Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/07bf93-6b71-4752-887e-71b5056d5b02/1/vouurnYAGofa7rC8Ko3RDOZfhl0.mft
File: vouurnYAGofa7rC8Ko3RDOZfhl0.mft (raw, json)
Hash identifier: Z8vP44646/EkOGRWTBybULsisa1HuYBo/MXdBFUU3yg=
Subject key identifier: F0:25:19:2A:85:AD:5E:47:78:96:F3:FB:45:E3:84:A1:17:F1:D5:46
Authority key identifier: BE:8B:AE:AE:76:00:1A:87:DA:EE:B0:BC:2A:8D:D1:0C:E6:5F:86:5D
Certificate issuer: /CN=be8baeae76001a87daeeb0bc2a8dd10ce65f865d
Certificate serial: 0198838C585D6DBC5EA296A3DF566CBF96C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vouurnYAGofa7rC8Ko3RDOZfhl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/07bf93-6b71-4752-887e-71b5056d5b02/1/vouurnYAGofa7rC8Ko3RDOZfhl0.mft
Manifest number: 0FD8
Signing time: Thu 07 Aug 2025 08:01:09 +0000
Manifest this update: Thu 07 Aug 2025 08:01:09 +0000
Manifest next update: Fri 08 Aug 2025 08:01:09 +0000
Files and hashes: 1: 46j1tt7qHpvV87bnAFMEiJ1r1Ks.roa (hash: e6vcIxT4dfv15f9EpnyGTV3GOABteiMDMxyJleMHiCM=)
2: vouurnYAGofa7rC8Ko3RDOZfhl0.crl (hash: GNMKZ29qhjvT/9HQtwLzFClO6/f5e1uhhxxnCBKC8HM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/07bf93-6b71-4752-887e-71b5056d5b02/1/vouurnYAGofa7rC8Ko3RDOZfhl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/07bf93-6b71-4752-887e-71b5056d5b02/1/vouurnYAGofa7rC8Ko3RDOZfhl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/vouurnYAGofa7rC8Ko3RDOZfhl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:83:8c:58:5d:6d:bc:5e:a2:96:a3:df:56:6c:bf:96:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be8baeae76001a87daeeb0bc2a8dd10ce65f865d
Validity
Not Before: Aug 7 08:01:09 2025 GMT
Not After : Aug 8 08:01:09 2025 GMT
Subject: CN=f025192a85ad5e477896f3fb45e384a117f1d546
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:8d:f1:1a:83:25:2e:24:0d:b7:12:45:25:85:
be:46:f2:7d:9a:4d:aa:a2:de:26:6c:cf:a2:da:c3:
70:da:ce:ae:64:c6:0b:bf:0f:a5:83:9c:6f:98:93:
ef:5f:9b:c2:85:2a:db:77:08:4d:49:f2:54:ad:f9:
c1:1a:74:35:38:32:0d:34:13:a9:e1:c1:7c:bc:d9:
53:3f:7d:50:87:8a:95:81:5f:a1:33:b5:29:b6:1f:
a6:54:3e:ee:94:67:40:93:38:5c:d1:08:c3:de:3f:
88:1c:d9:ae:ee:7e:94:34:ab:23:bb:aa:ab:14:01:
a7:9d:2a:60:2e:62:2c:c6:56:f9:6c:2e:58:d9:86:
d0:2e:36:16:ea:44:c2:44:46:7f:a2:bf:90:2b:5c:
27:b2:33:e7:69:bb:0f:47:67:20:1e:6a:64:14:dd:
9c:23:c2:4f:2f:28:22:fa:b8:2b:19:08:f8:97:d6:
b2:a9:84:8e:63:d5:06:21:4b:8a:33:24:f8:51:f4:
a9:be:e4:89:4b:a7:fd:fa:99:78:81:12:6d:d2:f9:
48:5f:d2:26:49:30:a8:37:39:e6:a5:96:29:1c:96:
a6:c6:1f:f7:40:8a:e7:f9:04:f5:cb:ca:95:cb:32:
bf:ba:66:ed:25:d3:98:4a:c1:db:0e:bd:ac:9f:48:
c7:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:25:19:2A:85:AD:5E:47:78:96:F3:FB:45:E3:84:A1:17:F1:D5:46
X509v3 Authority Key Identifier:
keyid:BE:8B:AE:AE:76:00:1A:87:DA:EE:B0:BC:2A:8D:D1:0C:E6:5F:86:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vouurnYAGofa7rC8Ko3RDOZfhl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/07bf93-6b71-4752-887e-71b5056d5b02/1/vouurnYAGofa7rC8Ko3RDOZfhl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/07bf93-6b71-4752-887e-71b5056d5b02/1/vouurnYAGofa7rC8Ko3RDOZfhl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:1b:37:48:d4:69:be:35:62:50:f5:a0:b4:2c:f5:80:bf:48:
5c:9c:4c:a5:c1:f7:e5:79:a4:4e:dd:74:17:31:66:0f:75:28:
2c:d8:48:92:16:cd:2e:cf:a5:83:c4:85:24:8d:d3:c0:99:b9:
98:05:47:b6:40:21:ad:4a:8d:fd:01:86:18:80:bf:c2:83:1e:
29:8d:ab:69:a9:00:7c:55:b9:64:a6:58:20:a2:13:d3:3b:cf:
4b:6a:11:40:e4:de:7d:6f:86:a9:41:c7:c5:a5:68:6f:47:7d:
db:97:6d:c3:bc:31:52:59:0d:cf:fe:9b:04:69:2c:e8:96:dc:
ec:3b:d6:25:5d:4e:d7:79:74:e7:16:9a:d5:ba:35:0f:5d:2b:
1f:4b:e9:85:25:f9:62:ab:d6:b3:f3:23:3b:8c:f0:a6:7d:31:
5e:ff:62:5a:bf:7a:23:38:78:5b:e7:45:a0:31:21:ad:d6:21:
c9:55:c2:69:e8:7d:18:e2:76:15:ca:c0:26:5a:7d:a5:b3:3b:
18:97:3e:b3:c7:31:14:65:a9:35:e9:be:35:68:8e:3f:b4:ee:
be:f1:e3:09:22:b0:57:6d:65:96:53:e6:9f:ab:4c:fd:55:c8:
a3:e4:33:7a:46:5d:c4:07:d7:52:c7:b5:61:94:37:fb:50:6b:
96:47:b3:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 17:28:46 2025 by rpki-client