Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/501f2b-fd1f-45ea-b494-d73dc4b41ce1/1/vEZLqdJjhfVN9iVKwkiSbTcERbA.mft
File: vEZLqdJjhfVN9iVKwkiSbTcERbA.mft (raw, json)
Hash identifier: C0bVQk6/6ma0dW+/DgKsKVd51Kgj8IQnFuhDiX44TzM=
Subject key identifier: 48:36:FA:8C:08:80:EC:EB:AB:B3:79:90:52:B7:A9:AA:D6:7B:6F:44
Authority key identifier: BC:46:4B:A9:D2:63:85:F5:4D:F6:25:4A:C2:48:92:6D:37:04:45:B0
Certificate issuer: /CN=bc464ba9d26385f54df6254ac248926d370445b0
Certificate serial: 01987E9CA4C5AE630CB422641A6C0DBB754D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vEZLqdJjhfVN9iVKwkiSbTcERbA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/501f2b-fd1f-45ea-b494-d73dc4b41ce1/1/vEZLqdJjhfVN9iVKwkiSbTcERbA.mft
Manifest number: 1625
Signing time: Wed 06 Aug 2025 09:00:51 +0000
Manifest this update: Wed 06 Aug 2025 09:00:51 +0000
Manifest next update: Thu 07 Aug 2025 09:00:51 +0000
Files and hashes: 1: gAF5yk6vmaOq2Uung0D_8Gub1gc.roa (hash: eVAKmeO8heHGdx9Kcy2Kx3p7IXGpACADu9i5ILdct+c=)
2: vEZLqdJjhfVN9iVKwkiSbTcERbA.crl (hash: vVGH9m1gtyJMBcNcSITeMiMM8ElnUZitOxd4WCIS5hQ=)
3: zyyxpnYwsTYjNu4Wy5twrx2x4fk.roa (hash: NQRYx+K4EclccAZE0WPjuwlvX5dADgQnuUhPYSSnRgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/501f2b-fd1f-45ea-b494-d73dc4b41ce1/1/vEZLqdJjhfVN9iVKwkiSbTcERbA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/501f2b-fd1f-45ea-b494-d73dc4b41ce1/1/vEZLqdJjhfVN9iVKwkiSbTcERbA.mft
rsync://rpki.ripe.net/repository/DEFAULT/vEZLqdJjhfVN9iVKwkiSbTcERbA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:9c:a4:c5:ae:63:0c:b4:22:64:1a:6c:0d:bb:75:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc464ba9d26385f54df6254ac248926d370445b0
Validity
Not Before: Aug 6 09:00:51 2025 GMT
Not After : Aug 7 09:00:51 2025 GMT
Subject: CN=4836fa8c0880ecebabb3799052b7a9aad67b6f44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f3:93:a8:fd:55:8b:03:7e:2e:af:7c:9e:a6:
ca:0b:f7:0f:6d:3f:2b:1a:05:ca:15:9a:6e:08:b5:
21:e3:5a:f5:84:44:bb:db:ce:93:1b:71:48:bb:21:
b6:8d:e7:78:68:57:0d:af:cf:b8:4c:b5:9c:1b:8a:
3a:44:40:fe:e8:99:e2:a9:35:ec:ae:1b:1a:d8:a7:
99:fd:dc:0c:af:dd:3b:b7:e1:f8:3a:de:07:e3:1a:
a8:a1:db:a3:73:c7:dc:ab:7e:93:6c:6c:ad:3a:c7:
49:56:1f:02:29:09:fe:d6:f6:a4:fe:46:d4:df:8c:
86:98:bc:81:e9:57:0f:04:18:b9:5b:3a:58:0a:19:
3e:0f:f7:69:24:da:10:d3:26:75:4f:9c:44:32:a5:
ba:5a:49:53:6b:c0:02:02:56:0d:13:f6:46:68:21:
ff:51:c2:d7:48:ef:76:91:01:21:5f:13:78:02:96:
2b:88:32:c6:82:0b:df:7b:27:d7:35:ab:bd:31:a9:
44:90:f2:b9:c1:bf:a2:73:a7:d5:74:07:b6:f8:d2:
91:c7:ab:fe:e0:14:ae:93:0c:1f:12:88:fe:65:36:
24:a5:4c:d0:88:9d:7d:5d:81:3d:44:41:31:73:d5:
24:0b:20:09:76:1c:a1:84:58:ae:af:ba:52:fb:c1:
b8:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:36:FA:8C:08:80:EC:EB:AB:B3:79:90:52:B7:A9:AA:D6:7B:6F:44
X509v3 Authority Key Identifier:
keyid:BC:46:4B:A9:D2:63:85:F5:4D:F6:25:4A:C2:48:92:6D:37:04:45:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vEZLqdJjhfVN9iVKwkiSbTcERbA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/501f2b-fd1f-45ea-b494-d73dc4b41ce1/1/vEZLqdJjhfVN9iVKwkiSbTcERbA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/501f2b-fd1f-45ea-b494-d73dc4b41ce1/1/vEZLqdJjhfVN9iVKwkiSbTcERbA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:cf:b0:25:c6:ed:ee:43:1b:38:66:a3:67:71:f1:5e:f2:f9:
a2:7e:fe:74:56:ed:84:7e:b9:2d:9a:5c:e9:cd:2c:d4:20:56:
b0:5c:0e:3d:e4:97:7e:f5:d9:36:c6:f3:0a:72:b5:7f:7b:1d:
e3:09:5e:d1:14:07:e4:c6:40:5a:3d:be:16:6b:c6:ac:2f:b8:
8a:0b:e8:54:91:45:64:c5:fd:59:12:b2:de:51:1e:b3:a6:ec:
cc:14:08:d5:5d:53:a5:05:dd:21:fc:a8:dd:78:44:8b:e4:fc:
a9:55:6d:8a:d2:fb:19:39:10:1d:d5:92:7b:fb:29:b1:2c:b1:
e9:bb:4a:d4:d9:09:43:20:53:99:f1:9d:1e:a1:bf:5b:1c:72:
29:7d:ec:88:37:65:c2:05:52:71:64:a6:38:f8:77:51:e0:a4:
94:cc:9b:40:5a:40:28:bf:78:b9:98:1d:85:19:54:9c:de:dd:
7d:11:02:a4:70:85:5f:ae:f5:b3:99:6e:9a:62:4a:2e:7d:d1:
00:9d:2d:48:5c:a9:39:da:81:80:4e:38:eb:c3:da:46:7f:67:
64:8d:aa:85:9a:4a:83:52:f8:7a:bf:5f:10:17:6c:d8:9a:5b:
60:05:f3:5d:1e:7d:63:25:ce:40:32:27:37:0c:26:ed:84:de:
00:d2:df:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:12:22 2025 by rpki-client