Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/vdJEIU12Ro0_tyq60Yku8j3t6Xg.mft
File: vdJEIU12Ro0_tyq60Yku8j3t6Xg.mft (raw, json)
Hash identifier: tSBlyVpdlAQriYvR1tLAB15XZIlKrjwtcygnJygtDm4=
Subject key identifier: 41:44:79:F1:67:A8:4D:AC:F2:FA:B4:1D:AD:63:25:EE:28:D2:90:92
Authority key identifier: BD:D2:44:21:4D:76:46:8D:3F:B7:2A:BA:D1:89:2E:F2:3D:ED:E9:78
Certificate issuer: /CN=bdd244214d76468d3fb72abad1892ef23dede978
Certificate serial: 0198D583AC28201BF50F019BB40B5610A320
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vdJEIU12Ro0_tyq60Yku8j3t6Xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/vdJEIU12Ro0_tyq60Yku8j3t6Xg.mft
Manifest number: 16A2
Signing time: Sat 23 Aug 2025 06:00:32 +0000
Manifest this update: Sat 23 Aug 2025 06:00:32 +0000
Manifest next update: Sun 24 Aug 2025 06:00:32 +0000
Files and hashes: 1: MpUBZneqVecXcQlX3BSOAck4dLY.roa (hash: ENeJkPrdxxjivDiJnHpO/+CgDbk8hQrCxtDjeE3d5+0=)
2: vdJEIU12Ro0_tyq60Yku8j3t6Xg.crl (hash: E7IpB2Cmc9cL5MyZAnrdTTPmGoDeeePbu9XIJ5gvtT8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/vdJEIU12Ro0_tyq60Yku8j3t6Xg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/vdJEIU12Ro0_tyq60Yku8j3t6Xg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vdJEIU12Ro0_tyq60Yku8j3t6Xg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:ac:28:20:1b:f5:0f:01:9b:b4:0b:56:10:a3:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdd244214d76468d3fb72abad1892ef23dede978
Validity
Not Before: Aug 23 06:00:32 2025 GMT
Not After : Aug 24 06:00:32 2025 GMT
Subject: CN=414479f167a84dacf2fab41dad6325ee28d29092
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:cc:d4:6c:13:b7:0c:c9:cb:59:4b:64:ad:49:
db:6e:91:15:0e:af:36:ee:a0:57:bf:9d:c7:da:0e:
d2:01:90:c7:1b:76:6f:35:89:41:f7:0d:40:e7:5e:
2e:f0:eb:31:58:45:f3:df:db:3f:cd:1e:26:5e:43:
6c:10:e8:cb:37:35:7f:5b:49:4f:40:e3:a7:e0:68:
9a:1e:ae:24:88:13:09:2f:67:df:ed:be:fe:99:c7:
d6:2a:e1:15:49:92:d2:2d:53:f7:4d:c0:0a:76:3b:
9d:fa:62:7f:b5:e4:d3:8f:77:76:44:9b:db:55:c5:
26:07:22:bc:7b:60:14:e5:ba:32:1f:af:6b:74:da:
27:df:0b:03:f1:47:e9:58:e1:0c:de:2c:3d:dd:92:
f0:1e:b0:3a:23:ce:97:72:b0:e9:1f:63:6f:70:de:
4c:b6:9b:b0:0d:a5:91:ee:bd:d5:a1:46:7d:1d:2a:
41:ab:bd:8d:27:59:d2:0d:7a:22:fe:28:13:9c:26:
33:ba:55:9b:59:a2:5b:15:cf:3c:5e:2f:51:c7:2b:
9c:dd:0d:52:b0:da:11:47:92:83:a6:8b:84:e5:fd:
17:b8:84:15:20:2f:33:1d:e8:d5:3b:2b:e7:a2:fb:
7b:b6:c4:36:08:5c:e3:24:53:81:6f:3b:66:a7:3f:
73:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:44:79:F1:67:A8:4D:AC:F2:FA:B4:1D:AD:63:25:EE:28:D2:90:92
X509v3 Authority Key Identifier:
keyid:BD:D2:44:21:4D:76:46:8D:3F:B7:2A:BA:D1:89:2E:F2:3D:ED:E9:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vdJEIU12Ro0_tyq60Yku8j3t6Xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/vdJEIU12Ro0_tyq60Yku8j3t6Xg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/vdJEIU12Ro0_tyq60Yku8j3t6Xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:d6:a2:bd:5a:04:4b:d9:31:09:61:0c:5e:da:b4:13:09:e9:
26:85:e0:d9:d1:2e:51:81:9e:f1:af:cf:79:f5:17:1f:97:36:
bb:55:86:52:21:34:4e:6a:6c:8a:1c:4a:88:5e:db:7b:40:3a:
5c:28:e2:27:7e:43:f0:2f:ab:5e:34:28:2f:09:cf:f1:ef:d7:
5c:ba:44:6c:68:2d:e8:8a:1d:3c:e2:18:39:b6:dc:1a:13:9c:
81:2e:79:11:b2:f6:1d:94:95:74:8d:e7:21:55:03:c8:1c:64:
2a:c9:3e:6f:0f:9b:30:ee:02:3f:81:fd:76:4f:ee:d6:9d:a6:
c1:c0:23:74:a5:29:00:df:0b:09:a6:44:d6:51:f4:ae:71:5d:
f7:e3:87:e4:f6:aa:44:f5:af:a4:2b:5f:29:5d:9e:86:a4:6a:
2c:6d:26:c8:6c:bb:0d:47:23:98:2e:06:c9:c5:96:d7:2a:07:
9b:aa:dc:43:97:da:5a:80:d1:e8:92:87:1d:7d:09:de:8f:5b:
09:62:ac:d1:94:9c:b7:c1:0f:06:7b:39:00:fd:56:52:3d:63:
ea:56:e4:d7:bf:b8:74:e6:3a:ba:7b:79:a9:f8:8d:ac:73:ee:
52:56:b0:43:83:02:83:e5:dc:df:c4:a5:26:50:9f:fc:09:93:
dd:d3:ff:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:32:51 2025 by rpki-client