
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/6dbc2f-0f0b-4a2f-b149-b75983122455/1/1-vcGbaCaViJCYORuom3Jyx26jjc.mft
File: 1-vcGbaCaViJCYORuom3Jyx26jjc.mft (raw, json)
Hash identifier: EvCjBnkR91jtDrHn/wfWpqZmYl/HYwT59VjkKOjECBM=
Subject key identifier: D6:86:7D:79:B9:2C:95:DC:87:14:48:9D:77:5C:46:D8:FE:51:E8:82
Authority key identifier: FA:F7:06:6D:A0:9A:56:22:42:60:E4:6E:A2:6D:C9:CB:1D:BA:8E:37
Certificate issuer: /CN=faf7066da09a56224260e46ea26dc9cb1dba8e37
Certificate serial: 019887A068AA8AD3EDA35FC066CF05635461
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-vcGbaCaViJCYORuom3Jyx26jjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/6dbc2f-0f0b-4a2f-b149-b75983122455/1/1-vcGbaCaViJCYORuom3Jyx26jjc.mft
Manifest number: 1165
Signing time: Fri 08 Aug 2025 03:01:33 +0000
Manifest this update: Fri 08 Aug 2025 03:01:33 +0000
Manifest next update: Sat 09 Aug 2025 03:01:33 +0000
Files and hashes: 1: 0npgtCw2cniYZRSczr6L1wq2NDE.roa (hash: 7qLMTW4Hb0+zjkcR3VjQ/z+HhWTfAgpVarVUL4CErX4=)
2: 1-vcGbaCaViJCYORuom3Jyx26jjc.crl (hash: kvinbHYaK4EbMpEUg6SH0Yfe5euNV00TdTrPxTDY9No=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/6dbc2f-0f0b-4a2f-b149-b75983122455/1/1-vcGbaCaViJCYORuom3Jyx26jjc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/6dbc2f-0f0b-4a2f-b149-b75983122455/1/1-vcGbaCaViJCYORuom3Jyx26jjc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-vcGbaCaViJCYORuom3Jyx26jjc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 03:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:87:a0:68:aa:8a:d3:ed:a3:5f:c0:66:cf:05:63:54:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faf7066da09a56224260e46ea26dc9cb1dba8e37
Validity
Not Before: Aug 8 03:01:33 2025 GMT
Not After : Aug 9 03:01:33 2025 GMT
Subject: CN=d6867d79b92c95dc8714489d775c46d8fe51e882
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:44:1d:8f:c9:54:34:ea:9a:37:51:8b:b5:2a:
65:c1:d8:bc:6d:c6:19:a6:6a:1c:10:19:5c:27:f5:
54:ca:cf:8d:9a:3e:af:f8:a1:fb:58:85:7f:90:cb:
37:e5:5f:11:23:b5:96:d3:c5:6d:e1:a0:37:86:73:
b6:c9:12:96:12:6e:15:d4:8c:18:03:63:d9:cd:58:
54:71:74:52:c2:37:19:a4:dc:d0:0d:85:e6:cd:2d:
79:b2:56:94:b5:cb:f9:22:8e:46:d4:b1:50:cd:49:
1e:f8:f0:eb:b0:0e:1b:58:53:81:89:78:55:6a:d3:
1e:1e:2d:a1:11:b1:df:e7:c3:c7:d7:be:41:fd:fc:
e6:4a:49:88:41:89:39:3d:86:6e:22:62:20:ab:57:
ba:33:95:e2:2b:4a:3a:81:fe:33:a6:6e:8e:a9:d3:
2f:58:33:ec:d0:bd:48:4b:bf:42:a8:34:af:cf:89:
a2:e6:7d:75:11:84:b4:de:f4:a4:e1:b2:b6:d7:0b:
a3:2d:80:60:8b:ce:46:73:8f:63:07:87:25:db:39:
a7:1a:4f:ab:e1:24:fa:c4:83:4d:59:a3:c1:58:d5:
a4:b2:5d:3d:f6:ca:a2:61:4a:74:1c:cc:13:b8:44:
a1:23:18:d2:fe:fc:96:ee:46:10:f8:6f:5e:2d:90:
f8:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:86:7D:79:B9:2C:95:DC:87:14:48:9D:77:5C:46:D8:FE:51:E8:82
X509v3 Authority Key Identifier:
keyid:FA:F7:06:6D:A0:9A:56:22:42:60:E4:6E:A2:6D:C9:CB:1D:BA:8E:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-vcGbaCaViJCYORuom3Jyx26jjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/6dbc2f-0f0b-4a2f-b149-b75983122455/1/1-vcGbaCaViJCYORuom3Jyx26jjc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/6dbc2f-0f0b-4a2f-b149-b75983122455/1/1-vcGbaCaViJCYORuom3Jyx26jjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:c3:94:0a:f0:e9:a7:07:c7:e1:c9:e2:51:14:32:b8:3e:76:
a0:91:b6:a0:ed:6b:0e:c4:7b:c2:c5:5f:94:51:43:26:35:91:
9f:66:08:13:5f:9c:f4:45:bb:ec:d5:e4:57:48:1b:c5:3b:b8:
8f:21:64:11:b2:31:26:6f:e4:0c:12:74:26:29:f2:5d:5f:05:
b8:ef:2e:bd:37:01:2a:b1:6b:e6:10:ab:1f:35:c7:5d:4f:cb:
d5:0f:75:59:0f:a0:e1:cd:49:b0:5e:34:0a:c4:13:da:13:d6:
1a:1d:f3:a2:64:00:29:ef:c2:f1:3e:dd:51:6b:bc:93:50:2c:
39:6f:1e:52:58:5d:f7:c7:60:f9:9a:b1:ab:13:3e:46:40:fb:
5d:59:43:01:cb:0c:8c:f8:7a:da:93:ff:78:94:8e:5f:8f:92:
45:37:ff:db:94:fc:3a:0c:52:6b:3f:6e:be:95:71:d6:ca:75:
80:10:61:ba:c0:85:b0:80:fb:b9:a5:90:67:2b:17:cd:09:ac:
7e:72:c5:75:cb:0b:db:5e:61:20:f8:85:5c:66:a3:a2:71:9c:
d1:c4:92:a0:fa:a2:0f:a3:11:fd:f8:b5:52:20:30:2c:9b:d0:
80:b8:e7:74:42:7d:e4:37:da:f6:05:c1:85:67:8d:31:93:73:
bb:8a:9c:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 12:47:55 2025 by rpki-client