Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/243b53-4b94-4244-a8ec-7c549f1ed16c/1/vKDsWVZDJCN0INUGubSY11LuIWg.mft
File: vKDsWVZDJCN0INUGubSY11LuIWg.mft (raw, json)
Hash identifier: OON8l7f1oTe0AVngK2AhgFF9WMIZ2wRlvE/RLwGsW/I=
Subject key identifier: CE:98:97:56:54:F0:BB:13:87:D8:DE:8D:AF:55:59:00:D2:F9:78:6E
Authority key identifier: BC:A0:EC:59:56:43:24:23:74:20:D5:06:B9:B4:98:D7:52:EE:21:68
Certificate issuer: /CN=bca0ec59564324237420d506b9b498d752ee2168
Certificate serial: 0198748755F95C4415F6E3DCD9F6520D9FE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vKDsWVZDJCN0INUGubSY11LuIWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/243b53-4b94-4244-a8ec-7c549f1ed16c/1/vKDsWVZDJCN0INUGubSY11LuIWg.mft
Manifest number: 161E
Signing time: Mon 04 Aug 2025 10:01:23 +0000
Manifest this update: Mon 04 Aug 2025 10:01:23 +0000
Manifest next update: Tue 05 Aug 2025 10:01:23 +0000
Files and hashes: 1: 4Yqz6mzAxsTp7LTA9pLRdzvqp7A.roa (hash: Ow3YpmTpRMl6qMkXjave/Z2C+8qskJo+DojTdIc7TV4=)
2: angMmzMX4gcbPlkGiqliyl-4RsY.roa (hash: EA5h2yHtnaMB3WqoR9kfvdgGUE89WgrdN7IrWKjGg8w=)
3: quctJA6JvCwqA-qZHXeVYB1FfY8.roa (hash: ktXd2zEikg+b61S+QwkN+l6BxFbDccaraJMDVmopSSI=)
4: vKDsWVZDJCN0INUGubSY11LuIWg.crl (hash: GjvRCq6BUamZgwuMIimQwQ+o3I1HzorLIkA/5/8CmQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/243b53-4b94-4244-a8ec-7c549f1ed16c/1/vKDsWVZDJCN0INUGubSY11LuIWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/243b53-4b94-4244-a8ec-7c549f1ed16c/1/vKDsWVZDJCN0INUGubSY11LuIWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vKDsWVZDJCN0INUGubSY11LuIWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 10:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:87:55:f9:5c:44:15:f6:e3:dc:d9:f6:52:0d:9f:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bca0ec59564324237420d506b9b498d752ee2168
Validity
Not Before: Aug 4 10:01:23 2025 GMT
Not After : Aug 5 10:01:23 2025 GMT
Subject: CN=ce98975654f0bb1387d8de8daf555900d2f9786e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:92:d0:1a:ed:2c:25:7d:f4:34:4b:d5:9b:ce:
d8:cb:60:1c:80:d7:d9:91:b9:46:18:a7:e3:04:6a:
c3:04:0c:0c:11:10:0e:79:60:8a:01:23:95:8c:e4:
4a:d8:56:8f:14:af:94:80:6e:96:67:53:b9:0f:4f:
43:6a:b7:af:44:4e:bc:54:a9:49:7a:05:23:6a:10:
9e:57:31:ee:5e:73:8e:1a:a9:e3:56:36:75:56:d8:
ea:cf:aa:6a:da:91:6e:87:58:33:f4:a4:b5:b7:29:
e8:cd:ab:9a:d4:c4:dd:ad:78:7d:55:39:f7:34:8c:
31:12:37:20:48:b5:af:67:21:45:9d:07:df:a9:3b:
eb:38:8b:e3:59:60:46:dc:a3:22:0a:6c:5a:3d:2a:
da:de:28:65:63:3d:59:8f:51:80:74:44:83:9f:b5:
90:ef:ef:76:1e:c2:67:83:19:05:c0:1b:d1:0b:20:
df:cf:15:d3:7d:74:09:c1:10:4d:0b:18:cd:45:26:
e3:ec:ea:d3:3c:c6:81:99:69:2b:96:e9:7a:fc:00:
1f:29:83:8f:ba:95:fd:74:47:f5:b8:48:2a:39:e7:
02:59:7d:5b:d0:87:38:7a:8e:c6:43:4e:57:43:59:
ed:c2:34:7e:97:e3:1b:cd:8f:5c:38:b8:b2:fa:74:
37:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:98:97:56:54:F0:BB:13:87:D8:DE:8D:AF:55:59:00:D2:F9:78:6E
X509v3 Authority Key Identifier:
keyid:BC:A0:EC:59:56:43:24:23:74:20:D5:06:B9:B4:98:D7:52:EE:21:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vKDsWVZDJCN0INUGubSY11LuIWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/243b53-4b94-4244-a8ec-7c549f1ed16c/1/vKDsWVZDJCN0INUGubSY11LuIWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/243b53-4b94-4244-a8ec-7c549f1ed16c/1/vKDsWVZDJCN0INUGubSY11LuIWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:66:86:87:d5:6e:03:fa:f2:c5:05:4f:36:97:25:96:f0:ba:
a5:8f:65:83:5c:0b:7e:8a:6e:07:51:1d:50:63:55:a4:33:75:
ea:16:0f:16:9c:62:85:bf:39:08:28:c9:a4:76:65:b8:9a:f2:
2b:08:70:29:64:74:84:81:b8:15:38:ac:6c:e6:3f:9c:6f:cb:
cb:fc:95:49:18:19:f4:ef:75:b6:73:48:a3:2a:cb:fe:51:b8:
a7:be:fe:f7:53:59:c8:06:27:cc:58:1c:5b:8d:00:2d:47:15:
c1:dd:c0:77:32:85:b1:2f:bc:a0:df:f6:37:f2:8f:aa:16:07:
aa:bb:d1:0f:80:7f:4f:5f:bd:cb:03:cf:fa:c5:0d:f0:41:88:
18:fc:4f:3f:a1:83:0d:d6:01:40:40:b9:f9:09:ee:bd:d2:1d:
c1:c5:18:64:34:04:33:60:57:ea:3b:32:4d:83:a8:4f:11:b5:
c2:b3:be:32:e3:4b:8b:db:08:68:e7:59:19:cd:43:50:27:30:
0b:67:65:57:1c:58:c4:04:da:2b:9d:b9:8e:ce:70:73:78:2f:
28:1d:b6:3d:01:26:39:88:70:6a:94:2f:99:c2:40:e1:fc:c0:
95:f4:8d:84:56:ae:d5:a8:f3:d8:bf:e2:c8:65:3b:4d:94:15:
36:d0:93:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 16:11:44 2025 by rpki-client