Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.mft
File: i542u2_vkyj1GOSxBfwhLBUqjGg.mft (raw, json)
Hash identifier: vgddwMREZ9OJ9aWd037EF7HMWpwQqWf93JVPgC7HH5w=
Subject key identifier: 66:C0:5C:4B:D4:77:4D:5B:0C:C0:7F:25:6D:1F:1D:E0:9E:A8:74:61
Authority key identifier: 8B:9E:36:BB:6F:EF:93:28:F5:18:E4:B1:05:FC:21:2C:15:2A:8C:68
Certificate issuer: /CN=8b9e36bb6fef9328f518e4b105fc212c152a8c68
Certificate serial: 01988B0EE00EAA31991B678CF8561F96CE27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i542u2_vkyj1GOSxBfwhLBUqjGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.mft
Manifest number: 1625
Signing time: Fri 08 Aug 2025 19:01:04 +0000
Manifest this update: Fri 08 Aug 2025 19:01:04 +0000
Manifest next update: Sat 09 Aug 2025 19:01:04 +0000
Files and hashes: 1: I1KraudGgIPbGqrokKSi33-L_jY.roa (hash: L9033CVRp8ri3N0mtJw6UMfr2TqSPrf8oAPr6Y4O13o=)
2: i542u2_vkyj1GOSxBfwhLBUqjGg.crl (hash: qdyBrDO6rho4WrrpR3BRfugJN+lgnD/Zz0/XKldlbaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/i542u2_vkyj1GOSxBfwhLBUqjGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 19:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:0e:e0:0e:aa:31:99:1b:67:8c:f8:56:1f:96:ce:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b9e36bb6fef9328f518e4b105fc212c152a8c68
Validity
Not Before: Aug 8 19:01:04 2025 GMT
Not After : Aug 9 19:01:04 2025 GMT
Subject: CN=66c05c4bd4774d5b0cc07f256d1f1de09ea87461
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5f:b2:39:7d:d3:7e:c3:56:c1:c9:d9:96:ac:
4b:42:dd:bb:5d:43:4d:97:22:c8:8e:11:4a:03:3a:
3f:50:f3:b3:45:07:cf:3c:aa:15:0d:e1:e2:44:ec:
29:5c:54:f5:77:c5:86:6d:42:e0:a5:b3:4b:a1:94:
92:43:04:cf:b8:c0:75:bf:a8:21:cb:3a:01:ff:95:
c8:94:87:5c:4f:78:8e:3f:e5:89:da:25:1e:37:2b:
08:1f:75:66:16:c6:a3:b8:5b:a3:1d:f1:b5:6c:55:
1b:0c:33:02:22:8a:58:29:bf:b2:a4:35:18:9e:bc:
bf:d3:4f:82:79:97:ae:fa:82:d5:d1:6e:9b:44:91:
85:35:a4:5e:bc:b3:09:b5:4e:48:ad:c2:b4:92:77:
48:61:c5:7d:9c:42:8e:77:15:26:c2:4e:04:5b:f5:
84:bb:cb:28:83:df:db:9f:ca:fc:a5:a0:cf:14:fb:
72:b1:01:81:c1:03:0d:c1:37:2e:81:b2:14:22:53:
73:35:35:37:db:0f:9b:82:d8:ca:24:ef:de:2f:8b:
68:eb:8b:40:4e:f9:f4:c1:e5:eb:fa:5b:ca:76:43:
59:56:20:25:3a:af:64:0b:2d:fa:46:5f:3e:ed:0f:
29:81:8b:37:d3:47:98:d7:d3:a3:a0:00:cc:48:a8:
2d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:C0:5C:4B:D4:77:4D:5B:0C:C0:7F:25:6D:1F:1D:E0:9E:A8:74:61
X509v3 Authority Key Identifier:
keyid:8B:9E:36:BB:6F:EF:93:28:F5:18:E4:B1:05:FC:21:2C:15:2A:8C:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i542u2_vkyj1GOSxBfwhLBUqjGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:45:a3:51:4d:9a:59:61:d7:a3:f1:b1:ea:8a:2c:47:33:5d:
b3:8a:8a:46:4e:5d:a0:2f:78:a8:32:1f:c9:59:d3:1e:c6:17:
83:72:f6:b7:4e:a2:d4:d7:46:06:10:e9:fc:4d:4a:34:f1:9f:
54:c4:4a:05:e2:70:d3:ec:3a:a9:9a:11:bc:fb:35:5d:bf:06:
85:c6:1f:72:8c:f9:7c:de:05:2d:82:47:82:43:2d:a8:33:6f:
64:53:e6:da:48:49:4f:66:27:9f:2b:2e:a0:b2:7f:79:f8:43:
dd:b8:32:b0:f5:fa:de:3f:e3:62:43:9a:79:3a:cc:59:97:1f:
a1:6d:1f:b0:d1:fb:34:77:4d:9b:4c:1a:e7:c4:55:a6:8a:c9:
5e:9e:98:de:0d:88:32:ec:e1:98:98:49:f4:9d:97:f7:50:6b:
25:dd:ec:34:73:90:2d:36:17:f8:ef:28:ca:51:58:1f:8e:fe:
8c:a8:11:83:c5:46:d9:95:8d:c2:59:a9:76:a6:1e:b2:a6:fd:
05:fa:2f:b4:42:05:e5:12:c2:2e:2e:ac:8e:86:d8:13:ec:5d:
8c:1c:49:e8:50:80:d7:31:a4:97:05:6a:1e:6b:54:34:cc:84:
16:4d:81:bd:a0:d3:f4:8f:42:60:37:f1:87:61:f9:36:fe:28:
23:f3:31:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:00:05 2025 by rpki-client