Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/76dba0-d86b-4d84-b15a-4d6d1256bf9b/1/vlJx8OFYfBRDTySA-RQQGFUHz6E.mft
File: vlJx8OFYfBRDTySA-RQQGFUHz6E.mft (raw, json)
Hash identifier: Zustkn4Z7nUfhZv8MdzZlymVXk7hYJazgSB+lRH0G8g=
Subject key identifier: 88:4C:3E:2B:8B:4A:7C:7E:7E:D3:78:FD:EB:AC:D2:5F:9D:6D:C7:4B
Authority key identifier: BE:52:71:F0:E1:58:7C:14:43:4F:24:80:F9:14:10:18:55:07:CF:A1
Certificate issuer: /CN=be5271f0e1587c14434f2480f91410185507cfa1
Certificate serial: 01987373F1FF45C34981E9937FAA3B15B013
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vlJx8OFYfBRDTySA-RQQGFUHz6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/76dba0-d86b-4d84-b15a-4d6d1256bf9b/1/vlJx8OFYfBRDTySA-RQQGFUHz6E.mft
Manifest number: 15A7
Signing time: Mon 04 Aug 2025 05:00:35 +0000
Manifest this update: Mon 04 Aug 2025 05:00:35 +0000
Manifest next update: Tue 05 Aug 2025 05:00:35 +0000
Files and hashes: 1: bxyMDkypoYoPE36odgLUanwOaLY.roa (hash: /Tdt2l601ImlNiIyf1pfayzYn4s0xCETamIww0AgaGc=)
2: vlJx8OFYfBRDTySA-RQQGFUHz6E.crl (hash: 6tmCZUyep+3rCht0HeVDlmuyMmleaaAua1Ctx97o0w4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/76dba0-d86b-4d84-b15a-4d6d1256bf9b/1/vlJx8OFYfBRDTySA-RQQGFUHz6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/76dba0-d86b-4d84-b15a-4d6d1256bf9b/1/vlJx8OFYfBRDTySA-RQQGFUHz6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/vlJx8OFYfBRDTySA-RQQGFUHz6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:73:f1:ff:45:c3:49:81:e9:93:7f:aa:3b:15:b0:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5271f0e1587c14434f2480f91410185507cfa1
Validity
Not Before: Aug 4 05:00:35 2025 GMT
Not After : Aug 5 05:00:35 2025 GMT
Subject: CN=884c3e2b8b4a7c7e7ed378fdebacd25f9d6dc74b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:82:55:da:48:c2:27:2e:9c:31:cb:be:2a:aa:
59:1a:e8:52:ad:68:d7:b7:19:24:b6:92:77:47:8f:
67:05:5c:b4:00:a1:d2:a0:c4:9d:20:14:8d:ca:92:
1e:bc:af:13:8e:5a:4a:12:8e:ab:47:ed:e8:5c:0e:
e6:65:6b:a4:47:4f:18:07:49:88:54:6f:e5:d9:df:
5d:d8:87:6b:3f:a4:c2:2e:c6:ba:34:ba:8b:e9:c3:
e3:cb:8b:bd:d4:35:45:2d:ba:ce:dd:95:bc:9c:ab:
6e:0f:78:29:4e:43:9e:c4:57:d9:2f:1e:81:50:bf:
f6:52:51:fc:7d:4b:42:df:9e:be:9b:61:2b:31:f6:
69:3a:ba:af:46:8d:7e:af:ff:5a:ad:b9:25:ec:10:
a8:b1:19:a2:74:fc:ed:74:66:86:42:89:50:0a:5b:
5d:e8:2f:e0:a3:a4:94:88:37:17:d3:10:c4:59:45:
c5:a6:f5:1a:c9:4a:76:59:b3:6e:eb:7a:73:77:81:
f7:81:38:a2:62:6d:93:e1:47:45:31:d0:64:c6:f1:
fe:07:36:a8:6a:59:5b:b6:da:a0:60:3e:a1:68:19:
c7:a9:e8:d7:2c:f3:61:3c:3e:ff:90:f9:d2:f8:97:
e7:22:4b:03:85:99:c5:6a:d9:be:94:91:ec:10:dd:
2e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:4C:3E:2B:8B:4A:7C:7E:7E:D3:78:FD:EB:AC:D2:5F:9D:6D:C7:4B
X509v3 Authority Key Identifier:
keyid:BE:52:71:F0:E1:58:7C:14:43:4F:24:80:F9:14:10:18:55:07:CF:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vlJx8OFYfBRDTySA-RQQGFUHz6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/76dba0-d86b-4d84-b15a-4d6d1256bf9b/1/vlJx8OFYfBRDTySA-RQQGFUHz6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/76dba0-d86b-4d84-b15a-4d6d1256bf9b/1/vlJx8OFYfBRDTySA-RQQGFUHz6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:d0:28:82:ac:17:58:79:9b:28:39:8b:54:8e:3e:65:a2:44:
52:5d:6d:19:12:ea:28:c8:23:1e:f0:5a:1b:69:a1:a3:56:e2:
a2:9e:d1:8b:32:a5:e2:26:5f:cf:64:26:24:f3:34:c8:c9:d8:
f6:13:65:3c:e2:58:c4:59:d6:ec:5e:f2:0d:52:fd:42:e6:2f:
e1:b6:e3:ce:cf:78:62:1b:3e:4d:a0:92:56:d2:1d:99:3b:b8:
3b:8f:70:5e:a6:9e:aa:9a:d0:68:a9:26:22:f8:9e:dc:72:80:
7e:54:dd:0f:1a:60:8e:8f:82:41:ca:b8:61:e8:f5:99:d0:ba:
c2:4f:a0:5f:ab:00:c5:21:7a:e0:1e:df:ee:16:e4:bd:ea:9e:
5f:6d:df:28:c7:94:bd:eb:b8:b5:6b:cb:7f:1b:8e:05:90:04:
90:32:c1:5b:0d:fe:59:b7:6f:56:11:60:dd:91:ac:fc:90:bd:
07:25:6a:c0:73:b1:76:12:2b:0f:81:3c:ab:61:28:6c:aa:63:
27:37:a0:1d:f2:68:01:2a:44:6b:7f:9a:63:ac:6a:32:c8:d1:
b3:c6:5b:29:88:6e:28:5b:e4:4b:81:93:d2:3b:f6:ff:ce:13:
2c:b6:49:26:f9:32:fc:61:57:85:47:f5:52:84:56:e7:6b:b1:
df:83:ff:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:19:39 2025 by rpki-client