Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.mft
File: vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.mft (raw, json)
Hash identifier: v4Iles6P1jxQyPsXzZh5w8lM/GLhDk9pTdsKFE70QoQ=
Subject key identifier: 7B:77:5D:34:44:C0:21:60:5A:18:BA:8F:C5:3B:8B:1D:90:5E:F8:E5
Authority key identifier: BC:12:78:64:CD:43:04:85:50:ED:16:99:C5:84:B5:C1:4D:80:E0:98
Certificate issuer: /CN=bc127864cd43048550ed1699c584b5c14d80e098
Certificate serial: 019894EE2F6C4D851B0379209843FC359660
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.mft
Manifest number: 06A3
Signing time: Sun 10 Aug 2025 17:01:34 +0000
Manifest this update: Sun 10 Aug 2025 17:01:34 +0000
Manifest next update: Mon 11 Aug 2025 17:01:34 +0000
Files and hashes: 1: DmspTgBWfwCRXv4YidxL9MxMuLs.roa (hash: 1HDwuoapwdXHm8uFL7aQ8AiJfzmdU8tLWRG1TVtsgIw=)
2: P4H-USxdX8paqqc5vUCjCPteQ10.roa (hash: RUKC58n+H3u6CbZuKe7grfw3EeWvKz+vXEAG57qC5LQ=)
3: vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.crl (hash: l4vgTug8V2SA9R2rP6/FV3JV/7i64gY2M+I9BXNkbGA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:94:ee:2f:6c:4d:85:1b:03:79:20:98:43:fc:35:96:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc127864cd43048550ed1699c584b5c14d80e098
Validity
Not Before: Aug 10 17:01:34 2025 GMT
Not After : Aug 11 17:01:34 2025 GMT
Subject: CN=7b775d3444c021605a18ba8fc53b8b1d905ef8e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:03:68:b1:79:4e:61:5b:94:76:d5:25:09:f7:
f9:e8:d6:a7:7e:de:cb:0a:25:65:c6:b8:1b:87:d3:
cf:e0:3b:16:ce:c9:b4:9c:f2:6a:c6:29:9d:b6:b9:
7b:02:42:3e:cf:37:15:ac:ba:c5:0d:16:2a:65:17:
0c:83:f3:ce:54:45:b1:c8:66:15:f0:a0:f7:e1:42:
a5:d7:d7:c7:41:89:01:be:a2:8a:e6:f1:82:62:f9:
68:0a:72:0c:02:2f:02:b4:3b:7e:71:cf:49:85:29:
59:97:65:d4:b7:3f:da:3d:1b:45:52:77:14:59:fe:
4d:fe:aa:46:99:78:06:9a:a7:02:e7:f2:5a:a8:43:
30:9f:1b:37:4a:5e:83:df:e7:22:e5:10:1c:bc:32:
db:f6:8f:cd:c8:24:f5:af:dc:ba:67:a4:5c:22:ad:
ea:4e:f7:45:dc:15:6b:83:57:48:a7:95:15:41:3b:
60:1e:b0:5f:b1:17:2c:04:1a:ac:0e:4c:64:8e:5e:
51:35:49:a2:8b:11:5c:93:69:55:41:db:b4:c6:37:
9b:d2:8a:59:04:d3:34:bf:3f:d9:32:d3:a1:b7:64:
ba:16:05:cf:a5:af:7a:e4:55:f3:ec:d9:da:30:af:
75:6b:d8:ad:24:57:14:66:ab:1d:f2:3d:fd:7c:1c:
3a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:77:5D:34:44:C0:21:60:5A:18:BA:8F:C5:3B:8B:1D:90:5E:F8:E5
X509v3 Authority Key Identifier:
keyid:BC:12:78:64:CD:43:04:85:50:ED:16:99:C5:84:B5:C1:4D:80:E0:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:28:5f:75:56:fc:3b:73:f9:f3:13:df:f9:48:0b:73:44:3e:
9f:59:26:a1:c4:11:fa:1a:0f:ac:df:d9:0f:67:98:99:1e:7f:
22:22:d5:cf:36:82:17:a2:8e:76:75:f6:aa:3c:b8:a5:31:1b:
68:9f:65:ee:db:de:da:e1:75:58:97:12:c2:91:63:e0:1c:ef:
f5:5d:eb:ce:9b:11:4b:b0:b5:fd:a1:45:31:5a:55:63:0e:c4:
85:2c:69:49:94:b8:8b:8b:2a:ba:e7:70:96:34:90:24:6c:8d:
94:5d:35:29:77:64:04:ed:12:36:7e:e4:1b:6b:65:1d:ed:f7:
c3:75:6b:d2:25:f9:95:fa:75:2f:cc:28:91:36:f0:ab:a3:fa:
36:e2:e6:74:2f:07:46:d4:1d:8c:a0:f8:c3:bb:36:31:88:8f:
18:e3:e1:18:46:31:82:ba:da:14:b0:fc:02:aa:6b:8f:31:95:
b6:4a:aa:4d:cd:dc:d5:28:74:aa:e6:f4:bf:e8:e9:57:45:83:
2d:29:13:3f:eb:6e:b4:52:4f:37:5b:f5:6f:f0:7a:a7:90:5a:
78:14:54:b6:7d:23:0d:df:9b:45:8f:72:00:a1:93:2f:72:8d:
ea:6d:83:fb:8b:41:5c:03:07:54:c1:2a:e2:e2:d4:a5:ba:d3:
51:ab:f1:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 20:58:42 2025 by rpki-client