Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/VytO2SaC1xio_ESIFAAnQGlgeV8.mft
File: VytO2SaC1xio_ESIFAAnQGlgeV8.mft (raw, json)
Hash identifier: vCUmGunpwpHk2SvRaigk1PC4fT/JAtuFJxs3a/tEbBU=
Subject key identifier: DD:C7:93:C5:53:21:5D:CC:82:7B:3E:71:95:EB:D1:F3:44:45:86:42
Authority key identifier: 57:2B:4E:D9:26:82:D7:18:A8:FC:44:88:14:00:27:40:69:60:79:5F
Certificate issuer: /CN=572b4ed92682d718a8fc4488140027406960795f
Certificate serial: 0198D54EAC8E8EC39975851F1FF651F6F066
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VytO2SaC1xio_ESIFAAnQGlgeV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/VytO2SaC1xio_ESIFAAnQGlgeV8.mft
Manifest number: 0CA6
Signing time: Sat 23 Aug 2025 05:02:39 +0000
Manifest this update: Sat 23 Aug 2025 05:02:39 +0000
Manifest next update: Sun 24 Aug 2025 05:02:39 +0000
Files and hashes: 1: 8R_SRNPLxmibFS1usJIWud4x3Z8.roa (hash: b2dIcGiMsdbDXAx7DhwSvU4UC5F6aoWQ/Pjpo9tIfQA=)
2: HSPZejR5lJB8cqlG1i1XbvBd4AY.roa (hash: LYg4VkRRLjikz7I2hzCQk0ST28urIdVmK83g08e6nBA=)
3: VytO2SaC1xio_ESIFAAnQGlgeV8.crl (hash: Ng1v5JeA7tRnptKXdSgyeV0Qn4fPBwk+jnGQfDj10Bs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/VytO2SaC1xio_ESIFAAnQGlgeV8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/VytO2SaC1xio_ESIFAAnQGlgeV8.mft
rsync://rpki.ripe.net/repository/DEFAULT/VytO2SaC1xio_ESIFAAnQGlgeV8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:ac:8e:8e:c3:99:75:85:1f:1f:f6:51:f6:f0:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=572b4ed92682d718a8fc4488140027406960795f
Validity
Not Before: Aug 23 05:02:39 2025 GMT
Not After : Aug 24 05:02:39 2025 GMT
Subject: CN=ddc793c553215dcc827b3e7195ebd1f344458642
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:77:4d:c4:23:d3:8a:66:b5:f6:ae:a0:62:8d:
1f:ed:24:b7:e3:9c:b2:f2:a4:d4:66:5e:2e:bc:9d:
44:73:e7:5c:a1:9c:5c:0f:cf:d1:f6:ec:2d:36:b6:
09:fe:a7:04:97:65:fd:e4:56:5d:44:03:48:63:e7:
cc:7a:23:9d:f7:de:9c:68:48:b6:c9:2d:5e:cf:6a:
33:24:bd:4f:c4:77:7f:ad:77:f3:f5:9a:11:91:b6:
6e:c1:0e:0c:8f:bf:26:81:db:7b:fd:23:84:17:e2:
1e:33:f6:b0:de:c7:74:d5:d9:3e:17:ec:aa:86:98:
af:da:56:71:2f:d6:9e:ca:2b:a4:c8:83:f8:9b:10:
0a:63:0d:41:62:ee:d4:e8:9b:70:2c:8e:de:c2:41:
b1:ed:e8:40:af:59:ca:0b:45:f0:c8:92:e5:b2:18:
1f:cd:97:19:63:97:f1:37:1a:c8:ef:e7:3b:64:eb:
8b:2d:d0:e6:99:24:2b:90:6c:ad:29:88:68:10:28:
5f:5f:7e:9c:6e:4c:fa:88:7d:38:3b:7c:23:50:de:
27:aa:68:28:8f:af:13:6c:26:1b:b7:ad:d7:44:c7:
c1:31:44:6b:76:f2:41:fa:18:3a:cc:38:06:4e:90:
c8:87:cb:32:0e:0c:2c:cf:c3:4b:7f:fe:fe:3c:b8:
72:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:C7:93:C5:53:21:5D:CC:82:7B:3E:71:95:EB:D1:F3:44:45:86:42
X509v3 Authority Key Identifier:
keyid:57:2B:4E:D9:26:82:D7:18:A8:FC:44:88:14:00:27:40:69:60:79:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VytO2SaC1xio_ESIFAAnQGlgeV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/VytO2SaC1xio_ESIFAAnQGlgeV8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/884c31-e509-422b-b0a1-af9fc012bd54/1/VytO2SaC1xio_ESIFAAnQGlgeV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:18:21:e9:11:22:27:57:ae:ff:2a:69:ce:e3:e1:70:ad:ab:
92:83:40:78:1c:90:6e:08:23:62:8c:a0:ff:cb:c6:23:c2:cb:
52:cc:9f:47:7e:f5:a7:89:f9:6f:bf:3d:7b:8a:2a:c3:69:0c:
28:c6:03:ce:4d:ae:42:2e:92:f1:c9:16:d4:d0:ab:b1:cf:78:
50:de:58:77:5b:8c:fc:64:d7:d0:a4:99:f8:a1:21:11:d4:b2:
ed:21:d4:39:ad:0d:1c:8b:8d:39:aa:d8:21:2e:7e:a5:27:c5:
26:ba:94:55:35:6e:5e:48:b4:71:c1:43:82:bb:a6:c8:e0:9a:
12:f7:6d:a2:e7:70:cb:f9:30:6e:c4:b8:3c:5d:ba:65:e3:81:
73:65:49:27:50:c9:74:a9:f4:12:4a:07:6b:00:a6:bb:9c:6b:
6d:9f:5d:79:f6:33:31:6c:13:7a:44:c3:48:58:5b:82:64:c5:
0d:b4:b0:8d:03:ed:3d:3b:11:07:03:84:8b:d7:f2:a5:c2:0a:
21:4e:c3:7e:7e:90:0e:16:66:56:89:94:48:9a:31:f8:7f:8c:
5d:a6:ca:9f:38:11:99:7b:f4:8f:b3:62:2f:dd:1a:25:4a:ea:
1d:59:7e:79:14:8c:b2:48:37:d8:c9:8f:08:f5:a8:0f:31:c2:
bc:a1:0a:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:23:12 2025 by rpki-client