Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/97744d-5988-46ae-82f1-64187e30435b/1/vi8szxuqOQM-x2pYb4RqNiGPIJ0.mft
File: vi8szxuqOQM-x2pYb4RqNiGPIJ0.mft (raw, json)
Hash identifier: RfhD0N7xW3hdW8FztNb4ApUG2VhcaLzBj1g2gbvy3gA=
Subject key identifier: 81:C0:19:7F:B0:7E:77:93:2A:0E:3E:5B:A6:51:E8:F3:D0:C0:A1:24
Authority key identifier: BE:2F:2C:CF:1B:AA:39:03:3E:C7:6A:58:6F:84:6A:36:21:8F:20:9D
Certificate issuer: /CN=be2f2ccf1baa39033ec76a586f846a36218f209d
Certificate serial: 019892C8AAE1273E14061CEA2A01ADDA23F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vi8szxuqOQM-x2pYb4RqNiGPIJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/97744d-5988-46ae-82f1-64187e30435b/1/vi8szxuqOQM-x2pYb4RqNiGPIJ0.mft
Manifest number: 1169
Signing time: Sun 10 Aug 2025 07:01:21 +0000
Manifest this update: Sun 10 Aug 2025 07:01:21 +0000
Manifest next update: Mon 11 Aug 2025 07:01:21 +0000
Files and hashes: 1: JAdnsONCtTfLbO2OfLFXkq3UEe0.roa (hash: uH25J1sXmVYdKjAjZcQtubKyV6gnVwOjCbWyLNaZ4r4=)
2: vi8szxuqOQM-x2pYb4RqNiGPIJ0.crl (hash: xSV6KSu7kcBvy18UnL7ExrpRqHcZ7l8SzTY3/RqiIoY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/97744d-5988-46ae-82f1-64187e30435b/1/vi8szxuqOQM-x2pYb4RqNiGPIJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/97744d-5988-46ae-82f1-64187e30435b/1/vi8szxuqOQM-x2pYb4RqNiGPIJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/vi8szxuqOQM-x2pYb4RqNiGPIJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 07:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:c8:aa:e1:27:3e:14:06:1c:ea:2a:01:ad:da:23:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be2f2ccf1baa39033ec76a586f846a36218f209d
Validity
Not Before: Aug 10 07:01:21 2025 GMT
Not After : Aug 11 07:01:21 2025 GMT
Subject: CN=81c0197fb07e77932a0e3e5ba651e8f3d0c0a124
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:b0:3f:1a:37:dc:48:5c:51:d2:00:de:1c:b9:
65:36:8e:17:f6:c1:25:48:ed:43:53:de:b1:fa:a1:
ed:81:af:4e:1b:22:7c:1a:e6:e6:a9:37:1a:50:5f:
54:45:68:95:96:34:3e:3f:5b:10:ce:27:01:20:4a:
c0:c6:52:80:4b:c6:4d:bf:01:38:c4:25:1e:f6:c3:
fd:6c:d1:19:22:08:54:ce:db:b2:a4:98:cf:87:90:
f4:53:ac:66:63:2e:21:a7:17:d1:c7:ea:ed:0a:92:
5a:6d:bb:b5:f3:55:b5:21:70:b1:17:69:51:e8:84:
9f:72:6d:fd:54:77:74:38:a2:da:5a:b9:31:ca:aa:
66:d4:bc:05:bd:15:05:ce:1f:9f:6d:80:fd:f7:f8:
1c:24:17:b9:78:fd:f9:68:a9:42:02:84:eb:cc:27:
3d:fb:cd:39:bf:86:83:e9:04:0f:0f:1b:20:32:00:
3e:bc:20:28:d4:f4:27:c6:2d:0d:11:4c:43:21:56:
e5:21:ce:6c:94:de:b7:79:50:81:7d:52:8f:49:0f:
6f:40:e6:15:01:50:f5:10:02:10:92:0e:39:0d:fb:
6c:69:a4:2d:c5:b7:d5:a0:02:bc:6e:2b:0d:98:0a:
75:64:e6:9e:4f:fd:e9:5b:0f:6c:e1:0f:29:9c:fd:
e7:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:C0:19:7F:B0:7E:77:93:2A:0E:3E:5B:A6:51:E8:F3:D0:C0:A1:24
X509v3 Authority Key Identifier:
keyid:BE:2F:2C:CF:1B:AA:39:03:3E:C7:6A:58:6F:84:6A:36:21:8F:20:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vi8szxuqOQM-x2pYb4RqNiGPIJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/97744d-5988-46ae-82f1-64187e30435b/1/vi8szxuqOQM-x2pYb4RqNiGPIJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/97744d-5988-46ae-82f1-64187e30435b/1/vi8szxuqOQM-x2pYb4RqNiGPIJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:1f:61:32:3b:7a:6e:eb:38:27:3c:f4:0a:98:7e:8e:42:0d:
99:01:d9:6a:0c:fb:5f:64:6b:5d:4e:8f:76:45:fe:51:63:14:
3b:84:5f:fb:1d:89:44:15:08:de:55:4c:7c:b5:bb:b2:2b:58:
c4:81:ed:45:db:21:35:d5:6e:9e:2b:cb:8e:6a:9f:d8:62:38:
47:e8:ce:26:5f:39:68:a8:3f:af:c1:ce:4f:b4:27:e3:1d:ab:
c8:b8:95:70:1a:db:27:65:26:7c:f4:c6:f6:a0:1b:66:d6:e7:
00:54:c9:f8:ab:42:8a:fc:eb:0c:a0:20:bc:64:0d:25:72:66:
7c:10:d7:7d:bb:6b:57:aa:28:65:94:6e:48:36:ae:58:e8:ee:
9a:17:5f:99:26:70:af:95:a4:22:8b:fe:4b:95:60:fd:bb:a5:
c4:2a:e2:0d:ce:55:ee:fa:1f:9f:da:3a:a5:e0:41:0c:7a:4e:
3b:64:c3:1c:d5:9e:20:c9:9b:0b:cf:df:ea:16:66:9a:45:28:
81:8c:9b:1b:ea:da:ab:2e:c2:78:a5:84:95:f2:f1:cf:03:3e:
42:9b:43:61:9d:90:63:f3:bd:da:4d:7d:1b:94:c9:32:a4:bc:
2e:1d:62:5e:6e:fa:c2:82:ff:00:f8:2c:65:3f:c9:1e:cd:d9:
35:f0:3f:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 10:44:09 2025 by rpki-client