Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/vCDUGtNXDtiIw7mjlYQ9KMS95w4.mft
File: vCDUGtNXDtiIw7mjlYQ9KMS95w4.mft (raw, json)
Hash identifier: u+UMtJpxCUD4qAMd0DWF+JX4P5S6HePxpBiIogXhVtU=
Subject key identifier: 63:9B:2E:35:24:2E:B7:86:09:B7:FC:8B:99:05:A8:7E:73:2E:94:B5
Authority key identifier: BC:20:D4:1A:D3:57:0E:D8:88:C3:B9:A3:95:84:3D:28:C4:BD:E7:0E
Certificate issuer: /CN=bc20d41ad3570ed888c3b9a395843d28c4bde70e
Certificate serial: 01988D6B1F91C0E5039347EFA0E4887345A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vCDUGtNXDtiIw7mjlYQ9KMS95w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/vCDUGtNXDtiIw7mjlYQ9KMS95w4.mft
Manifest number: 1629
Signing time: Sat 09 Aug 2025 06:01:04 +0000
Manifest this update: Sat 09 Aug 2025 06:01:04 +0000
Manifest next update: Sun 10 Aug 2025 06:01:04 +0000
Files and hashes: 1: 2_V6lJnSbHp-dXL7YMoo09f6snw.roa (hash: OhjwpaD5BnWeaMwPzsn2/JlXIUwI6tpxdz7vTY63lGM=)
2: vCDUGtNXDtiIw7mjlYQ9KMS95w4.crl (hash: q0znfwhnygCHBImB1mGB7K0sVI1CgX76a1NmD21uXeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/vCDUGtNXDtiIw7mjlYQ9KMS95w4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/vCDUGtNXDtiIw7mjlYQ9KMS95w4.mft
rsync://rpki.ripe.net/repository/DEFAULT/vCDUGtNXDtiIw7mjlYQ9KMS95w4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:6b:1f:91:c0:e5:03:93:47:ef:a0:e4:88:73:45:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc20d41ad3570ed888c3b9a395843d28c4bde70e
Validity
Not Before: Aug 9 06:01:04 2025 GMT
Not After : Aug 10 06:01:04 2025 GMT
Subject: CN=639b2e35242eb78609b7fc8b9905a87e732e94b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:57:7d:b1:28:f3:56:38:65:97:d0:0e:42:93:
6e:07:42:02:f1:18:d4:b7:0f:7e:97:76:b4:10:9f:
54:90:dd:e4:87:fb:9b:b1:23:7e:88:96:46:50:fa:
bb:f1:de:34:f9:04:8f:35:b5:a8:a4:9f:96:03:da:
48:d0:76:bf:de:02:7a:35:a4:ec:47:22:9d:f9:27:
0f:3e:d9:29:d9:2a:d1:e6:0b:d7:67:8c:a1:8c:09:
52:8b:d0:cc:c1:fd:2f:94:c1:9e:1c:d9:9f:27:33:
58:ad:18:01:b6:ee:66:9c:19:81:3b:bd:2b:c4:a8:
29:09:53:50:48:e2:50:62:dd:b8:52:4b:83:fe:1f:
57:b7:06:1a:d8:4b:14:00:ac:59:ad:eb:f1:07:6d:
a8:c0:ba:cf:86:9a:fd:18:be:a5:21:39:b8:be:38:
34:09:02:16:b8:1b:d1:62:09:6e:69:a3:fe:6b:1d:
96:7e:84:bf:97:4e:31:4b:e4:0c:e1:78:c4:81:fb:
91:23:1e:67:40:5f:62:34:c5:93:58:37:41:12:e8:
e5:42:96:85:37:08:be:64:d2:ef:1f:80:51:42:ad:
90:61:6a:08:94:4d:30:c8:28:f9:92:01:59:44:f2:
0f:36:bb:f9:d2:d4:49:89:01:18:a2:8d:e0:66:86:
55:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:9B:2E:35:24:2E:B7:86:09:B7:FC:8B:99:05:A8:7E:73:2E:94:B5
X509v3 Authority Key Identifier:
keyid:BC:20:D4:1A:D3:57:0E:D8:88:C3:B9:A3:95:84:3D:28:C4:BD:E7:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vCDUGtNXDtiIw7mjlYQ9KMS95w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/vCDUGtNXDtiIw7mjlYQ9KMS95w4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/vCDUGtNXDtiIw7mjlYQ9KMS95w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:70:a2:f1:4a:fe:cf:b6:e9:4d:28:98:b3:6c:55:45:0e:23:
ad:b9:71:66:bc:10:9c:0c:37:7b:a1:02:b8:27:87:5b:8e:37:
e7:37:96:6f:eb:0d:75:87:a9:9f:9e:fe:a7:47:33:70:85:1a:
fa:d8:06:8a:63:55:7b:54:b9:de:6c:d9:5a:1a:35:d7:0a:9e:
ee:6e:77:22:68:20:8d:c1:ed:cb:19:ea:c9:af:46:a1:37:93:
2f:5d:1e:29:e0:4e:1b:17:93:e3:3b:a8:9a:2e:3f:f8:56:e2:
b4:bb:ed:4a:22:5a:bd:0f:73:9f:c3:76:b0:5b:ce:a6:da:48:
37:01:e8:47:28:71:29:99:81:8f:35:58:da:e2:b2:90:90:f4:
23:d7:91:0a:a6:9e:10:24:ac:e5:66:0a:22:96:13:de:89:ce:
ac:e6:e5:d9:14:14:f1:55:f2:37:e6:7a:a5:db:65:03:6f:ed:
27:59:ee:a3:46:43:d9:e0:9a:08:86:d8:d0:f8:02:f9:ca:40:
7c:52:64:69:ab:6a:39:44:52:25:a9:85:70:6b:40:a7:b5:d0:
30:53:64:c7:d4:80:32:32:a4:0b:05:b1:06:1f:a7:89:51:d0:
6b:2a:4b:78:dc:2c:57:da:a1:42:7d:5c:6c:40:3e:d4:17:bf:
59:4f:3e:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:16:11 2025 by rpki-client