Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/vvUlLMrD9twUJrVT8sHHIzrMiUs.mft
File: vvUlLMrD9twUJrVT8sHHIzrMiUs.mft (raw, json)
Hash identifier: kt6Vbyu6kEcD2MFmUh6V1XLmlfRF9+XyxP+U2bVEcUw=
Subject key identifier: 0C:5B:36:CC:8B:CC:CD:40:D9:C7:C3:04:90:EC:3A:AD:89:C4:04:BF
Authority key identifier: BE:F5:25:2C:CA:C3:F6:DC:14:26:B5:53:F2:C1:C7:23:3A:CC:89:4B
Certificate issuer: /CN=bef5252ccac3f6dc1426b553f2c1c7233acc894b
Certificate serial: 0198741905F71FAA9F91E25FCF99B69A833F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vvUlLMrD9twUJrVT8sHHIzrMiUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/vvUlLMrD9twUJrVT8sHHIzrMiUs.mft
Manifest number: 1619
Signing time: Mon 04 Aug 2025 08:00:53 +0000
Manifest this update: Mon 04 Aug 2025 08:00:53 +0000
Manifest next update: Tue 05 Aug 2025 08:00:53 +0000
Files and hashes: 1: cztKiFowQoK_UYPJ2AEdLhmfdJY.roa (hash: zSStQQUNC6z+zgYsdleYs1GIe5kvbt6u6C94AWl4nn0=)
2: vvUlLMrD9twUJrVT8sHHIzrMiUs.crl (hash: ZZH1LIs4nQZHpG0Y/9TbPUGhoiuvuzeGLZVUdboK1N8=)
3: xlHcoYULH7mPEmpcqtscwUSRg-k.roa (hash: A4kztX9ZPQEUnGsY/7aFwo4jdiC6qf6Ig/R2vXwJcNU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/vvUlLMrD9twUJrVT8sHHIzrMiUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/vvUlLMrD9twUJrVT8sHHIzrMiUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/vvUlLMrD9twUJrVT8sHHIzrMiUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 08:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:19:05:f7:1f:aa:9f:91:e2:5f:cf:99:b6:9a:83:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bef5252ccac3f6dc1426b553f2c1c7233acc894b
Validity
Not Before: Aug 4 08:00:53 2025 GMT
Not After : Aug 5 08:00:53 2025 GMT
Subject: CN=0c5b36cc8bcccd40d9c7c30490ec3aad89c404bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a6:84:00:70:e3:2d:68:fa:ac:29:95:b3:52:
1a:8d:22:47:7c:9c:91:b2:8c:ac:1d:24:33:91:e0:
4e:b4:c6:d2:bc:83:53:9b:19:2e:33:fe:b9:f6:71:
f0:5a:6d:16:d5:17:ac:ba:7c:16:ff:0a:43:d5:e2:
af:f4:6d:2f:42:d6:bd:9a:14:28:47:53:7e:2e:89:
5a:33:59:59:63:e4:36:b1:d1:1d:7d:ec:e2:92:61:
e3:3b:e0:7c:33:bc:55:38:9e:b6:5c:a4:99:e1:19:
f1:69:80:d1:1f:34:b3:c9:ba:dc:11:69:f4:96:7a:
6f:c1:72:f4:64:f2:24:54:0c:d9:67:a6:d3:f9:fd:
26:cb:07:da:40:76:70:e2:e8:9b:03:e2:19:f1:d1:
af:40:ad:90:13:77:bb:95:c1:15:79:8c:ad:65:b7:
d8:4a:dc:29:27:d1:7d:dc:43:3e:1a:8a:21:3d:ee:
25:05:15:40:6d:cc:6e:f9:bd:c9:4f:64:75:24:7e:
5f:56:a0:65:20:7a:62:76:2c:1b:32:b5:fc:90:c4:
64:f7:48:9f:ba:49:4d:d2:55:68:56:54:81:35:ee:
e4:78:83:c8:c6:84:08:ca:3b:77:3b:3b:15:51:e5:
a8:78:93:3e:8a:01:be:a0:39:49:5e:68:e0:49:9c:
61:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:5B:36:CC:8B:CC:CD:40:D9:C7:C3:04:90:EC:3A:AD:89:C4:04:BF
X509v3 Authority Key Identifier:
keyid:BE:F5:25:2C:CA:C3:F6:DC:14:26:B5:53:F2:C1:C7:23:3A:CC:89:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vvUlLMrD9twUJrVT8sHHIzrMiUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/vvUlLMrD9twUJrVT8sHHIzrMiUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/vvUlLMrD9twUJrVT8sHHIzrMiUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:93:5b:09:2f:aa:a9:ae:b5:79:c1:33:ef:7d:97:c2:58:8b:
42:ac:14:31:26:76:34:35:ef:04:d4:52:d8:23:c2:bf:20:fa:
7e:22:3d:43:0c:13:cc:6b:5d:b9:2f:0a:52:5e:13:12:34:36:
d6:85:13:cd:77:6f:e9:b2:9f:ac:76:9a:35:9b:31:74:f4:af:
9e:ee:b9:b2:6a:a6:30:03:bf:92:fb:ae:88:0c:a5:e9:ed:0b:
ed:b6:81:13:11:ca:7b:2c:3a:7b:d6:8f:03:57:7b:8e:d9:ee:
22:39:a3:4c:99:06:f4:f3:26:81:81:af:10:ea:c3:e4:14:14:
9f:3e:60:5f:84:11:f2:41:a3:8d:f7:9c:81:e4:df:81:fa:85:
9b:3f:dd:09:95:1b:b4:4f:db:7f:3d:13:9d:37:94:05:64:be:
0b:67:b8:0f:d8:05:24:0d:b0:9c:f5:db:17:c5:28:cb:1f:f7:
c9:81:fa:74:90:58:63:c0:eb:7c:b3:d0:a9:95:61:ea:78:5a:
7a:8d:c5:a5:52:0b:f5:f2:5f:87:8a:65:bf:74:d6:e1:49:d7:
1e:a6:55:d1:25:ca:bf:99:d4:dc:12:ee:9c:f2:d7:70:bc:3c:
aa:42:ea:f5:19:33:c5:7d:c0:12:b3:30:ff:6e:16:6d:03:af:
2e:f1:e7:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:00:40 2025 by rpki-client