Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/861c6c-a47a-4654-a4ef-61fac286d387/1/Vyq9haWJkatxoX_XVB-43pb1Wn0.mft
File: Vyq9haWJkatxoX_XVB-43pb1Wn0.mft (raw, json)
Hash identifier: FkLzi1jor2VvM7QgZciTGFMeAr+Pe/ZLjdbXU47yNsk=
Subject key identifier: 88:4A:49:66:83:88:1E:D1:59:28:0D:BE:14:4A:AF:69:28:19:73:AF
Authority key identifier: 57:2A:BD:85:A5:89:91:AB:71:A1:7F:D7:54:1F:B8:DE:96:F5:5A:7D
Certificate issuer: /CN=572abd85a58991ab71a17fd7541fb8de96f55a7d
Certificate serial: 01987D1C5B3B1AF3CFE2A357D23BBCFA0369
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vyq9haWJkatxoX_XVB-43pb1Wn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/861c6c-a47a-4654-a4ef-61fac286d387/1/Vyq9haWJkatxoX_XVB-43pb1Wn0.mft
Manifest number: 161B
Signing time: Wed 06 Aug 2025 02:01:06 +0000
Manifest this update: Wed 06 Aug 2025 02:01:06 +0000
Manifest next update: Thu 07 Aug 2025 02:01:06 +0000
Files and hashes: 1: Vyq9haWJkatxoX_XVB-43pb1Wn0.crl (hash: huCD4lxsyUs02CkQIi5xopfDaaO1KDbkIs3aP67TFB4=)
2: s5i_5wQ4_7M-HybTJU4UVXQHFrc.roa (hash: cMPzuVDjBzNlIE9nP4d6ZjU1EE0q53jdrLL/axSPLpI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/861c6c-a47a-4654-a4ef-61fac286d387/1/Vyq9haWJkatxoX_XVB-43pb1Wn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/861c6c-a47a-4654-a4ef-61fac286d387/1/Vyq9haWJkatxoX_XVB-43pb1Wn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vyq9haWJkatxoX_XVB-43pb1Wn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 02:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:1c:5b:3b:1a:f3:cf:e2:a3:57:d2:3b:bc:fa:03:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=572abd85a58991ab71a17fd7541fb8de96f55a7d
Validity
Not Before: Aug 6 02:01:06 2025 GMT
Not After : Aug 7 02:01:06 2025 GMT
Subject: CN=884a496683881ed159280dbe144aaf69281973af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:22:52:5e:ed:61:ff:3e:55:a7:a3:d7:40:3c:
20:9c:ba:46:3a:43:ee:13:c4:1b:a7:dc:3d:47:70:
cb:3a:1d:4e:1a:fb:52:a0:df:c5:39:56:e3:dc:79:
5a:de:06:da:96:32:89:1e:62:bb:03:3d:66:96:c1:
a0:ab:3b:94:f1:06:73:81:03:96:30:ab:55:d7:40:
59:34:a6:70:3f:93:6b:4a:b6:7b:53:b5:ae:d4:56:
c6:81:d5:15:91:04:cc:4f:f9:52:63:fd:34:64:2b:
db:da:f6:05:0c:a4:0b:d7:9b:9c:91:8f:9d:18:77:
5d:0e:96:2f:b4:b9:cc:57:78:77:da:38:6d:35:d8:
23:3c:66:5c:cd:5b:1e:db:c8:88:c8:c3:50:3b:9f:
1d:53:9b:8b:13:de:a6:10:cb:ee:a2:f1:33:c0:ee:
2a:00:f6:89:d5:3f:b5:bf:b1:e7:69:96:c9:bb:c3:
b6:e8:87:53:6d:c8:2c:a9:84:2e:b2:47:fa:53:39:
e8:cc:1c:52:07:7d:e6:71:8d:91:ea:2f:1e:1a:3b:
e8:15:77:0c:42:e6:fb:4c:2f:4d:11:86:4c:80:0d:
3a:45:71:17:75:93:0d:f2:49:e0:dd:f7:6e:e8:0d:
d8:c7:28:fc:60:45:75:ab:5e:07:13:71:0d:7b:3e:
5a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:4A:49:66:83:88:1E:D1:59:28:0D:BE:14:4A:AF:69:28:19:73:AF
X509v3 Authority Key Identifier:
keyid:57:2A:BD:85:A5:89:91:AB:71:A1:7F:D7:54:1F:B8:DE:96:F5:5A:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vyq9haWJkatxoX_XVB-43pb1Wn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/861c6c-a47a-4654-a4ef-61fac286d387/1/Vyq9haWJkatxoX_XVB-43pb1Wn0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/861c6c-a47a-4654-a4ef-61fac286d387/1/Vyq9haWJkatxoX_XVB-43pb1Wn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:ce:cd:21:4b:6b:77:7a:92:b8:46:5a:53:83:15:0a:59:b6:
5f:68:a8:b0:da:c4:1a:1d:76:c0:bb:b5:45:10:cc:6a:b6:1c:
72:97:73:02:ec:3e:86:09:9d:09:20:fa:25:ee:1a:56:c6:f9:
84:1a:cc:06:42:d3:a7:a8:dd:d0:83:81:21:37:50:eb:aa:16:
26:8b:f9:4e:02:63:c7:2c:95:49:8f:b0:d1:85:85:c7:79:3e:
c1:fe:e2:c4:59:4b:65:d0:70:ce:10:08:48:34:bd:b4:35:b5:
72:a1:4c:92:61:39:dc:11:6a:c8:bb:2e:16:b1:42:ee:14:e0:
16:16:ea:fc:7b:9d:dc:c7:90:1f:1d:65:a9:8f:54:4e:17:e5:
bd:65:cd:63:30:2f:64:e3:df:1c:16:30:95:ec:5a:c7:0e:eb:
fb:50:5f:fa:89:9d:83:ba:ad:54:98:6b:60:8d:c6:66:84:b8:
8b:ec:1d:72:28:d2:1b:a7:f6:4b:4f:43:83:fe:09:ae:8b:1c:
b5:68:55:5a:bd:a2:e8:29:26:15:54:09:48:58:7b:ee:e7:85:
be:42:90:2f:af:9e:72:11:de:03:bc:79:a6:93:7b:e8:90:83:
43:3b:a6:bf:54:77:85:19:83:35:a1:3c:80:5e:a8:f9:ae:c1:
5b:7d:e9:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:09:27 2025 by rpki-client