
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/f5fc76-5016-4968-829b-473045a93a05/1/vPVGNoDRS2RYax1bRlZjvLV35pM.mft
File: vPVGNoDRS2RYax1bRlZjvLV35pM.mft (raw, json)
Hash identifier: 79YrbUKA/cWGzwWwX/tiWdUd+ju8H3DCrCNi0smqmMg=
Subject key identifier: 3B:8F:16:7E:AA:6A:45:CE:16:44:D5:A0:23:82:61:57:1B:13:CB:7E
Authority key identifier: BC:F5:46:36:80:D1:4B:64:58:6B:1D:5B:46:56:63:BC:B5:77:E6:93
Certificate issuer: /CN=bcf5463680d14b64586b1d5b465663bcb577e693
Certificate serial: 01988BB3E094CF2A3BB3880E960C5EF97382
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vPVGNoDRS2RYax1bRlZjvLV35pM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/f5fc76-5016-4968-829b-473045a93a05/1/vPVGNoDRS2RYax1bRlZjvLV35pM.mft
Manifest number: 1625
Signing time: Fri 08 Aug 2025 22:01:18 +0000
Manifest this update: Fri 08 Aug 2025 22:01:18 +0000
Manifest next update: Sat 09 Aug 2025 22:01:18 +0000
Files and hashes: 1: uVkbwn7y_5MMeq7i0JNXRtOhxHs.roa (hash: ENXYHNx7P9jtVpFvO/C3/8L3MM9tHfB0gwOuIrKil9g=)
2: vPVGNoDRS2RYax1bRlZjvLV35pM.crl (hash: c6tZp9wvq32iBRc98n2NQsYJ6Lw8/noGwPmIp/FwXDw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/f5fc76-5016-4968-829b-473045a93a05/1/vPVGNoDRS2RYax1bRlZjvLV35pM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/f5fc76-5016-4968-829b-473045a93a05/1/vPVGNoDRS2RYax1bRlZjvLV35pM.mft
rsync://rpki.ripe.net/repository/DEFAULT/vPVGNoDRS2RYax1bRlZjvLV35pM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:b3:e0:94:cf:2a:3b:b3:88:0e:96:0c:5e:f9:73:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcf5463680d14b64586b1d5b465663bcb577e693
Validity
Not Before: Aug 8 22:01:18 2025 GMT
Not After : Aug 9 22:01:18 2025 GMT
Subject: CN=3b8f167eaa6a45ce1644d5a0238261571b13cb7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a9:ab:01:87:b9:df:34:ac:7f:2e:82:5c:46:
12:b0:19:2f:89:85:99:77:53:8e:b5:46:4b:75:40:
09:16:a4:40:19:0b:13:41:7b:09:e1:db:f9:c5:c4:
a1:3e:9a:06:2b:eb:59:24:a1:4a:13:cf:47:77:5d:
c5:c3:cb:79:a9:2d:61:16:e0:2c:bc:bf:be:29:fc:
08:78:27:ea:29:5e:1c:76:81:38:37:c9:d5:ef:b6:
a3:a0:73:06:fd:4c:06:93:71:42:aa:6a:b0:5a:b2:
ba:c5:9f:5d:6d:11:6d:85:3b:c0:8f:3e:79:2f:16:
2c:8a:2c:91:ae:17:10:c6:97:f2:83:7f:6b:c8:ef:
f6:28:f8:84:fb:14:01:ea:06:49:17:02:ec:2b:4b:
0e:bb:ad:db:6e:8c:69:1b:8c:91:20:0b:56:c4:42:
58:6a:f0:9b:9a:8e:e4:de:a9:a5:10:c3:26:9d:db:
4e:54:a6:81:4a:2d:c9:fb:a0:6e:0d:41:8d:1a:d4:
02:0d:6c:87:44:7b:03:e8:78:31:23:c4:ff:b2:3a:
ae:6a:83:87:98:06:57:ab:59:5d:3a:0d:d1:77:9e:
23:d8:c3:c6:3f:76:99:4b:53:37:25:51:76:b9:28:
7f:8a:3c:41:ff:ac:8c:5f:1e:23:15:0c:da:7b:91:
d7:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:8F:16:7E:AA:6A:45:CE:16:44:D5:A0:23:82:61:57:1B:13:CB:7E
X509v3 Authority Key Identifier:
keyid:BC:F5:46:36:80:D1:4B:64:58:6B:1D:5B:46:56:63:BC:B5:77:E6:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vPVGNoDRS2RYax1bRlZjvLV35pM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/f5fc76-5016-4968-829b-473045a93a05/1/vPVGNoDRS2RYax1bRlZjvLV35pM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/f5fc76-5016-4968-829b-473045a93a05/1/vPVGNoDRS2RYax1bRlZjvLV35pM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:79:7e:19:28:59:e4:84:4e:44:6d:c3:9a:fa:cf:45:8e:43:
14:9c:e3:78:4b:92:5f:6b:14:11:0b:67:fc:2c:69:89:f6:7b:
8a:85:ee:7d:b9:fd:45:8c:84:cd:1b:9e:47:be:c7:66:e0:88:
a9:6e:10:1c:00:fb:04:c3:9b:f6:fe:ef:c2:9a:53:a4:03:81:
76:5d:b8:f3:1a:56:bd:6f:8a:d3:03:1e:2f:0f:94:38:10:e9:
11:1d:7f:9f:c2:4f:f2:37:da:d5:f7:c5:ff:97:12:88:36:ab:
80:82:d9:b7:b5:12:39:4c:f2:51:77:0d:f0:15:13:7f:14:e6:
33:19:a4:48:05:64:07:22:b6:48:db:b7:d1:be:31:55:23:5c:
1a:12:5c:8e:30:10:a6:74:98:81:3e:c2:ed:02:9e:f9:b2:d5:
51:7e:7d:9c:c3:44:fc:63:28:2b:b2:a8:f3:e7:89:7b:d0:32:
59:46:aa:c1:f9:97:47:21:6d:4b:71:6a:9a:32:0b:92:2c:58:
14:49:82:05:a6:50:75:32:36:88:cc:b5:41:5e:06:8d:43:b5:
86:28:16:ed:d6:67:34:0f:e6:52:b3:c0:ee:e3:aa:65:a7:44:
28:24:39:2b:46:83:e9:54:b6:4e:65:4e:53:ef:ae:97:31:7d:
b8:31:38:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:22:18 2025 by rpki-client