Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.mft
File: vCYT4PJtOQfwljQL4FDCAdNY1tU.mft (raw, json)
Hash identifier: oGkWmVhyEsAxxu038i/dRQltUgQCFnBbsV7Paas4reY=
Subject key identifier: 20:7C:82:31:55:67:67:5D:5C:E2:1C:4C:B7:BE:31:3F:4F:E2:26:4E
Authority key identifier: BC:26:13:E0:F2:6D:39:07:F0:96:34:0B:E0:50:C2:01:D3:58:D6:D5
Certificate issuer: /CN=bc2613e0f26d3907f096340be050c201d358d6d5
Certificate serial: 01987C77D08C3240503AFA7CD850D621DD78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vCYT4PJtOQfwljQL4FDCAdNY1tU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.mft
Manifest number: 02D3
Signing time: Tue 05 Aug 2025 23:01:23 +0000
Manifest this update: Tue 05 Aug 2025 23:01:23 +0000
Manifest next update: Wed 06 Aug 2025 23:01:23 +0000
Files and hashes: 1: urJ49fIkD8qF9GsD_zFu82_16aQ.roa (hash: CgkfZ2tObyCZ5wcx0o7Zqg/j5Bh2RYB4YUbPkk96BQA=)
2: vCYT4PJtOQfwljQL4FDCAdNY1tU.crl (hash: 99Hr6H4geBrBRiq1b6kBGJeP25LxYNbPRBPhDPVPaO0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vCYT4PJtOQfwljQL4FDCAdNY1tU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:77:d0:8c:32:40:50:3a:fa:7c:d8:50:d6:21:dd:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc2613e0f26d3907f096340be050c201d358d6d5
Validity
Not Before: Aug 5 23:01:23 2025 GMT
Not After : Aug 6 23:01:23 2025 GMT
Subject: CN=207c82315567675d5ce21c4cb7be313f4fe2264e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e0:0c:33:52:85:42:3e:c7:46:6e:19:97:b7:
1c:ae:c2:26:62:2e:72:e0:92:ca:a1:b9:77:76:96:
63:63:5c:d2:7d:0c:66:89:8e:2b:b9:97:e9:83:03:
6e:c3:f2:5c:a9:c8:83:e9:87:d2:b1:13:d9:91:55:
4a:ca:10:87:13:f3:1a:c5:99:b6:b2:de:d9:99:1d:
0e:53:c7:51:7b:93:43:ef:a4:78:c0:1b:68:f1:02:
37:dd:cd:05:21:a4:67:b5:2f:02:da:7e:11:92:9e:
8b:47:96:7f:21:11:76:8a:d0:05:5a:c0:e1:67:cf:
4a:8a:3f:cd:92:34:31:e2:8f:17:98:7f:e2:24:31:
fb:3b:b6:c6:ac:b8:b8:24:a5:58:ad:44:d1:ee:a0:
fe:0b:bc:f4:3f:fa:83:e2:ca:db:39:46:f8:2f:e8:
12:21:02:e9:6c:63:a3:a9:4b:c0:fa:0a:c2:da:4a:
81:7f:53:e2:e9:3c:17:d3:fb:e5:ef:33:99:f1:d9:
44:4a:b6:36:ad:db:97:9e:6c:16:b7:14:5c:ce:3b:
f1:20:ea:79:45:2f:8e:8b:06:cd:5e:b5:03:08:bf:
e5:c6:65:8d:ac:6b:5d:fa:55:d5:05:c5:08:83:59:
54:63:b6:50:ce:5a:aa:40:da:c2:86:42:f6:9c:ef:
ba:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:7C:82:31:55:67:67:5D:5C:E2:1C:4C:B7:BE:31:3F:4F:E2:26:4E
X509v3 Authority Key Identifier:
keyid:BC:26:13:E0:F2:6D:39:07:F0:96:34:0B:E0:50:C2:01:D3:58:D6:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vCYT4PJtOQfwljQL4FDCAdNY1tU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:cc:e4:d7:4a:47:da:c8:2e:55:59:68:68:90:b3:cb:48:cc:
3a:ba:00:c3:d3:d4:f3:5d:6b:e8:8a:ef:6b:9f:13:0a:0f:94:
b0:68:fd:36:6f:f7:eb:7e:b5:28:ee:e6:bb:cf:64:f7:c3:52:
7b:1a:c2:65:13:91:97:d1:88:67:66:ad:14:05:2a:33:c1:7d:
15:b8:cc:2c:56:60:03:e0:c3:60:d6:da:90:b8:8e:3a:11:6b:
6a:5f:39:92:c1:2f:03:fa:26:24:c2:a2:0c:73:08:89:d0:5f:
f5:bf:57:0a:6b:22:9e:b4:ec:99:9c:68:d9:20:79:f5:13:eb:
15:54:c1:86:b6:1e:38:ba:dc:23:db:05:d0:da:ef:7d:06:09:
28:09:98:57:02:2b:18:67:e8:20:7f:40:ea:8c:e7:23:fb:d3:
fa:2e:39:c1:51:9d:11:fc:c0:c9:c7:cc:53:bf:67:d6:28:e5:
83:e6:dc:72:f1:3b:a0:0b:f7:c2:1b:9c:0c:ea:7c:6c:ed:9c:
b2:53:1c:dd:1a:6a:34:2f:9f:9d:c9:63:48:67:25:b8:07:b8:
52:1c:8f:a3:5f:03:c2:b3:9c:50:f6:8c:cf:8b:9a:12:67:6f:
3d:51:24:16:60:46:be:78:3f:a6:18:1e:77:b7:f3:7b:8d:06:
84:bb:6a:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:26:25 2025 by rpki-client