Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.mft
File: vjfHDxxn7KF3WnCckjXWovVVFrg.mft (raw, json)
Hash identifier: 6lM/GLGiHVZyNaCOxGwl570wZg8CGfC7i9IhuD+V31M=
Subject key identifier: 10:5F:BE:40:EF:EE:1A:77:FE:28:B1:65:5C:27:3A:FD:C1:4C:B0:0D
Authority key identifier: BE:37:C7:0F:1C:67:EC:A1:77:5A:70:9C:92:35:D6:A2:F5:55:16:B8
Certificate issuer: /CN=be37c70f1c67eca1775a709c9235d6a2f55516b8
Certificate serial: 01988CFE85ED45550C71FE7EFA637322E1F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vjfHDxxn7KF3WnCckjXWovVVFrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.mft
Manifest number: 0A25
Signing time: Sat 09 Aug 2025 04:02:27 +0000
Manifest this update: Sat 09 Aug 2025 04:02:27 +0000
Manifest next update: Sun 10 Aug 2025 04:02:27 +0000
Files and hashes: 1: ct0pyOPI6fIxvI90voKvQ2P09kc.roa (hash: HL+IQFJP+wo1WUNFcjpb/00F+VP2TuCmZyFITiHM4E4=)
2: gW5vsz1XHWHAiEv2XrHiZAPT2LM.roa (hash: /LPDMtSPu0KMCf6GqHsTiZ0o1jWTrz0r+OipJeljVUk=)
3: smZrnk_Yoz0MEPZqDKnYUoP-Opw.roa (hash: 24G5yjs0ZUoqUy4OoFHxczQzhAIkELffXisqhuw+2DI=)
4: vjfHDxxn7KF3WnCckjXWovVVFrg.crl (hash: GwCGCC50kaD8ngsRVlckq/V5w3VOjpU1iX2SwQtu1JM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vjfHDxxn7KF3WnCckjXWovVVFrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 04:02:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:fe:85:ed:45:55:0c:71:fe:7e:fa:63:73:22:e1:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be37c70f1c67eca1775a709c9235d6a2f55516b8
Validity
Not Before: Aug 9 04:02:27 2025 GMT
Not After : Aug 10 04:02:27 2025 GMT
Subject: CN=105fbe40efee1a77fe28b1655c273afdc14cb00d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9f:70:2e:e3:2d:e5:8a:c3:2d:6c:8a:b5:29:
09:1b:b2:e1:80:5c:df:de:d8:9c:59:9a:3c:18:b2:
c6:2b:07:9b:e8:99:65:aa:da:21:5f:4d:c9:1e:93:
54:fa:b9:ef:ce:ec:9a:01:06:3a:0a:05:80:25:e2:
20:a5:64:75:5d:f6:18:a1:7e:19:df:05:ea:1f:25:
4e:a7:cc:63:54:9d:13:13:e1:b0:9e:d8:a0:1c:d5:
50:50:6f:9d:7a:56:9b:33:ea:13:4d:5a:62:67:71:
0a:69:d5:4b:e6:6b:69:3c:5e:ae:84:79:cc:a8:f0:
f5:78:66:0e:75:a2:26:85:7f:2d:9c:1b:8c:e9:0f:
07:2d:ed:99:37:34:1a:f4:d1:5e:1f:48:0c:ad:88:
f6:e7:a1:ff:7b:78:dd:a1:e4:d4:14:a8:a2:08:7d:
37:78:d2:bd:7e:32:49:12:78:b4:e9:74:a2:38:1d:
ac:56:e7:86:97:00:3f:67:ec:c2:2b:af:b3:1a:0c:
b1:47:1e:00:de:b7:4d:f5:30:7b:46:95:9b:47:3f:
98:5f:94:d7:3c:6e:80:6d:51:0e:b1:62:6a:69:89:
01:d3:6a:3f:37:73:f4:b0:b9:ba:0d:48:0f:3b:e4:
70:16:b8:f2:72:95:e6:a1:b5:02:3e:c7:1a:59:67:
23:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:5F:BE:40:EF:EE:1A:77:FE:28:B1:65:5C:27:3A:FD:C1:4C:B0:0D
X509v3 Authority Key Identifier:
keyid:BE:37:C7:0F:1C:67:EC:A1:77:5A:70:9C:92:35:D6:A2:F5:55:16:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vjfHDxxn7KF3WnCckjXWovVVFrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:ae:d6:76:7b:42:a4:69:fb:ce:ae:98:0b:aa:37:9b:c9:c9:
01:fd:cb:28:06:49:20:80:83:b2:a2:a8:c2:d8:f5:0b:9a:d9:
a1:51:28:ec:5a:35:a4:56:19:23:a4:75:04:5a:9a:a4:83:a8:
d3:74:cf:00:aa:ca:0e:63:c8:b5:52:06:7a:95:51:74:84:8a:
7e:c6:c7:94:45:0f:9f:f5:42:d7:e3:91:2d:33:11:18:50:c8:
a9:dd:74:25:b2:f9:ee:cf:03:e9:c1:0e:16:9d:b9:85:c0:af:
64:9a:77:40:4d:3d:3f:4b:45:7a:33:3a:c7:b0:a9:7e:bb:8c:
ba:9e:33:7c:e6:a1:8e:b3:47:81:84:bb:5a:c2:e8:a8:d8:93:
94:0e:c8:4f:65:63:1b:ee:6d:00:8d:ca:34:0a:a5:12:91:21:
19:5c:95:bc:3c:5b:9a:0c:0f:fb:80:6c:c0:86:67:0e:48:ef:
33:5c:7f:5e:85:24:cd:ac:59:a9:b7:a0:78:1d:03:6a:99:24:
8e:08:6f:b3:de:57:d4:17:78:e3:4b:29:70:42:d9:10:8d:12:
9b:92:79:71:eb:43:cf:e8:be:6e:d7:5f:95:eb:03:45:50:6b:
12:78:74:65:cb:98:eb:b2:86:53:57:2a:08:c8:90:24:19:09:
98:97:b8:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:20:56 2025 by rpki-client