Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/bfda12-76b3-43b2-88e8-1f1dc52bbb98/1/vB0gk2YmtVdDxllFEt5C75-OkF8.mft
File: vB0gk2YmtVdDxllFEt5C75-OkF8.mft (raw, json)
Hash identifier: ql75eSNBZrmyciB6D0jEeRsM745K0IhVve/FPG8xYJQ=
Subject key identifier: BE:4A:54:44:23:80:CE:07:44:97:BF:BB:07:0D:5E:61:D9:6C:6A:60
Authority key identifier: BC:1D:20:93:66:26:B5:57:43:C6:59:45:12:DE:42:EF:9F:8E:90:5F
Certificate issuer: /CN=bc1d20936626b55743c6594512de42ef9f8e905f
Certificate serial: 019888B290D6EFD4C220D97551AE288902F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vB0gk2YmtVdDxllFEt5C75-OkF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/bfda12-76b3-43b2-88e8-1f1dc52bbb98/1/vB0gk2YmtVdDxllFEt5C75-OkF8.mft
Manifest number: 1623
Signing time: Fri 08 Aug 2025 08:01:00 +0000
Manifest this update: Fri 08 Aug 2025 08:01:00 +0000
Manifest next update: Sat 09 Aug 2025 08:01:00 +0000
Files and hashes: 1: 5sX-DGEXiD0BFlvf-Fmo0E_zIWA.roa (hash: 9QROXrOe8DbEbrWzP6N+sqZkzzd6XWEYKMJ32P4x344=)
2: vB0gk2YmtVdDxllFEt5C75-OkF8.crl (hash: D3K6nn99VERk8CVxPQ3dNht9+nstqZq5WnHB9p9qULA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/bfda12-76b3-43b2-88e8-1f1dc52bbb98/1/vB0gk2YmtVdDxllFEt5C75-OkF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/bfda12-76b3-43b2-88e8-1f1dc52bbb98/1/vB0gk2YmtVdDxllFEt5C75-OkF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/vB0gk2YmtVdDxllFEt5C75-OkF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:88:b2:90:d6:ef:d4:c2:20:d9:75:51:ae:28:89:02:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc1d20936626b55743c6594512de42ef9f8e905f
Validity
Not Before: Aug 8 08:01:00 2025 GMT
Not After : Aug 9 08:01:00 2025 GMT
Subject: CN=be4a54442380ce074497bfbb070d5e61d96c6a60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0c:34:9d:a0:15:ab:6b:cf:f8:fe:a5:9b:39:
5a:ee:82:91:fb:39:ae:ec:7a:e2:9c:24:2e:e7:6f:
5f:d9:ce:ba:01:28:42:62:3f:50:bf:62:1e:c8:5e:
88:c5:ee:98:e3:d0:ce:ce:db:5d:e3:4a:85:fd:5f:
87:45:95:9a:fa:60:9b:43:08:4b:8c:96:dd:4f:1a:
56:0c:89:14:ed:32:20:ac:8c:80:48:de:30:ca:ab:
a9:75:53:4c:5e:83:81:e4:5c:61:25:b8:a9:7b:87:
c6:9b:1e:32:87:91:d4:ed:96:bb:d4:eb:09:03:46:
fe:a4:dc:04:47:91:1d:68:bc:17:86:b0:82:e1:63:
cf:50:22:8b:8d:1e:b6:65:32:a4:51:94:1d:53:ee:
c9:6d:ce:2f:e7:72:ec:d8:1d:7b:f2:f5:19:d0:87:
d3:81:12:ab:36:2e:34:7e:f4:97:75:f4:70:07:9b:
33:3c:ba:fc:e6:bf:13:bb:9a:e1:f8:e2:1e:40:48:
e8:e0:59:ad:f1:6a:67:b8:a9:ac:7f:d8:b7:ea:52:
e2:08:3b:94:23:8f:52:89:a2:49:36:96:69:1b:f9:
fd:ac:51:88:a0:fc:d0:63:0e:48:03:ba:f9:b8:13:
36:17:51:61:da:12:c1:8c:0d:6c:fc:86:49:b3:35:
e3:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:4A:54:44:23:80:CE:07:44:97:BF:BB:07:0D:5E:61:D9:6C:6A:60
X509v3 Authority Key Identifier:
keyid:BC:1D:20:93:66:26:B5:57:43:C6:59:45:12:DE:42:EF:9F:8E:90:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vB0gk2YmtVdDxllFEt5C75-OkF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/bfda12-76b3-43b2-88e8-1f1dc52bbb98/1/vB0gk2YmtVdDxllFEt5C75-OkF8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/bfda12-76b3-43b2-88e8-1f1dc52bbb98/1/vB0gk2YmtVdDxllFEt5C75-OkF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:aa:06:77:69:50:56:aa:09:7e:a0:00:10:76:8a:dc:4f:b4:
22:25:33:57:a3:65:e4:4d:4c:36:38:0e:bc:c1:57:37:c7:e3:
5f:95:86:66:ab:39:0d:ed:aa:f6:de:66:cc:0d:d7:d2:8b:53:
32:05:87:73:3a:80:9f:2c:c0:c1:54:0e:f0:44:0c:f8:31:64:
de:bd:e5:d9:1c:ce:0e:3f:69:3e:29:50:3d:64:8c:85:92:dc:
77:b8:6f:72:92:43:03:13:73:54:e3:ab:0e:79:17:0f:26:b6:
f3:5e:6a:b6:20:28:81:ba:ff:8d:3c:56:3d:22:e0:07:85:4c:
f0:5c:13:7d:07:72:de:09:d2:20:fb:aa:c5:3c:b1:12:83:f4:
30:5c:c1:ac:2e:f6:3b:35:78:c9:2b:09:7a:a3:9a:18:85:68:
f7:88:80:a3:b0:22:ac:3f:e9:0d:82:e2:63:ba:bd:c6:9c:ec:
6c:48:19:ca:0b:23:5e:c7:40:86:d1:aa:3e:a9:14:b3:89:42:
77:0f:7f:0b:26:b1:fc:dd:b4:aa:db:d5:ed:fa:bd:1e:ad:7d:
ff:7a:5e:d9:57:03:e7:c8:b2:48:85:ed:b1:22:77:2f:37:df:
a7:7f:71:16:01:10:d3:9f:44:98:33:9b:02:b9:39:dd:43:c2:
e9:35:aa:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 10:10:55 2025 by rpki-client