Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/d5e5cb-5b27-47f6-8acb-0350787225c8/1/vJA0A8IKbNsiNmzHrPSOn5m-NP8.mft
File: vJA0A8IKbNsiNmzHrPSOn5m-NP8.mft (raw, json)
Hash identifier: ePl291kmk5d2Pbwtd2dTc+wD+sBOuq4p/UTAWva+zPM=
Subject key identifier: 9B:18:64:8E:EE:F3:10:22:03:F5:82:B1:6E:FD:DD:CF:0C:EB:38:D5
Authority key identifier: BC:90:34:03:C2:0A:6C:DB:22:36:6C:C7:AC:F4:8E:9F:99:BE:34:FF
Certificate issuer: /CN=bc903403c20a6cdb22366cc7acf48e9f99be34ff
Certificate serial: 0198745070259D69A06D698BB96D3E08B8B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJA0A8IKbNsiNmzHrPSOn5m-NP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/d5e5cb-5b27-47f6-8acb-0350787225c8/1/vJA0A8IKbNsiNmzHrPSOn5m-NP8.mft
Manifest number: 0CDF
Signing time: Mon 04 Aug 2025 09:01:25 +0000
Manifest this update: Mon 04 Aug 2025 09:01:25 +0000
Manifest next update: Tue 05 Aug 2025 09:01:25 +0000
Files and hashes: 1: AFiiX1ExBRX0sjF1OFaXff5vX-o.roa (hash: s6dqOT6FYSZSQT8asyjr/q9SCL3Hless8wyrxiVHEwU=)
2: vJA0A8IKbNsiNmzHrPSOn5m-NP8.crl (hash: pstmSiqDyCXSKh1nPX1oMdr6anJwkIbn8YNaYazQ3U0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/d5e5cb-5b27-47f6-8acb-0350787225c8/1/vJA0A8IKbNsiNmzHrPSOn5m-NP8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/d5e5cb-5b27-47f6-8acb-0350787225c8/1/vJA0A8IKbNsiNmzHrPSOn5m-NP8.mft
rsync://rpki.ripe.net/repository/DEFAULT/vJA0A8IKbNsiNmzHrPSOn5m-NP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:70:25:9d:69:a0:6d:69:8b:b9:6d:3e:08:b8:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc903403c20a6cdb22366cc7acf48e9f99be34ff
Validity
Not Before: Aug 4 09:01:25 2025 GMT
Not After : Aug 5 09:01:25 2025 GMT
Subject: CN=9b18648eeef3102203f582b16efdddcf0ceb38d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ef:59:51:1e:ff:ad:e5:f3:a4:49:36:cc:e4:
ee:4b:1b:c9:d7:30:16:fb:35:92:bc:1e:f2:cb:26:
12:6f:3d:82:e9:d5:7e:ef:c5:b3:20:39:0a:d7:47:
24:28:f1:e6:3e:ea:f3:8c:8e:e0:86:1f:3a:a9:a4:
80:09:03:95:a9:40:65:d3:cc:ab:b1:0a:fd:42:b6:
82:aa:2e:89:4c:19:ea:ce:4b:a1:fe:3e:72:d4:24:
db:41:41:af:d1:76:8f:94:5a:27:35:3f:1e:d9:17:
aa:b3:13:24:65:3a:52:ff:e3:13:ef:e2:14:90:7f:
e1:ed:64:65:98:e1:a2:93:2b:6e:82:be:11:48:bb:
2c:db:13:ed:a8:0b:40:7b:99:2e:a7:0f:f4:14:4d:
8b:43:4c:1e:c1:76:9d:7a:bf:95:75:90:e3:8e:1d:
32:03:92:0d:64:91:09:78:1d:db:c8:16:0d:ac:92:
ee:7d:cf:f9:76:1d:9a:d5:5e:86:f1:83:7f:c6:fb:
ea:57:86:cb:20:ba:77:17:df:e8:63:15:db:f4:06:
b4:d7:bf:df:08:88:3a:7a:91:ae:a3:1e:8e:9e:c2:
3e:a4:eb:fc:3f:3d:bf:08:c0:48:14:fa:aa:1a:a7:
0f:fc:7d:09:91:04:6e:0e:ee:7d:bf:fc:83:3f:b0:
27:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:18:64:8E:EE:F3:10:22:03:F5:82:B1:6E:FD:DD:CF:0C:EB:38:D5
X509v3 Authority Key Identifier:
keyid:BC:90:34:03:C2:0A:6C:DB:22:36:6C:C7:AC:F4:8E:9F:99:BE:34:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJA0A8IKbNsiNmzHrPSOn5m-NP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/d5e5cb-5b27-47f6-8acb-0350787225c8/1/vJA0A8IKbNsiNmzHrPSOn5m-NP8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/d5e5cb-5b27-47f6-8acb-0350787225c8/1/vJA0A8IKbNsiNmzHrPSOn5m-NP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:db:e0:ab:b6:05:89:c5:f8:42:c1:00:5c:a0:1b:b0:23:12:
27:d5:83:7c:8c:2b:66:3d:fd:de:87:82:00:c6:44:3a:08:5e:
77:b2:66:9c:dd:54:3f:64:35:53:e0:d0:2f:2b:ee:08:a7:8c:
c7:76:f6:66:a1:ff:66:e5:73:5e:41:81:1a:6c:4c:84:6d:b0:
ed:af:f2:0c:f3:dc:15:f9:2b:76:ad:f1:ef:3a:28:09:f5:70:
2a:54:f1:d9:f4:85:c2:14:d5:00:aa:0f:e4:6c:e3:2c:39:2d:
06:f3:68:66:4a:89:c1:c0:ca:4e:96:a6:65:6c:b5:c3:9f:7f:
eb:c0:43:ad:76:23:5e:ab:49:f3:00:7b:51:bc:e2:39:d2:e4:
f9:58:6c:8f:61:a5:f2:8b:3c:7e:f8:e5:0d:f9:08:8e:4b:ee:
ec:32:bd:0a:57:3f:4b:c6:36:a6:e8:c0:dc:26:86:09:76:b8:
5d:73:19:cb:83:3b:57:0c:df:15:d0:3e:ce:d8:39:8c:0b:73:
c4:5e:65:42:fe:af:b0:68:ab:94:e4:34:74:66:ec:ad:43:52:
cb:01:8e:fb:31:5d:a3:b2:f7:52:52:f9:d0:88:13:16:1b:cb:
c4:ef:5a:6b:d5:a1:4b:06:e5:d7:09:b5:80:1f:7e:31:11:e1:
30:3f:0c:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:11:25 2025 by rpki-client