Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/vfegoEi2jsz6TUnqtPFtx5LA0xg.mft
File: vfegoEi2jsz6TUnqtPFtx5LA0xg.mft (raw, json)
Hash identifier: ze0yVA5c0n9KSxEpFeR4KZ2+Hxrr0iMKayPa5i3itew=
Subject key identifier: A8:A0:45:A6:F1:B0:81:DB:0A:0D:D8:50:1A:A5:90:85:4A:A6:2C:10
Authority key identifier: BD:F7:A0:A0:48:B6:8E:CC:FA:4D:49:EA:B4:F1:6D:C7:92:C0:D3:18
Certificate issuer: /CN=bdf7a0a048b68eccfa4d49eab4f16dc792c0d318
Certificate serial: 019872CFA0F0113DD4C6FD5B090EB44D377D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfegoEi2jsz6TUnqtPFtx5LA0xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/vfegoEi2jsz6TUnqtPFtx5LA0xg.mft
Manifest number: 1618
Signing time: Mon 04 Aug 2025 02:01:06 +0000
Manifest this update: Mon 04 Aug 2025 02:01:06 +0000
Manifest next update: Tue 05 Aug 2025 02:01:06 +0000
Files and hashes: 1: GKC-zruGo7Y0lHBj7AqmYPwzc8c.roa (hash: u2pwVxzKoBKyV0Dimg3sj9jXDAo9fvdhwaO1o32GlnA=)
2: X_m5ZAvxIpZScImZ01eKwHRPNDY.roa (hash: beEA3W7SColLkSlnHacB1waBPlogRmM3jPPLz78ItOg=)
3: v1Kwwfd8ZjjCs2Mu7l5Mtdf-PVI.roa (hash: ulU0aPB2ZxGebVfubT+AGsI+A+WmNT0R9PT7Ovu3cU0=)
4: vfegoEi2jsz6TUnqtPFtx5LA0xg.crl (hash: zZEIm4i//1E4aZJAvOkaCA3lgE1XZGeVI+bFn+j9yn8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/vfegoEi2jsz6TUnqtPFtx5LA0xg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/vfegoEi2jsz6TUnqtPFtx5LA0xg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vfegoEi2jsz6TUnqtPFtx5LA0xg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:a0:f0:11:3d:d4:c6:fd:5b:09:0e:b4:4d:37:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdf7a0a048b68eccfa4d49eab4f16dc792c0d318
Validity
Not Before: Aug 4 02:01:06 2025 GMT
Not After : Aug 5 02:01:06 2025 GMT
Subject: CN=a8a045a6f1b081db0a0dd8501aa590854aa62c10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:81:c8:8f:e3:93:29:6c:6a:f1:92:f5:3b:90:
4c:71:23:e5:ea:88:af:61:81:a0:14:b2:32:80:40:
f2:05:fc:c8:3a:e0:13:63:78:70:ff:8c:25:37:4a:
d7:fb:b0:a4:be:94:ba:04:f6:8f:2d:41:5c:85:56:
f0:75:5f:24:12:c0:ab:f7:04:a4:fc:44:d9:16:ba:
3d:09:c6:5d:cf:b8:fb:40:03:79:c5:f1:05:6f:52:
e4:ac:33:95:d2:27:0c:d1:5a:cc:dd:b8:f8:ab:55:
7c:25:19:bc:44:68:03:0e:64:64:cd:28:08:c1:05:
9d:6e:1b:59:c1:6b:a3:42:7c:be:78:75:0c:6a:5c:
99:ec:3b:4b:54:7c:a7:59:ba:3e:7c:69:08:f3:03:
5e:19:24:33:8c:0d:ad:2a:4a:71:a4:c4:70:2e:4c:
d5:09:93:55:36:82:ea:3b:78:d8:83:ba:c1:d0:53:
7b:47:7d:d3:11:d6:82:8d:be:d4:2c:ba:ba:a4:46:
d6:70:7d:99:d1:99:16:df:97:f0:81:38:9a:62:04:
26:34:21:ea:27:7b:be:25:ec:5a:1e:4b:18:10:e7:
73:f4:e0:36:49:3b:85:4c:2f:2d:1e:a2:84:12:d1:
c7:16:3e:77:67:e3:2d:77:52:ce:d2:85:f7:e7:23:
cb:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:A0:45:A6:F1:B0:81:DB:0A:0D:D8:50:1A:A5:90:85:4A:A6:2C:10
X509v3 Authority Key Identifier:
keyid:BD:F7:A0:A0:48:B6:8E:CC:FA:4D:49:EA:B4:F1:6D:C7:92:C0:D3:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfegoEi2jsz6TUnqtPFtx5LA0xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/vfegoEi2jsz6TUnqtPFtx5LA0xg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/vfegoEi2jsz6TUnqtPFtx5LA0xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:90:75:69:56:2b:4e:c0:70:ab:dd:c5:fb:ba:87:ec:da:07:
8d:d5:46:f8:a6:58:01:9d:5a:6b:e9:3b:0f:90:c4:c3:ba:23:
a2:11:b3:90:ad:78:39:4e:21:44:61:8e:6a:64:9e:1c:53:32:
48:ae:cd:38:d9:d6:79:78:54:c6:51:0b:e7:ec:c0:50:cd:ac:
54:2c:94:88:0d:2e:5a:1d:bf:94:9b:a8:27:ab:e0:36:fc:4f:
e7:3b:bb:56:c4:fc:c4:82:73:98:e7:81:be:21:fb:1d:f8:94:
00:89:73:ae:15:ba:0a:4d:af:0e:78:e9:ad:51:85:d0:4b:23:
e2:ad:6d:54:b7:29:c4:83:85:c4:a0:bb:d8:80:bc:a3:6e:8e:
b1:56:1e:d6:85:9c:31:6f:85:fc:4a:29:74:e2:1b:71:e8:84:
1b:84:d5:ef:bc:3f:95:52:03:5c:58:c5:a9:9c:9e:8a:7d:f1:
74:76:1a:fb:20:b0:03:54:61:8d:96:91:2c:14:68:f7:29:49:
22:17:4b:7e:42:0f:b4:bf:45:bb:58:38:32:ad:a4:fc:e4:22:
c3:66:49:28:9a:b0:34:90:c1:1b:78:39:aa:c0:d4:10:e7:4c:
c4:11:5a:7a:3b:47:eb:f3:19:e4:70:99:65:ba:e4:41:9b:9b:
74:eb:34:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:24:48 2025 by rpki-client