Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/c3ab69-7162-4222-aa20-4e3b20ec16a3/1/vGOjbVyAZRqJp2kGyeNAL7NFaNo.mft
File: vGOjbVyAZRqJp2kGyeNAL7NFaNo.mft (raw, json)
Hash identifier: /SuechJlW2GtjQkYzaP1Dpz4lEINmGz2CqkXATW0uok=
Subject key identifier: 69:3B:A4:7D:65:70:BC:F3:1F:E2:05:37:48:8A:85:A0:5B:A7:82:D2
Authority key identifier: BC:63:A3:6D:5C:80:65:1A:89:A7:69:06:C9:E3:40:2F:B3:45:68:DA
Certificate issuer: /CN=bc63a36d5c80651a89a76906c9e3402fb34568da
Certificate serial: 019874F54244D790F966DB366C02AF0D1DE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vGOjbVyAZRqJp2kGyeNAL7NFaNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/c3ab69-7162-4222-aa20-4e3b20ec16a3/1/vGOjbVyAZRqJp2kGyeNAL7NFaNo.mft
Manifest number: 03A1
Signing time: Mon 04 Aug 2025 12:01:27 +0000
Manifest this update: Mon 04 Aug 2025 12:01:27 +0000
Manifest next update: Tue 05 Aug 2025 12:01:27 +0000
Files and hashes: 1: 8pgaGBXBaUb02KKfxBTaArJBx7M.roa (hash: MwzlZRqfpq85Jtfy1BfMUyKAa2i1GlwvDq8Y0Ug3Xu8=)
2: B6_6e2WVsyfaOmjKudfNr0g4dMs.roa (hash: rRjjEbNFtXOP8HK5A6ODglpO6DXLSRaxFyjXQUR8uMo=)
3: vGOjbVyAZRqJp2kGyeNAL7NFaNo.crl (hash: 1Fu6Qmr5/QP1CvIFCj++FwzU+/VXgD8CX7VxERO1vyg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/c3ab69-7162-4222-aa20-4e3b20ec16a3/1/vGOjbVyAZRqJp2kGyeNAL7NFaNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/c3ab69-7162-4222-aa20-4e3b20ec16a3/1/vGOjbVyAZRqJp2kGyeNAL7NFaNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/vGOjbVyAZRqJp2kGyeNAL7NFaNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:f5:42:44:d7:90:f9:66:db:36:6c:02:af:0d:1d:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc63a36d5c80651a89a76906c9e3402fb34568da
Validity
Not Before: Aug 4 12:01:27 2025 GMT
Not After : Aug 5 12:01:27 2025 GMT
Subject: CN=693ba47d6570bcf31fe20537488a85a05ba782d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:fa:04:88:c7:5c:f5:94:20:27:84:3c:57:66:
75:1d:24:ce:e1:b2:77:78:25:bd:ed:87:01:71:62:
78:cf:67:db:9a:62:84:c5:3e:1f:82:43:ec:96:5c:
a0:6b:08:85:5b:72:87:50:c8:63:64:8e:32:c8:44:
bd:12:0c:19:3d:c4:66:01:75:c6:cc:5c:45:ea:6c:
e7:dc:26:1e:ff:8c:9e:36:7b:1a:f0:55:ab:44:c9:
a5:27:96:d4:50:d8:8f:bd:48:27:37:99:1c:b3:7e:
4a:26:32:a7:5a:52:11:a6:15:94:b3:3d:79:35:2b:
a8:df:cb:b7:e9:82:0f:c1:6c:35:16:89:70:60:b6:
83:5c:74:16:2c:d7:bc:1d:f0:a9:0c:fa:bd:97:72:
7a:05:f1:f8:13:4a:29:79:a5:40:b4:89:0f:24:9a:
fa:99:1a:d4:64:68:3c:15:79:8c:e5:da:9e:ae:ba:
db:1b:8f:8c:51:88:51:5c:87:e6:54:5c:3f:a0:9a:
17:df:d7:06:2d:3c:82:97:14:5d:0f:4c:e0:b4:f5:
2a:0b:0a:b7:a1:da:60:7e:4b:26:ad:cc:c8:a0:1f:
aa:1a:cd:59:ec:9c:eb:2c:74:6a:50:ac:c3:47:fd:
49:d1:23:12:71:ea:59:c9:f0:f7:eb:de:5a:6e:0d:
d3:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:3B:A4:7D:65:70:BC:F3:1F:E2:05:37:48:8A:85:A0:5B:A7:82:D2
X509v3 Authority Key Identifier:
keyid:BC:63:A3:6D:5C:80:65:1A:89:A7:69:06:C9:E3:40:2F:B3:45:68:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vGOjbVyAZRqJp2kGyeNAL7NFaNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/c3ab69-7162-4222-aa20-4e3b20ec16a3/1/vGOjbVyAZRqJp2kGyeNAL7NFaNo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/c3ab69-7162-4222-aa20-4e3b20ec16a3/1/vGOjbVyAZRqJp2kGyeNAL7NFaNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:21:24:ee:03:dc:a7:3d:a4:e6:cf:d2:30:87:5f:87:d7:97:
70:88:93:75:ca:9e:60:36:45:2f:ea:19:e5:84:ae:9a:78:95:
8e:b9:24:0f:67:95:33:b8:60:ad:8b:f4:39:7c:08:7a:b9:a2:
74:9d:34:01:27:c7:d4:db:2d:ff:80:e2:0f:bf:11:93:78:3d:
6f:38:9b:5f:93:c8:84:f5:93:3e:2e:9f:a3:3a:f8:cc:78:7c:
a0:cb:f8:37:f5:30:57:31:f9:18:37:75:38:ef:4e:3b:a2:8c:
ea:52:9b:40:f3:99:32:1c:8c:ee:be:5c:eb:c1:bc:5d:cc:f6:
70:16:d5:4d:c9:6e:93:96:f1:e9:f2:74:f0:a3:3a:79:3a:80:
5b:40:54:e3:79:dd:b9:d8:39:45:57:3a:b1:c9:e5:3a:e2:d6:
42:f4:42:b9:b9:af:c0:13:d1:8d:29:e2:bd:1c:44:17:db:12:
15:e3:37:7e:b6:7d:43:fe:1a:64:0c:9f:c1:c8:db:d2:6a:c7:
2f:63:6e:89:9b:d1:74:9d:c2:83:31:43:6f:66:66:fb:b2:64:
62:9f:84:48:f1:5a:c2:c6:ee:a6:14:82:8f:ef:b5:ea:6e:d8:
e5:42:ac:dc:e9:c8:d7:73:60:e9:6b:ac:dc:21:e6:25:9b:bf:
e2:c7:a7:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 14:45:32 2025 by rpki-client