Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/a0d73d-6564-4142-a6ee-83e73cb25ea5/1/vE4hsn1vhOvdiIxo55zlVchG2ss.mft
File: vE4hsn1vhOvdiIxo55zlVchG2ss.mft (raw, json)
Hash identifier: M63SqC/Mkzlrx3X6EWBBO+4ufgcqjmqh3bO8Fh5hBEU=
Subject key identifier: FB:69:BA:7E:39:D5:6D:4F:13:11:CF:9D:31:65:9D:F4:6F:65:B3:F5
Authority key identifier: BC:4E:21:B2:7D:6F:84:EB:DD:88:8C:68:E7:9C:E5:55:C8:46:DA:CB
Certificate issuer: /CN=bc4e21b27d6f84ebdd888c68e79ce555c846dacb
Certificate serial: 019874BE1881D62CA12DAC36FEC7C0994B76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vE4hsn1vhOvdiIxo55zlVchG2ss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/a0d73d-6564-4142-a6ee-83e73cb25ea5/1/vE4hsn1vhOvdiIxo55zlVchG2ss.mft
Manifest number: 1619
Signing time: Mon 04 Aug 2025 11:01:11 +0000
Manifest this update: Mon 04 Aug 2025 11:01:11 +0000
Manifest next update: Tue 05 Aug 2025 11:01:11 +0000
Files and hashes: 1: F3kOmnX-kEtjSilXO2Pe0L_37Jo.roa (hash: lIJ2C488mP6Ma0OF6csW3I8GzUd4jiMp8CCjsO6b5Eg=)
2: Po0728QWErCTmXCeFPKP0UlTEug.roa (hash: IpBaviswNtBt65qOWaQEl9AqBmhUCEIpYlrqfl+L76A=)
3: vE4hsn1vhOvdiIxo55zlVchG2ss.crl (hash: 2IITm0r4u9BitTB9H57+I84WX7p5yr2irq6c+tywTBk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/a0d73d-6564-4142-a6ee-83e73cb25ea5/1/vE4hsn1vhOvdiIxo55zlVchG2ss.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/a0d73d-6564-4142-a6ee-83e73cb25ea5/1/vE4hsn1vhOvdiIxo55zlVchG2ss.mft
rsync://rpki.ripe.net/repository/DEFAULT/vE4hsn1vhOvdiIxo55zlVchG2ss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 11:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:be:18:81:d6:2c:a1:2d:ac:36:fe:c7:c0:99:4b:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc4e21b27d6f84ebdd888c68e79ce555c846dacb
Validity
Not Before: Aug 4 11:01:11 2025 GMT
Not After : Aug 5 11:01:11 2025 GMT
Subject: CN=fb69ba7e39d56d4f1311cf9d31659df46f65b3f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:8a:86:93:60:4b:0e:e6:1b:ab:97:68:e7:21:
39:e6:8f:3e:84:dc:bc:f5:90:d1:dd:89:72:95:d6:
be:3f:fe:58:16:cc:70:42:d1:10:32:a1:a6:25:47:
42:ee:fc:d3:c8:78:2e:3e:03:8c:ef:dc:dd:db:50:
b9:6f:2b:ce:3b:af:e0:31:4a:bc:7e:3b:ed:aa:28:
c3:13:06:42:52:9d:1d:d8:f2:1e:96:ad:96:07:87:
8e:2c:0e:7e:40:09:fc:c8:14:29:67:53:d7:21:24:
94:a9:44:06:69:c7:c6:fb:14:47:b2:f4:29:8a:a4:
10:0c:e8:5b:ac:50:03:ad:7d:79:14:46:96:af:8a:
ff:52:66:63:8d:12:44:e0:55:21:e2:0a:ac:64:34:
0a:d7:aa:b0:64:14:75:63:f7:cf:08:43:f8:06:98:
0b:f6:0a:20:9c:57:16:6e:a8:92:0a:d2:1e:14:da:
05:79:43:3a:a1:8f:ae:21:00:ca:61:a9:b5:13:ee:
7c:ef:dc:0a:49:24:1c:76:3e:5a:a3:4a:df:b8:5a:
9a:42:41:d1:76:ce:e5:36:10:81:4b:6f:81:03:21:
e2:a5:69:a3:50:aa:9e:a7:58:75:6c:41:e1:19:d8:
ec:f0:27:e0:75:20:87:ae:f1:d2:78:23:da:e6:3c:
cf:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:69:BA:7E:39:D5:6D:4F:13:11:CF:9D:31:65:9D:F4:6F:65:B3:F5
X509v3 Authority Key Identifier:
keyid:BC:4E:21:B2:7D:6F:84:EB:DD:88:8C:68:E7:9C:E5:55:C8:46:DA:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vE4hsn1vhOvdiIxo55zlVchG2ss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/a0d73d-6564-4142-a6ee-83e73cb25ea5/1/vE4hsn1vhOvdiIxo55zlVchG2ss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/a0d73d-6564-4142-a6ee-83e73cb25ea5/1/vE4hsn1vhOvdiIxo55zlVchG2ss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:43:bb:91:29:ca:6b:26:63:91:46:ce:66:00:24:55:59:09:
5a:57:71:32:d1:6c:7d:ea:0c:d2:e2:18:b2:f2:bd:67:08:24:
20:f9:d1:dd:62:37:04:f7:a0:e0:18:36:a9:95:f3:a1:aa:67:
db:07:4b:62:4e:40:32:d6:7b:13:2a:2f:5d:65:97:c8:33:86:
a0:01:27:7e:1b:22:6d:bd:74:58:d0:32:f2:9b:ee:f5:33:46:
d3:2c:8b:3c:1b:c7:a3:53:41:39:ad:29:b9:9f:c3:7b:30:a6:
37:a4:5a:83:b5:e9:a7:af:66:ee:21:cc:f6:04:22:c3:e2:f6:
ca:26:9d:cf:ba:11:9e:6e:0e:03:ab:02:30:52:fe:bb:63:0c:
65:9a:ac:1d:ec:04:0f:44:7b:73:7c:30:45:34:86:27:2b:cd:
b8:7d:31:6b:f1:26:8b:0d:51:b9:2c:95:f2:27:2b:76:c8:ff:
8d:05:c6:4b:e5:95:ad:a9:2d:c8:dc:06:cd:8f:9c:62:dd:68:
aa:c1:15:5c:41:75:c0:f6:f4:0d:bb:d3:34:c2:8d:f5:2a:a5:
4e:2e:5d:6d:98:a0:cc:b6:8a:90:81:db:fd:ad:35:29:c6:d4:
ee:b7:2b:bf:d2:2d:b3:78:37:1a:88:01:6f:1c:d4:81:04:e6:
a3:55:5f:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 19:02:54 2025 by rpki-client