Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/94a062-8510-44d5-9e4b-c32a9a085ae0/1/vx1ZdLTlmcpy3MTawGbXcUIC78k.mft
File: vx1ZdLTlmcpy3MTawGbXcUIC78k.mft (raw, json)
Hash identifier: QXtC90B9glX3PFBn5kvYFs9royu4bgvmwCs3Suz/phQ=
Subject key identifier: E7:5E:44:61:78:CF:08:AE:20:85:CE:03:50:66:66:CC:F6:EE:9C:3C
Authority key identifier: BF:1D:59:74:B4:E5:99:CA:72:DC:C4:DA:C0:66:D7:71:42:02:EF:C9
Certificate issuer: /CN=bf1d5974b4e599ca72dcc4dac066d7714202efc9
Certificate serial: 0198D5F1C200520FD1F4EC6F16F93FF2E1CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vx1ZdLTlmcpy3MTawGbXcUIC78k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/94a062-8510-44d5-9e4b-c32a9a085ae0/1/vx1ZdLTlmcpy3MTawGbXcUIC78k.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 08:00:47 +0000
Manifest this update: Sat 23 Aug 2025 08:00:47 +0000
Manifest next update: Sun 24 Aug 2025 08:00:47 +0000
Files and hashes: 1: oj5pO6PbAIedrwIhX-SgXkuxPgQ.roa (hash: chkdnhybp0jJ1hG80xmgFXkOcgLkze7nqAVVBuJ+bhU=)
2: vx1ZdLTlmcpy3MTawGbXcUIC78k.crl (hash: 5I+u1DdRspM1IyWM2UPrJMm+t+oajM4FDFPm+N0tUQc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/94a062-8510-44d5-9e4b-c32a9a085ae0/1/vx1ZdLTlmcpy3MTawGbXcUIC78k.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/94a062-8510-44d5-9e4b-c32a9a085ae0/1/vx1ZdLTlmcpy3MTawGbXcUIC78k.mft
rsync://rpki.ripe.net/repository/DEFAULT/vx1ZdLTlmcpy3MTawGbXcUIC78k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:c2:00:52:0f:d1:f4:ec:6f:16:f9:3f:f2:e1:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf1d5974b4e599ca72dcc4dac066d7714202efc9
Validity
Not Before: Aug 23 08:00:47 2025 GMT
Not After : Aug 24 08:00:47 2025 GMT
Subject: CN=e75e446178cf08ae2085ce03506666ccf6ee9c3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:de:54:ba:1e:fa:5f:aa:41:e8:c4:98:63:b0:
c1:78:3e:e7:ae:88:71:e7:23:84:23:67:03:9f:67:
7e:4b:95:54:0e:37:e6:00:39:b5:9d:ef:43:a3:ab:
91:7f:5a:25:9f:01:2c:35:e6:6f:2f:05:48:e7:53:
18:87:f5:de:cf:d2:53:c2:aa:1d:b2:2b:c4:8c:8a:
9e:b2:95:af:68:3d:50:1d:f6:06:5d:93:3b:ce:67:
b6:c6:00:2b:ee:5c:87:f5:53:55:ce:e8:35:7a:a7:
0e:0c:00:29:18:3f:46:55:0d:bb:ee:92:57:3e:73:
41:23:02:2b:57:fc:bb:6c:1f:91:9c:52:d1:a9:d7:
6c:5f:8a:a2:ed:6d:2a:ef:19:cf:98:81:1f:47:a3:
87:f5:8e:85:b4:c8:9e:1f:f6:21:61:63:92:c2:dd:
00:fc:34:68:da:2a:de:f3:1e:99:86:64:0c:3c:81:
8e:df:ca:82:9b:a2:4b:aa:25:a6:d4:b4:82:33:a3:
b9:56:b8:7d:b8:09:27:2b:a1:67:a8:23:7d:af:31:
3f:66:dc:a4:ca:f6:52:a2:94:4c:6e:8c:9c:72:ab:
dc:d5:00:3e:6d:88:ec:1b:a8:0d:8c:4e:79:c2:8b:
0d:4c:dc:d0:78:28:54:ba:df:b7:0f:dd:f1:30:ac:
ce:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:5E:44:61:78:CF:08:AE:20:85:CE:03:50:66:66:CC:F6:EE:9C:3C
X509v3 Authority Key Identifier:
keyid:BF:1D:59:74:B4:E5:99:CA:72:DC:C4:DA:C0:66:D7:71:42:02:EF:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vx1ZdLTlmcpy3MTawGbXcUIC78k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/94a062-8510-44d5-9e4b-c32a9a085ae0/1/vx1ZdLTlmcpy3MTawGbXcUIC78k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/94a062-8510-44d5-9e4b-c32a9a085ae0/1/vx1ZdLTlmcpy3MTawGbXcUIC78k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:99:69:72:ac:f6:9a:ee:4a:57:24:21:e0:5b:03:26:d8:52:
28:ee:e7:1a:f3:50:b4:b4:63:5b:a2:45:d3:fb:b2:db:d2:3a:
ee:0a:13:3f:e2:ce:ed:17:72:fa:c4:75:b5:98:1a:9a:78:cb:
3e:c4:f2:a1:63:2b:b3:fe:b6:d3:b4:2a:d4:c1:12:be:57:a6:
d1:f2:1a:68:5b:cd:9d:3a:70:b2:07:2c:25:43:e3:a7:9f:aa:
e7:0e:df:f2:64:4a:ad:b8:49:c3:18:a4:2a:54:09:f4:7c:66:
22:5e:0c:9e:66:52:75:0d:39:14:36:a7:e0:1c:bb:4d:96:b7:
f6:08:70:66:80:e2:93:d1:cf:19:ca:0a:85:d1:41:7d:87:09:
e8:33:22:a2:a9:f8:ed:de:21:4a:bd:f9:5a:ac:58:ab:84:53:
8c:b3:6b:81:93:d8:7b:12:f9:df:fe:d7:1e:ef:3c:15:9c:e9:
12:37:34:a3:85:d7:b6:ae:84:68:43:dd:2a:18:ed:87:15:f2:
73:d4:b1:24:2e:42:ed:42:8b:0d:9d:1b:c8:09:f4:bd:24:a4:
2b:7f:1f:3b:3c:28:9d:76:13:43:ee:f3:c1:2a:73:7b:87:77:
fc:0d:45:92:fe:90:a4:08:33:cc:0f:37:2f:b1:9d:a1:4c:8e:
b7:11:13:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:52:46 2025 by rpki-client