Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/3abb5f-3379-4ed6-94c1-c7e338ff3b59/1/vIiPBTCZ-sOlWYZEfLOxA4SV8zI.mft
File: vIiPBTCZ-sOlWYZEfLOxA4SV8zI.mft (raw, json)
Hash identifier: qlG+87lf282/VLPybqIVi5WRPixC1ONRjxEjv/8xBIE=
Subject key identifier: 78:60:93:80:82:21:90:AC:35:A1:B1:86:23:8A:59:8B:D9:D1:FF:6E
Authority key identifier: BC:88:8F:05:30:99:FA:C3:A5:59:86:44:7C:B3:B1:03:84:95:F3:32
Certificate issuer: /CN=bc888f053099fac3a55986447cb3b1038495f332
Certificate serial: 01989F3AA4A87F2FC343F4DD602DED55A4A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vIiPBTCZ-sOlWYZEfLOxA4SV8zI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/3abb5f-3379-4ed6-94c1-c7e338ff3b59/1/vIiPBTCZ-sOlWYZEfLOxA4SV8zI.mft
Manifest number: 0A27
Signing time: Tue 12 Aug 2025 17:01:17 +0000
Manifest this update: Tue 12 Aug 2025 17:01:17 +0000
Manifest next update: Wed 13 Aug 2025 17:01:17 +0000
Files and hashes: 1: aAkRe7Jm1-dx0uQ95bjB-xCoSJc.roa (hash: c881F7DVYDXIoCHO9T/789+rI+yYESWFHrY/FcifwTE=)
2: vIiPBTCZ-sOlWYZEfLOxA4SV8zI.crl (hash: SFQYnLXZL8KFPu5sj0pfU350bSKf0rVKsb1kQgQhYb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/3abb5f-3379-4ed6-94c1-c7e338ff3b59/1/vIiPBTCZ-sOlWYZEfLOxA4SV8zI.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/3abb5f-3379-4ed6-94c1-c7e338ff3b59/1/vIiPBTCZ-sOlWYZEfLOxA4SV8zI.mft
rsync://rpki.ripe.net/repository/DEFAULT/vIiPBTCZ-sOlWYZEfLOxA4SV8zI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 13:24:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:9f:3a:a4:a8:7f:2f:c3:43:f4:dd:60:2d:ed:55:a4:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc888f053099fac3a55986447cb3b1038495f332
Validity
Not Before: Aug 12 17:01:17 2025 GMT
Not After : Aug 13 17:01:17 2025 GMT
Subject: CN=78609380822190ac35a1b186238a598bd9d1ff6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:71:a8:9b:2c:c3:23:5d:9c:67:32:63:f6:83:
b2:d4:31:23:42:8a:4b:f3:ec:a9:5d:b5:c5:f0:1b:
2c:20:fc:5c:b9:32:ce:96:47:e2:44:a5:12:5a:5a:
60:66:78:5b:a0:38:fd:36:64:d4:52:f3:97:a1:f9:
f2:5e:af:c7:1e:41:f1:b6:8a:24:bb:e0:07:fb:eb:
4c:26:35:fa:38:48:e5:42:9a:b4:a3:75:4b:5c:80:
0f:9a:bd:6f:ba:d4:9d:fb:53:3c:2d:b6:bb:1f:cc:
68:23:a6:2b:6e:7c:55:28:3a:0d:12:a8:aa:54:e1:
24:db:a6:a4:fb:01:89:da:c8:f4:2b:91:5a:e6:65:
f4:8b:c7:a2:c8:b6:5a:e7:1a:fc:be:12:d0:b0:8a:
78:20:7a:2c:c4:6d:e8:b9:67:6e:50:7a:2c:86:ee:
cf:23:00:7b:22:be:c6:4f:2e:fd:b8:b1:1b:81:bf:
b4:3a:6e:ca:bd:2a:b1:66:66:1c:41:f5:2d:d3:3f:
5c:3a:2b:38:42:45:65:13:d1:a0:4d:46:34:d8:a1:
cd:7e:a4:45:cb:96:9a:bd:15:18:7f:61:b2:1b:d8:
fe:5d:f5:8c:e6:54:08:18:1c:40:48:d7:a1:58:f9:
0f:24:82:fd:7b:17:b5:e9:ee:39:b6:1d:78:de:c0:
c1:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:60:93:80:82:21:90:AC:35:A1:B1:86:23:8A:59:8B:D9:D1:FF:6E
X509v3 Authority Key Identifier:
keyid:BC:88:8F:05:30:99:FA:C3:A5:59:86:44:7C:B3:B1:03:84:95:F3:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vIiPBTCZ-sOlWYZEfLOxA4SV8zI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3abb5f-3379-4ed6-94c1-c7e338ff3b59/1/vIiPBTCZ-sOlWYZEfLOxA4SV8zI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3abb5f-3379-4ed6-94c1-c7e338ff3b59/1/vIiPBTCZ-sOlWYZEfLOxA4SV8zI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:90:e4:b6:a5:86:07:87:e6:39:7e:ff:0f:7f:5c:ff:71:01:
02:1d:b4:1e:2b:02:fd:fb:49:30:c4:a9:ea:91:ac:bd:9b:d5:
f1:6d:87:80:1e:1e:04:2e:30:bd:88:0e:b3:c1:53:91:01:ca:
da:9b:fe:7c:13:09:87:f3:76:9c:80:d1:96:6c:09:83:96:bd:
06:99:21:8f:c4:99:1e:b4:c5:9b:d5:86:95:d3:ab:8d:22:04:
5e:67:db:54:23:d6:1a:b3:bf:9c:de:a7:22:75:53:ef:7c:30:
9a:29:28:0b:f5:14:0b:e3:28:1c:f6:a2:31:4f:2f:3b:4a:a4:
e6:9f:42:eb:ea:78:38:97:aa:43:4b:71:65:7c:58:0a:55:50:
17:e6:c6:6f:cd:6a:e4:00:7e:1e:10:b3:42:86:b8:e0:32:c6:
0f:be:0b:08:54:47:6f:33:e9:94:3e:4a:b7:1e:cf:f4:96:8f:
2c:9b:0f:b9:ef:7a:7c:84:16:a1:94:78:73:b3:3c:57:80:68:
2b:57:06:f4:2e:54:26:56:2a:7d:28:ae:a5:2c:fc:d6:47:90:
b6:79:84:49:71:e6:78:50:8f:11:2a:b0:f6:f2:ce:48:17:2b:
69:be:f0:cc:d3:f8:33:9f:c2:fe:c6:97:9d:b0:a7:d5:97:b2:
7e:a7:5f:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 12 19:04:31 2025 by rpki-client