Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/vP0tpUR9AHYW693Cpw_qxed8Sos.mft
File: vP0tpUR9AHYW693Cpw_qxed8Sos.mft (raw, json)
Hash identifier: ObSim7Ap/6pXyOX+1O/PjuzuAu9h98w5EgplyIUxXpI=
Subject key identifier: A6:35:DC:91:DA:69:A9:36:2E:E1:0A:2C:F4:AA:EA:26:F8:95:0D:96
Authority key identifier: BC:FD:2D:A5:44:7D:00:76:16:EB:DD:C2:A7:0F:EA:C5:E7:7C:4A:8B
Certificate issuer: /CN=bcfd2da5447d007616ebddc2a70feac5e77c4a8b
Certificate serial: 01987E2E9E572E2B055790497E9768FBA999
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP0tpUR9AHYW693Cpw_qxed8Sos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/vP0tpUR9AHYW693Cpw_qxed8Sos.mft
Manifest number: 0EA3
Signing time: Wed 06 Aug 2025 07:00:40 +0000
Manifest this update: Wed 06 Aug 2025 07:00:40 +0000
Manifest next update: Thu 07 Aug 2025 07:00:40 +0000
Files and hashes: 1: 8qm9bEbxwfNKbG7VK6lFr1L7h68.roa (hash: 75uVkQx0ihlVy8p/hI6UBtxjUc4hu50c+jP7jjKtmh4=)
2: CwdCUQsFV7CyApTMyt6j3A_OJVA.roa (hash: SME0C7xkpjziLPa0GzpInguFdkdM75z/nCo/zXQqOyk=)
3: vP0tpUR9AHYW693Cpw_qxed8Sos.crl (hash: e22wO+bGBNgquQGUiUgEB/X95ecnaLPIF/vE+f6fhDY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/vP0tpUR9AHYW693Cpw_qxed8Sos.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/vP0tpUR9AHYW693Cpw_qxed8Sos.mft
rsync://rpki.ripe.net/repository/DEFAULT/vP0tpUR9AHYW693Cpw_qxed8Sos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:2e:9e:57:2e:2b:05:57:90:49:7e:97:68:fb:a9:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcfd2da5447d007616ebddc2a70feac5e77c4a8b
Validity
Not Before: Aug 6 07:00:40 2025 GMT
Not After : Aug 7 07:00:40 2025 GMT
Subject: CN=a635dc91da69a9362ee10a2cf4aaea26f8950d96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:11:26:15:f5:56:af:1a:a1:54:58:1a:f7:67:
2d:c0:8c:8b:d1:3a:9a:58:b4:28:ca:6c:fe:9f:db:
77:81:6e:80:1f:31:15:41:4c:37:5b:6f:fb:72:87:
11:d8:75:51:92:f9:18:76:b8:0b:24:82:88:6e:82:
d4:8b:20:5a:bc:23:b5:83:80:ac:67:b9:d0:35:74:
a8:2e:ed:ec:cc:15:3c:54:30:01:48:a1:80:7b:09:
2d:7c:09:29:98:6b:8e:22:9e:4f:ff:3d:ae:b3:11:
5e:c2:fb:2b:cb:24:cd:09:01:0a:a6:35:d5:a0:59:
10:81:8d:7a:0a:af:3a:3f:c6:2e:57:89:dc:c3:d9:
c4:42:2a:64:4b:6a:cd:01:80:e7:a2:1f:53:e2:64:
38:9a:6c:33:33:c9:da:ce:29:0a:25:17:5d:4f:39:
bd:ed:8b:8d:bb:0a:92:1a:fb:77:13:c4:3f:2b:fd:
a5:7b:fb:52:d8:da:8e:c5:ec:d2:a7:f8:99:c9:d2:
79:ba:ce:db:14:29:ff:82:cf:14:02:75:7c:01:fb:
3a:04:a8:64:0c:b8:25:9c:f3:3b:5f:09:46:b1:8a:
d7:90:98:ba:54:33:fe:ab:75:c0:cb:ed:73:9d:1f:
82:77:a1:ec:88:01:e5:d1:15:0b:7c:08:31:5c:63:
1a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:35:DC:91:DA:69:A9:36:2E:E1:0A:2C:F4:AA:EA:26:F8:95:0D:96
X509v3 Authority Key Identifier:
keyid:BC:FD:2D:A5:44:7D:00:76:16:EB:DD:C2:A7:0F:EA:C5:E7:7C:4A:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP0tpUR9AHYW693Cpw_qxed8Sos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/vP0tpUR9AHYW693Cpw_qxed8Sos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/vP0tpUR9AHYW693Cpw_qxed8Sos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:57:49:c8:41:6f:a1:14:89:75:58:6f:5d:cb:de:6e:9c:5e:
2b:0d:87:34:b3:fa:92:18:6e:3f:a2:1f:df:37:36:22:93:c4:
66:63:3c:01:4d:a0:0f:6c:7a:58:1f:06:67:80:54:83:01:fa:
bc:2b:3b:6c:44:c1:b9:99:67:fc:9a:95:1d:3a:08:1c:85:86:
f9:10:f0:17:e7:64:ba:85:d8:55:fc:5d:cf:0a:fd:54:88:96:
3d:91:72:de:0b:f9:6f:bb:f0:59:f6:6c:aa:fb:69:70:97:a3:
5b:f8:93:8d:e4:a6:7c:67:69:b0:03:0c:19:aa:79:ac:2a:fd:
bc:17:d5:e3:a3:ba:4c:ac:e6:43:2f:76:a4:ce:6d:64:29:15:
43:83:51:c6:a1:d4:fe:19:f4:e0:b1:e1:ca:61:0a:92:d7:1e:
16:8c:9b:10:d8:96:3c:43:3c:ed:52:e3:0f:6a:03:c5:8e:f0:
e0:7b:82:15:30:64:5e:55:93:36:0b:88:d9:e3:5c:80:01:a4:
0b:69:b5:c2:48:d0:3d:46:e4:3c:da:a1:1c:ac:45:02:ce:e2:
ff:38:e8:1d:b5:15:5c:1f:43:36:69:47:c5:11:ef:a7:0c:95:
e9:18:f0:85:6e:84:ee:da:c9:3c:98:1b:d8:75:69:e1:02:9a:
d8:6e:09:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:06:48 2025 by rpki-client