Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/b816b9-91b0-46da-8e58-91488a34fcc8/1/vJxAXxQuU-tnscSZI6t5XoQyjJs.mft
File: vJxAXxQuU-tnscSZI6t5XoQyjJs.mft (raw, json)
Hash identifier: JoE32QzwCEtMIADyXLo0PQNl8Pf0mDl0wBCFtHDqta0=
Subject key identifier: 16:BE:B0:7E:67:D5:9D:90:6F:AC:6A:9E:AC:22:BB:09:66:0E:94:4F
Authority key identifier: BC:9C:40:5F:14:2E:53:EB:67:B1:C4:99:23:AB:79:5E:84:32:8C:9B
Certificate issuer: /CN=bc9c405f142e53eb67b1c49923ab795e84328c9b
Certificate serial: 0198741936DFDB423E70E0BF17713F663A15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJxAXxQuU-tnscSZI6t5XoQyjJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/b816b9-91b0-46da-8e58-91488a34fcc8/1/vJxAXxQuU-tnscSZI6t5XoQyjJs.mft
Manifest number: 1616
Signing time: Mon 04 Aug 2025 08:01:06 +0000
Manifest this update: Mon 04 Aug 2025 08:01:06 +0000
Manifest next update: Tue 05 Aug 2025 08:01:06 +0000
Files and hashes: 1: irXjb7CbWugP3w5JDOFWDswYhlc.roa (hash: xfc5cfeM1faq3Raf49DNOnepZD3IOLsHNfYtcKklaZE=)
2: vJxAXxQuU-tnscSZI6t5XoQyjJs.crl (hash: tjiVAOMXaZcg0B/NpyO15v3pyQqAcxzDszOiTG3bIX4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/b816b9-91b0-46da-8e58-91488a34fcc8/1/vJxAXxQuU-tnscSZI6t5XoQyjJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/b816b9-91b0-46da-8e58-91488a34fcc8/1/vJxAXxQuU-tnscSZI6t5XoQyjJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/vJxAXxQuU-tnscSZI6t5XoQyjJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:19:36:df:db:42:3e:70:e0:bf:17:71:3f:66:3a:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc9c405f142e53eb67b1c49923ab795e84328c9b
Validity
Not Before: Aug 4 08:01:06 2025 GMT
Not After : Aug 5 08:01:06 2025 GMT
Subject: CN=16beb07e67d59d906fac6a9eac22bb09660e944f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e9:8b:a3:07:79:51:7a:dd:8e:25:fa:aa:44:
29:95:cf:71:4d:59:93:d5:5a:ec:41:82:bc:99:b2:
b3:16:c6:4a:74:31:0a:87:21:fa:24:28:54:fe:62:
e2:a8:e1:9f:d4:1f:4f:bd:61:ea:6b:d9:18:fc:75:
30:d6:73:24:80:e7:e6:08:dd:d2:af:a8:7e:dc:7c:
0f:25:3e:45:8e:e4:e9:f1:81:a9:05:51:d4:ce:de:
73:af:78:59:3f:3f:08:0c:ec:17:cb:86:be:82:93:
0a:7f:fe:ca:48:70:bf:84:a6:c3:91:13:cc:b0:4d:
4f:d6:29:9c:e1:0d:e0:36:75:54:59:6c:ac:05:27:
9a:24:7c:62:65:cf:0c:a4:a4:b4:83:78:8f:05:14:
25:3a:d8:17:84:88:5a:a5:96:54:14:d2:11:1f:90:
77:55:9a:c4:88:d4:d3:b2:ea:4d:83:aa:4d:7b:7c:
29:89:ad:19:77:89:3a:83:16:3a:bf:f5:b0:5f:cd:
dc:44:ca:bf:f9:8b:92:06:5c:4e:51:7f:50:cb:be:
78:a2:0d:ac:1c:8c:9e:98:cc:1b:54:4e:f7:65:d1:
82:3d:a4:eb:d0:d3:0e:8f:91:5a:40:30:8e:6b:6d:
2a:aa:13:fb:c2:e6:55:44:7b:84:25:e5:c3:58:d7:
a3:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:BE:B0:7E:67:D5:9D:90:6F:AC:6A:9E:AC:22:BB:09:66:0E:94:4F
X509v3 Authority Key Identifier:
keyid:BC:9C:40:5F:14:2E:53:EB:67:B1:C4:99:23:AB:79:5E:84:32:8C:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJxAXxQuU-tnscSZI6t5XoQyjJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/b816b9-91b0-46da-8e58-91488a34fcc8/1/vJxAXxQuU-tnscSZI6t5XoQyjJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/b816b9-91b0-46da-8e58-91488a34fcc8/1/vJxAXxQuU-tnscSZI6t5XoQyjJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:91:d4:88:a0:95:e9:68:99:1e:68:5a:00:25:b7:58:b7:84:
b6:48:77:95:1c:cc:56:e8:f9:a0:cc:d6:3a:e5:e5:b4:b5:cc:
a1:8a:f4:11:03:15:3a:92:d8:44:01:f7:03:26:59:eb:53:f5:
1e:92:7e:c5:c5:ec:14:66:45:48:5d:e3:58:57:fa:ed:ac:b1:
c9:0b:d7:07:6d:b1:cb:15:9e:be:75:47:38:83:71:8b:85:c0:
f0:a7:dd:75:54:2d:08:62:8e:c0:76:44:ba:1b:36:f1:ea:c7:
7a:f8:5d:3a:1c:92:df:4a:bf:2e:b5:b0:14:eb:15:9e:91:3d:
83:d7:31:d6:92:67:3c:81:b6:a3:88:cd:c6:b1:ac:ff:dd:ae:
cc:5a:f1:af:8e:40:39:0a:db:f3:8a:42:70:ff:f9:58:11:56:
61:62:5f:21:be:4c:52:3d:f8:e2:df:6c:ad:24:fb:a4:1f:b6:
36:c0:99:ff:bd:9b:8b:8d:4f:43:b0:5b:3d:56:8f:62:66:f3:
82:5a:b3:62:1a:a4:ad:22:f4:fa:b6:e8:8b:16:ee:46:af:43:
b6:c9:a0:a7:21:18:98:9e:30:fe:ca:73:cd:46:d3:b3:37:62:
1c:a0:75:fa:f7:07:ec:fa:61:1a:d8:73:2b:c6:78:08:c0:6f:
43:8e:5d:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:27:54 2025 by rpki-client