkxp52lP4Zc=
Subject key identifier: 8A:CA:CE:A9:A7:FD:2A:EE:C9:84:D3:27:F1:FE:80:3D:15:D5:DF:1E
Authority key identifier: FA:F7:06:6D:A0:9A:56:22:42:60:E4:6E:A2:6D:C9:CB:1D:BA:8E:37
Certificate issuer: /CN=faf7066da09a56224260e46ea26dc9cb1dba8e37
Certificate serial: 0198D4E00AB306A88064F5E606E213E30A24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-vcGbaCaViJCYORuom3Jyx26jjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/6dbc2f-0f0b-4a2f-b149-b75983122455/1/1-vcGbaCaViJCYORuom3Jyx26jjc.mft
Manifest number: 118D
Signing time: Sat 23 Aug 2025 03:01:49 +0000
Manifest this update: Sat 23 Aug 2025 03:01:49 +0000
Manifest next update: Sun 24 Aug 2025 03:01:49 +0000
Files and hashes: 1: 0npgtCw2cniYZRSczr6L1wq2NDE.roa (hash: 7qLMTW4Hb0+zjkcR3VjQ/z+HhWTfAgpVarVUL4CErX4=)
2: 1-vcGbaCaViJCYORuom3Jyx26jjc.crl (hash: +vWSjNswd5JwJDQgLhUvuTTikiIdpISFM0GjHyaUtg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/6dbc2f-0f0b-4a2f-b149-b75983122455/1/1-vcGbaCaViJCYORuom3Jyx26jjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/6dbc2f-0f0b-4a2f-b149-b75983122455/1/1-vcGbaCaViJCYORuom3Jyx26jjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-vcGbaCaViJCYORuom3Jyx26jjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:0a:b3:06:a8:80:64:f5:e6:06:e2:13:e3:0a:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faf7066da09a56224260e46ea26dc9cb1dba8e37
Validity
Not Before: Aug 23 03:01:49 2025 GMT
Not After : Aug 24 03:01:49 2025 GMT
Subject: CN=8acacea9a7fd2aeec984d327f1fe803d15d5df1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:70:79:b4:d6:16:32:fe:1c:60:2d:2b:b9:27:
95:0a:02:47:b1:5a:c3:e5:0b:df:97:63:f1:74:67:
47:0e:f0:ca:f5:c3:57:ac:d2:db:72:79:d8:86:13:
21:ed:2e:b5:b3:eb:8c:03:6b:8d:74:6c:f0:7f:60:
87:56:3b:24:5a:62:cc:97:09:b9:7a:be:e9:f6:fa:
57:21:e4:81:01:af:41:d3:71:24:bc:fa:bb:90:55:
5e:94:f8:8d:d4:b6:9b:9a:d2:62:6a:ae:5f:2e:c6:
87:7d:1c:a2:a9:78:8a:d4:1d:37:14:2e:4a:09:17:
3f:47:3d:48:63:5a:3a:d5:b7:2d:92:ea:5a:43:8b:
22:f1:27:66:2f:9b:d1:27:02:c0:67:e5:ed:69:5f:
48:a4:03:f6:d7:14:8e:40:8c:86:aa:fe:92:70:3d:
5c:43:58:5c:72:f8:3a:e2:a6:5d:93:4f:60:3d:75:
54:b5:a4:cf:58:7f:bc:66:d0:f3:46:2e:37:5c:6f:
0c:c9:d6:e1:b2:68:f4:c6:cb:c9:95:ae:f0:3d:a7:
72:26:c3:66:63:c8:e1:e3:5e:a2:99:04:54:96:aa:
2d:30:d2:54:08:4a:30:34:ba:72:f6:1b:6b:4d:bd:
e4:53:3c:91:5a:35:62:97:ca:6f:45:39:e0:ae:a6:
58:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:CA:CE:A9:A7:FD:2A:EE:C9:84:D3:27:F1:FE:80:3D:15:D5:DF:1E
X509v3 Authority Key Identifier:
keyid:FA:F7:06:6D:A0:9A:56:22:42:60:E4:6E:A2:6D:C9:CB:1D:BA:8E:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-vcGbaCaViJCYORuom3Jyx26jjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/6dbc2f-0f0b-4a2f-b149-b75983122455/1/1-vcGbaCaViJCYORuom3Jyx26jjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/6dbc2f-0f0b-4a2f-b149-b75983122455/1/1-vcGbaCaViJCYORuom3Jyx26jjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:25:9b:5c:63:8e:78:19:3b:b5:65:b3:7e:f0:fc:1c:7e:85:
9f:4e:9e:f7:1d:cd:64:f3:56:e7:0f:c8:00:3d:99:2c:c6:22:
2b:65:8e:3d:d7:9c:3e:9e:1a:a2:bb:3e:0b:4c:29:c4:c9:5b:
6c:25:a3:db:e9:51:3a:ef:80:8f:dd:08:7d:3f:61:a6:57:7a:
41:56:4e:2c:67:ef:e6:01:b8:3e:aa:20:df:b9:77:bd:e8:14:
91:9d:07:d1:20:59:86:24:a1:d3:cb:b5:fe:64:f6:73:88:f7:
d5:af:9e:0a:f8:72:60:d2:59:7c:3a:97:e1:75:83:19:65:4c:
ee:88:d4:40:2d:3c:51:59:16:6b:51:6d:f6:65:1e:03:08:0c:
d0:2b:27:87:10:ae:75:2b:b6:3d:30:74:b9:b5:63:4a:a8:91:
6f:86:e9:d6:67:eb:20:8e:2a:b3:d8:70:58:0a:12:bd:2a:a7:
e5:a7:de:8f:62:5e:86:b9:aa:9f:86:25:a7:15:97:e9:fd:36:
83:05:16:05:a9:62:11:de:c4:3f:29:fc:95:bb:c9:01:cb:39:
a3:5a:93:dc:33:c6:d1:ce:33:b1:f5:d7:aa:16:4b:ea:2b:27:
c5:4e:24:4f:3d:41:8d:b4:e0:72:eb:92:6f:94:f6:ce:3a:03:
3b:c0:e0:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:24:15 2025 by rpki-client