Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.mft
File: vJxAOtAH4qJCprCQYaPBo2CmTVo.mft (raw, json)
Hash identifier: 9AlsITN6TeVm8ruvyxgHvWn/1Hf8Q97MnIJVib4X8Uo=
Subject key identifier: 23:CA:04:A0:5E:55:5B:08:85:75:8D:DD:0A:A4:E0:B9:EE:04:80:7E
Authority key identifier: BC:9C:40:3A:D0:07:E2:A2:42:A6:B0:90:61:A3:C1:A3:60:A6:4D:5A
Certificate issuer: /CN=bc9c403ad007e2a242a6b09061a3c1a360a64d5a
Certificate serial: 0198850C3645D86D2A8CC5071F593594BBFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJxAOtAH4qJCprCQYaPBo2CmTVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.mft
Manifest number: 0868
Signing time: Thu 07 Aug 2025 15:00:26 +0000
Manifest this update: Thu 07 Aug 2025 15:00:26 +0000
Manifest next update: Fri 08 Aug 2025 15:00:26 +0000
Files and hashes: 1: DI4aL2VDjSmaj-T6WF7qWyVxEy8.roa (hash: irLOs0EfjvwV0yEqJPJZBOPh+tRGrPv6PzJ4eB+9FwU=)
2: c4jk7gKONHNQDGzC6dsv2q8s7vI.roa (hash: a6L74Wo+bnsgWub76o3PYF/fgomhfzvN3TtRHLCaboU=)
3: tPkC9g1rh0B-WDtzyBxNorqbjqo.roa (hash: 3UTyjNkmps78kxWwCRVUmx8qZWeL7ho0lCKlGDqKCwQ=)
4: vJxAOtAH4qJCprCQYaPBo2CmTVo.crl (hash: 6wrOJVKVbToqpOWtftkZKCPxCbBvcL/xKQkEXr6aCE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/vJxAOtAH4qJCprCQYaPBo2CmTVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:85:0c:36:45:d8:6d:2a:8c:c5:07:1f:59:35:94:bb:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc9c403ad007e2a242a6b09061a3c1a360a64d5a
Validity
Not Before: Aug 7 15:00:26 2025 GMT
Not After : Aug 8 15:00:26 2025 GMT
Subject: CN=23ca04a05e555b0885758ddd0aa4e0b9ee04807e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9d:6f:4d:ff:17:84:62:8a:88:91:d9:fd:d7:
c7:38:e3:71:af:8a:a4:35:89:ef:a9:0b:a6:b8:79:
b8:15:4f:d9:9a:03:aa:5b:73:61:1d:cb:56:d8:eb:
5f:c2:60:a0:b1:ec:04:2d:d1:56:57:46:7c:6e:a4:
7d:06:73:33:38:77:8e:75:af:a7:c5:57:8f:6e:5f:
11:bf:a8:e1:d7:51:68:ef:70:2e:4e:04:81:eb:f8:
67:d3:c7:d0:24:da:20:7a:1e:bd:18:df:64:1e:75:
b7:c4:3d:71:e0:e6:76:69:0d:92:d6:52:ad:91:62:
61:05:3d:d0:c6:87:1f:39:73:71:e9:d1:76:a9:8a:
af:c4:13:cd:e4:54:03:83:58:b6:83:8c:31:71:21:
59:e8:83:58:2b:90:f3:44:7a:29:dd:87:06:73:0a:
72:bb:40:96:ad:94:85:dc:2b:df:37:82:f9:d7:63:
d7:c8:6d:99:45:26:ee:08:5e:24:c9:95:4c:9d:61:
0f:c2:fa:b6:2b:12:e1:d3:8c:95:6f:92:c3:a4:22:
cd:ed:ed:5e:54:86:93:74:5d:36:34:c0:4c:f8:32:
d4:98:3c:c6:1c:7d:5a:f8:af:46:3c:1e:d7:ee:73:
76:96:8c:99:95:70:c4:bd:01:11:e8:de:ea:45:aa:
56:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:CA:04:A0:5E:55:5B:08:85:75:8D:DD:0A:A4:E0:B9:EE:04:80:7E
X509v3 Authority Key Identifier:
keyid:BC:9C:40:3A:D0:07:E2:A2:42:A6:B0:90:61:A3:C1:A3:60:A6:4D:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJxAOtAH4qJCprCQYaPBo2CmTVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:7f:f6:00:68:9a:c1:6b:44:09:03:7f:d7:48:9b:23:56:76:
35:5e:bd:7c:fe:73:76:f3:80:d6:2b:29:5e:86:48:9e:19:0d:
34:e3:67:cc:b5:48:40:eb:f2:f1:50:a6:87:dd:c6:39:fe:fb:
38:dd:1a:54:b1:07:e1:4e:32:22:e3:77:e6:6b:a3:aa:e9:c7:
0a:7c:66:6d:db:2e:40:0e:0d:cd:75:69:bd:b2:f8:3f:87:a9:
c6:81:18:1a:88:22:34:31:1a:cc:51:43:5d:db:c6:ab:e3:34:
56:07:b0:a0:51:f8:72:89:a1:0b:81:36:c0:e3:4c:30:65:b0:
54:d8:0e:fe:30:f1:72:fa:0b:68:18:5d:79:80:91:29:38:4c:
41:d7:b1:79:e2:e0:22:26:c2:b9:01:cb:3e:c4:0c:9a:1a:91:
65:96:0f:26:cb:48:3e:2c:3b:43:8a:42:78:fc:ce:fa:eb:32:
1d:78:c3:1a:c7:f8:31:44:d4:a2:d7:65:4b:4e:f4:ca:78:23:
21:46:da:a6:ff:85:2a:6a:77:a6:d7:d0:47:95:6d:ac:5a:04:
99:19:62:92:a2:90:fa:9d:01:95:4b:12:68:c0:3e:98:eb:79:
9a:5c:3c:b4:4d:66:1e:56:21:d3:7f:90:a6:e0:cb:60:99:89:
cb:ec:f9:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 17:35:12 2025 by rpki-client