Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/a55553-2975-4244-b260-5bdbf6f847f9/1/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.mft
File: vXN0f3i9Mo0K4ciRcbOBqhkBGs4.mft (raw, json)
Hash identifier: dxGKdC70zqAj2lhyKI74ABpPVNhAU3yL9I9eZHMLbyM=
Subject key identifier: 07:3B:91:DA:EE:81:05:98:65:F1:FA:C5:76:82:BE:33:E0:31:CE:D5
Authority key identifier: BD:73:74:7F:78:BD:32:8D:0A:E1:C8:91:71:B3:81:AA:19:01:1A:CE
Certificate issuer: /CN=bd73747f78bd328d0ae1c89171b381aa19011ace
Certificate serial: 01988FFE524A38D2754D992AF8D0A3ABED10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/a55553-2975-4244-b260-5bdbf6f847f9/1/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.mft
Manifest number: BA
Signing time: Sat 09 Aug 2025 18:01:05 +0000
Manifest this update: Sat 09 Aug 2025 18:01:05 +0000
Manifest next update: Sun 10 Aug 2025 18:01:05 +0000
Files and hashes: 1: D98Ck1_qKOXalzx0pMS_FarSGM8.roa (hash: u49BF5lQyjsLl1bn3ULD3SUQ9N/pcixaCTatnIvy4v0=)
2: tCV34_eFEm-bBTr3p-Dum9J6ZzA.roa (hash: lJs/8jun541iQ5FmJ+SShA8Wi27D6ss5N6YmTLmASl4=)
3: vXN0f3i9Mo0K4ciRcbOBqhkBGs4.crl (hash: gTFobh6G1gb5rQ5hnfiI8GI4lX9QtdTWLdHQUufaosg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/a55553-2975-4244-b260-5bdbf6f847f9/1/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/a55553-2975-4244-b260-5bdbf6f847f9/1/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:fe:52:4a:38:d2:75:4d:99:2a:f8:d0:a3:ab:ed:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd73747f78bd328d0ae1c89171b381aa19011ace
Validity
Not Before: Aug 9 18:01:05 2025 GMT
Not After : Aug 10 18:01:05 2025 GMT
Subject: CN=073b91daee81059865f1fac57682be33e031ced5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ea:39:0d:36:c0:a1:59:41:b7:6e:dc:50:fb:
03:d6:a2:eb:33:13:f0:5d:62:2d:57:26:53:44:0a:
be:6b:73:36:81:51:36:30:dc:7a:e5:23:e4:99:f2:
d5:70:e3:84:d6:d2:e7:0f:de:d8:77:19:e3:5e:5b:
57:43:91:d0:e3:e8:1f:59:fa:e5:e9:ed:17:69:60:
56:05:0d:4e:14:8d:9f:83:5e:cc:72:14:b6:fe:5e:
fa:5d:77:05:85:65:22:6e:ac:46:e6:01:65:a2:b7:
fd:d5:2a:8e:a4:3b:0f:f4:46:30:80:72:60:04:75:
7e:e2:f0:dd:6d:8d:dc:cc:2a:fe:26:a9:86:fd:dd:
cb:4b:0d:68:ca:b4:d2:17:ac:ae:4c:31:ce:03:cb:
69:72:6a:27:a4:53:b8:38:ce:b3:65:a9:91:5c:e0:
a3:e0:7b:db:91:67:f4:34:2b:8c:a8:6a:79:84:61:
44:8f:f3:ee:41:6e:3e:bd:16:d4:b3:ba:e1:e0:69:
82:3b:d3:76:25:7d:46:14:fc:ca:8b:69:15:46:61:
68:13:da:7b:68:c5:51:88:5e:5f:17:05:8b:b4:84:
ae:9f:6c:23:9c:f1:70:0f:20:21:e6:54:14:2a:1e:
76:6e:57:e8:27:8e:e5:f3:31:19:4b:54:22:a9:57:
2c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:3B:91:DA:EE:81:05:98:65:F1:FA:C5:76:82:BE:33:E0:31:CE:D5
X509v3 Authority Key Identifier:
keyid:BD:73:74:7F:78:BD:32:8D:0A:E1:C8:91:71:B3:81:AA:19:01:1A:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a55553-2975-4244-b260-5bdbf6f847f9/1/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a55553-2975-4244-b260-5bdbf6f847f9/1/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:8d:55:b4:0b:58:e8:c9:28:46:1b:12:6a:15:d1:c5:e9:96:
89:b2:cd:ee:b3:db:06:5e:2a:75:ae:f0:ba:a1:d5:04:5d:7b:
46:cd:8a:f2:1d:69:f6:83:c1:fb:dc:6b:e7:01:c1:df:18:9a:
be:c1:5e:4e:f9:51:a2:4e:ff:03:e1:be:cf:ed:d1:a0:0e:6f:
88:21:df:84:21:3b:ca:ce:d0:56:be:0e:0d:97:fc:de:fb:59:
29:6c:44:fa:b3:47:5d:d8:b7:16:be:b2:38:f8:e7:dd:86:76:
f0:77:27:3d:a9:f8:39:25:f4:3d:de:88:6a:fd:73:69:63:dc:
19:dc:3b:8c:0e:f2:ed:dc:3b:e9:6c:34:9f:e0:f4:8d:e6:39:
39:7b:a1:6d:62:5c:35:da:a3:9b:d7:90:70:84:e0:da:5f:1f:
cb:46:7b:5c:02:69:b0:65:7c:30:97:da:40:2f:cc:30:89:ee:
62:b2:0a:19:50:8f:c7:0a:2f:82:56:6a:e7:33:a2:d1:8f:56:
32:ad:03:ac:e6:d0:0f:9f:47:a2:e2:09:e3:99:27:78:8c:7d:
65:47:1c:81:5c:c6:67:2c:ec:8d:44:ce:cf:50:c9:d6:d4:5f:
c7:8c:8a:77:f8:be:18:f3:1f:e3:59:2e:5c:a9:fd:ca:8c:4c:
d6:28:88:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 23:15:46 2025 by rpki-client