Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/005a47-b13c-42d7-8332-d099617beb56/1/vj908rbk4o6f9so8yjpdeMosrWo.mft
File: vj908rbk4o6f9so8yjpdeMosrWo.mft (raw, json)
Hash identifier: WDUqcgePzJnYE7zcyACMwhWt6WqiD/agpmAgiZHpgKc=
Subject key identifier: 90:4D:14:FF:56:56:3E:B2:CE:1A:BF:0C:D7:D4:35:A0:EF:EF:35:BC
Authority key identifier: BE:3F:74:F2:B6:E4:E2:8E:9F:F6:CA:3C:CA:3A:5D:78:CA:2C:AD:6A
Certificate issuer: /CN=be3f74f2b6e4e28e9ff6ca3cca3a5d78ca2cad6a
Certificate serial: 01987FE650BC900A15D83A442649E13DC2E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vj908rbk4o6f9so8yjpdeMosrWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/005a47-b13c-42d7-8332-d099617beb56/1/vj908rbk4o6f9so8yjpdeMosrWo.mft
Manifest number: 098A
Signing time: Wed 06 Aug 2025 15:00:57 +0000
Manifest this update: Wed 06 Aug 2025 15:00:57 +0000
Manifest next update: Thu 07 Aug 2025 15:00:57 +0000
Files and hashes: 1: XeXaIv0GnCQWCewZa3XGZvVcOuU.roa (hash: IlSm1MC8XpLI7JpFnpnOEj3N8KdmO1O/PRbAlZC1Yqs=)
2: keiUHgNWXQG1tCnd_1r6jW3ByFc.roa (hash: UWHI9ulMx4qU9scGVCWFH3JBiygO7K8ZUkSeDS3PRRY=)
3: vj908rbk4o6f9so8yjpdeMosrWo.crl (hash: ivZ3foChYaf4eFYlM2ChrMrFdTVbGXAM6KhIc+PcRfY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/005a47-b13c-42d7-8332-d099617beb56/1/vj908rbk4o6f9so8yjpdeMosrWo.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/005a47-b13c-42d7-8332-d099617beb56/1/vj908rbk4o6f9so8yjpdeMosrWo.mft
rsync://rpki.ripe.net/repository/DEFAULT/vj908rbk4o6f9so8yjpdeMosrWo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 14:26:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7f:e6:50:bc:90:0a:15:d8:3a:44:26:49:e1:3d:c2:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be3f74f2b6e4e28e9ff6ca3cca3a5d78ca2cad6a
Validity
Not Before: Aug 6 15:00:57 2025 GMT
Not After : Aug 7 15:00:57 2025 GMT
Subject: CN=904d14ff56563eb2ce1abf0cd7d435a0efef35bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:7f:55:a5:f7:e8:35:8f:c8:ff:f8:24:62:5c:
6d:1a:28:90:46:d9:a5:94:01:e3:13:a0:07:a5:96:
a0:fa:15:cd:da:2b:8b:43:35:24:5d:47:e9:15:1d:
0b:23:75:4f:0f:df:f4:9c:08:35:42:bc:6a:9c:35:
3f:48:07:f8:98:73:61:aa:56:1d:ec:4d:68:24:60:
11:69:97:90:3d:20:02:fa:c2:ab:2b:21:58:e9:c4:
6a:44:47:5c:7d:e8:93:91:54:78:95:4b:29:84:d1:
d3:a2:22:5b:2d:cc:48:50:16:7d:58:86:a9:9f:d9:
d0:d8:0b:a9:5a:53:0b:38:84:99:75:bf:ee:5a:c2:
f3:bb:60:72:ed:25:2c:bc:f3:73:03:f0:cc:51:28:
a0:b4:aa:74:81:ad:d6:08:96:8a:38:06:91:b1:1d:
08:c2:d0:02:ec:51:17:6c:9f:e3:d8:f8:6d:b0:5b:
62:14:90:7c:92:f4:a8:e8:48:78:2a:f5:2a:f3:4d:
64:d6:ec:69:a6:09:d6:f6:65:b3:7a:42:bb:d6:44:
5a:06:a7:1c:45:41:a8:63:2f:86:fa:8f:98:3f:c3:
27:74:72:a4:dc:e4:91:05:3b:45:0b:8d:b1:ea:bd:
ac:44:26:a5:6c:5f:7e:5f:01:f1:b3:6b:ed:0c:02:
53:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:4D:14:FF:56:56:3E:B2:CE:1A:BF:0C:D7:D4:35:A0:EF:EF:35:BC
X509v3 Authority Key Identifier:
keyid:BE:3F:74:F2:B6:E4:E2:8E:9F:F6:CA:3C:CA:3A:5D:78:CA:2C:AD:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vj908rbk4o6f9so8yjpdeMosrWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/005a47-b13c-42d7-8332-d099617beb56/1/vj908rbk4o6f9so8yjpdeMosrWo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/005a47-b13c-42d7-8332-d099617beb56/1/vj908rbk4o6f9so8yjpdeMosrWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:88:a0:17:31:6a:fd:da:e6:bf:e8:86:9c:d2:04:00:d8:41:
b2:96:ea:b9:8d:c3:40:1f:2d:e4:6f:d3:89:8a:c0:9d:c5:5c:
e0:48:ce:b2:04:11:3c:fb:4b:a8:08:19:4b:86:f2:6c:0c:e2:
7e:af:1b:92:73:3a:61:a6:27:33:80:10:bf:3f:22:22:2f:29:
62:52:0f:26:d9:1f:5f:3d:22:0d:05:c3:bf:a1:2c:60:a5:ce:
16:5a:b9:87:88:7f:c0:92:b1:81:3c:54:a5:be:f2:14:6c:8d:
ee:2c:bc:aa:dd:c8:20:61:5a:47:82:44:c8:7f:1e:aa:fb:51:
98:8d:26:2d:0c:4c:b8:2a:17:56:c4:29:3d:ba:f4:e7:99:6d:
ad:03:b1:f0:20:bf:66:ec:60:b2:dc:a0:85:9c:ce:fb:57:14:
e2:bd:a4:fb:f2:1b:65:ce:f5:ce:b9:e1:1a:68:3c:82:2c:1a:
b9:e1:aa:79:b5:03:6e:b3:f8:8d:2c:22:1d:cb:a6:a9:06:cf:
ed:c0:a2:1a:16:7a:d1:89:4a:f5:e2:8d:9b:44:09:24:31:25:
bc:c2:e3:47:66:c5:19:a0:0e:c5:6d:cc:fe:f2:d3:85:2b:15:
c5:08:51:65:de:31:91:74:e3:dd:ff:18:6d:0e:16:6a:77:0e:
e6:34:3a:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 16:25:46 2025 by rpki-client