Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/8b50e6-927a-4d3b-9422-e57fbdae5903/1/vJ7I21lyYHXuKfXvyQth5zwH968.mft
File: vJ7I21lyYHXuKfXvyQth5zwH968.mft (raw, json)
Hash identifier: 8rAfLEWtoT/8CosRQYZce+Xt4r8V4r0ni+XR9J2k0HM=
Subject key identifier: 48:FD:DB:5C:BF:D1:DE:2B:D2:21:03:0B:6C:AF:13:63:13:65:52:7C
Authority key identifier: BC:9E:C8:DB:59:72:60:75:EE:29:F5:EF:C9:0B:61:E7:3C:07:F7:AF
Certificate issuer: /CN=bc9ec8db59726075ee29f5efc90b61e73c07f7af
Certificate serial: 01989E9594588C07DAB62487CB09CF517ABF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJ7I21lyYHXuKfXvyQth5zwH968.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/8b50e6-927a-4d3b-9422-e57fbdae5903/1/vJ7I21lyYHXuKfXvyQth5zwH968.mft
Manifest number: 0B79
Signing time: Tue 12 Aug 2025 14:00:59 +0000
Manifest this update: Tue 12 Aug 2025 14:00:59 +0000
Manifest next update: Wed 13 Aug 2025 14:00:59 +0000
Files and hashes: 1: vJ7I21lyYHXuKfXvyQth5zwH968.crl (hash: ZYwVu/fqbG2GFPuceY4Wrmm6BqJyRvOA3u39OAZ6toM=)
2: vsYS1yNC27K4go1u55pkiDiNTso.roa (hash: VwZn+ljb2itH/kH3n3gJQ8cRZDUKa5y/b7TBam8fThU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/8b50e6-927a-4d3b-9422-e57fbdae5903/1/vJ7I21lyYHXuKfXvyQth5zwH968.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/8b50e6-927a-4d3b-9422-e57fbdae5903/1/vJ7I21lyYHXuKfXvyQth5zwH968.mft
rsync://rpki.ripe.net/repository/DEFAULT/vJ7I21lyYHXuKfXvyQth5zwH968.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 13:24:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9e:95:94:58:8c:07:da:b6:24:87:cb:09:cf:51:7a:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc9ec8db59726075ee29f5efc90b61e73c07f7af
Validity
Not Before: Aug 12 14:00:59 2025 GMT
Not After : Aug 13 14:00:59 2025 GMT
Subject: CN=48fddb5cbfd1de2bd221030b6caf13631365527c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c1:6f:59:64:0d:c7:07:88:88:59:61:ae:67:
8a:4f:e2:3b:cd:4a:66:8e:66:a2:f1:7b:9a:cf:a8:
28:e5:28:fb:0b:e8:80:e1:22:c7:45:08:09:30:30:
a9:30:e7:84:44:c1:96:44:91:d7:f6:63:66:fe:24:
ac:6f:e0:77:06:59:9f:58:a3:a3:1b:60:8e:16:66:
50:1c:66:3b:66:77:60:fd:72:d0:60:01:da:e1:38:
f5:32:d0:fe:c2:b3:13:bc:f9:fd:3e:7a:f6:b4:06:
ff:78:fe:a7:78:59:94:ff:47:b4:b5:56:d4:22:d6:
7f:08:d6:54:b8:41:d4:2d:87:b6:20:81:2e:c8:fd:
3a:05:2d:01:1b:6d:27:20:3e:7a:f7:c0:25:e3:ab:
28:7c:2d:b1:54:b2:7b:e8:01:99:34:23:f8:4d:68:
ca:09:f3:8e:28:49:40:75:00:f3:cb:b7:c9:a9:61:
38:64:5e:b5:eb:58:f1:1b:bd:a8:2e:c8:a6:02:c9:
96:94:0a:9e:e9:5b:29:a7:64:ac:c0:a8:a6:93:88:
b9:dc:24:b9:d7:8c:26:e0:3c:f8:cb:e6:5d:6b:28:
66:5f:11:18:1a:83:bb:f9:61:7a:21:42:08:4a:63:
f5:4f:f1:42:a6:f5:c4:de:16:04:1c:90:86:df:ef:
16:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:FD:DB:5C:BF:D1:DE:2B:D2:21:03:0B:6C:AF:13:63:13:65:52:7C
X509v3 Authority Key Identifier:
keyid:BC:9E:C8:DB:59:72:60:75:EE:29:F5:EF:C9:0B:61:E7:3C:07:F7:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJ7I21lyYHXuKfXvyQth5zwH968.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/8b50e6-927a-4d3b-9422-e57fbdae5903/1/vJ7I21lyYHXuKfXvyQth5zwH968.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/8b50e6-927a-4d3b-9422-e57fbdae5903/1/vJ7I21lyYHXuKfXvyQth5zwH968.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:82:1a:58:ec:33:cb:bb:47:bf:a7:95:31:34:1f:c1:df:06:
67:a9:32:b2:6a:9c:ac:bf:e9:1a:9e:96:b9:03:fc:dc:ef:3e:
5c:bc:70:26:2d:64:32:5f:91:d5:12:71:7d:8e:f8:41:1c:a9:
9c:12:41:8b:e8:b5:63:8e:be:0c:94:bb:0a:04:de:1e:0d:5c:
5b:77:15:cb:e9:05:ce:31:bb:aa:2f:eb:2b:e8:9d:1f:23:18:
17:ba:3e:e1:1c:a6:ec:5d:f7:fc:77:af:bb:88:5b:9e:10:46:
c6:f7:62:0c:ce:c2:5a:3a:d1:4d:01:a5:30:52:f6:bf:a0:18:
7a:f8:da:73:cb:4a:81:0f:59:e0:d0:81:31:2a:0b:e7:71:13:
af:79:63:6e:2d:7b:2b:4d:99:04:03:80:f5:23:8c:eb:d6:76:
2f:f4:4e:71:92:17:5d:f0:e6:10:77:5b:08:de:ee:f8:f5:ff:
82:61:52:47:6b:75:8c:00:0c:3e:e2:ea:cb:df:11:35:41:41:
02:2a:d2:03:01:7d:e5:bd:cf:ee:e4:ca:7c:95:4f:92:3d:6b:
63:d4:5c:4b:6d:60:b5:bd:0b:ab:23:d4:8b:88:da:4b:bc:28:
50:55:20:de:01:a3:5a:4f:50:b4:be:db:a7:52:92:8a:3b:42:
11:e6:e2:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 22:42:14 2025 by rpki-client