Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/239c74-3c43-4251-9a85-9be869a9c60c/1/vRFtNbEck4IzrLrfXXwtWyxtAVQ.mft
File: vRFtNbEck4IzrLrfXXwtWyxtAVQ.mft (raw, json)
Hash identifier: brKwB3yB6nZ6thlpZWjc89WsJ7BpID1Nbt9nKit5fyI=
Subject key identifier: C1:CD:DC:D3:F4:36:AE:F8:66:9A:C1:72:DC:CE:2C:92:F8:A4:C8:67
Authority key identifier: BD:11:6D:35:B1:1C:93:82:33:AC:BA:DF:5D:7C:2D:5B:2C:6D:01:54
Certificate issuer: /CN=bd116d35b11c938233acbadf5d7c2d5b2c6d0154
Certificate serial: 0198730691CEAD06370FBDD1DB43257A6034
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vRFtNbEck4IzrLrfXXwtWyxtAVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/239c74-3c43-4251-9a85-9be869a9c60c/1/vRFtNbEck4IzrLrfXXwtWyxtAVQ.mft
Manifest number: 0C1C
Signing time: Mon 04 Aug 2025 03:01:07 +0000
Manifest this update: Mon 04 Aug 2025 03:01:07 +0000
Manifest next update: Tue 05 Aug 2025 03:01:07 +0000
Files and hashes: 1: Z6Q9yfl3feHtt8qjeJosNh_6sQk.roa (hash: GwOmbcb5vlCx0Hzj3NGEHPu2R7jhNAhkCt0fTS4A/18=)
2: vRFtNbEck4IzrLrfXXwtWyxtAVQ.crl (hash: zE1gT2oArXVmbSeRwrZl9ds9TgH8oHbfnQRDeE8kmuQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/239c74-3c43-4251-9a85-9be869a9c60c/1/vRFtNbEck4IzrLrfXXwtWyxtAVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/239c74-3c43-4251-9a85-9be869a9c60c/1/vRFtNbEck4IzrLrfXXwtWyxtAVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/vRFtNbEck4IzrLrfXXwtWyxtAVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:06:91:ce:ad:06:37:0f:bd:d1:db:43:25:7a:60:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd116d35b11c938233acbadf5d7c2d5b2c6d0154
Validity
Not Before: Aug 4 03:01:07 2025 GMT
Not After : Aug 5 03:01:07 2025 GMT
Subject: CN=c1cddcd3f436aef8669ac172dcce2c92f8a4c867
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:74:14:cb:93:a3:cc:bd:cc:99:09:a1:a8:c4:
2a:b0:dd:55:80:a1:cf:b5:0b:b9:15:4a:9a:b1:82:
7e:92:e0:88:c5:6b:6c:11:d4:bb:4c:9a:30:25:eb:
b3:0d:41:f7:56:f2:a5:d5:e5:9c:cd:86:61:ff:01:
89:ec:ff:3c:b7:50:03:9d:54:41:7b:2f:b9:17:c9:
91:0b:2c:c9:c1:44:d5:84:d8:36:a0:4d:3b:fb:f8:
e1:62:76:28:4f:08:f0:c5:2c:cb:3c:59:9a:94:87:
ca:3b:eb:2e:44:47:a3:73:47:e9:00:1d:ab:8c:0d:
2c:6a:a4:e0:59:b1:19:de:76:65:12:1f:e4:8c:be:
12:14:ab:5b:f8:cc:de:81:8d:14:82:04:02:9e:20:
67:37:12:9c:91:ad:9e:98:33:63:8b:5f:19:25:44:
ce:24:18:a8:74:9a:8f:19:e8:fe:19:53:d4:71:8a:
db:85:ad:1e:64:e4:85:29:67:3c:7a:7f:52:88:11:
88:18:e1:a4:47:9d:be:01:60:64:65:dc:3a:34:a1:
3f:88:57:9b:f6:87:76:3e:85:dc:97:ac:88:73:a5:
44:03:48:1f:86:27:0c:3f:a4:ce:c3:54:49:19:0e:
6d:a5:d7:13:44:50:b4:df:df:34:06:1b:84:ab:db:
2e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:CD:DC:D3:F4:36:AE:F8:66:9A:C1:72:DC:CE:2C:92:F8:A4:C8:67
X509v3 Authority Key Identifier:
keyid:BD:11:6D:35:B1:1C:93:82:33:AC:BA:DF:5D:7C:2D:5B:2C:6D:01:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vRFtNbEck4IzrLrfXXwtWyxtAVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/239c74-3c43-4251-9a85-9be869a9c60c/1/vRFtNbEck4IzrLrfXXwtWyxtAVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/239c74-3c43-4251-9a85-9be869a9c60c/1/vRFtNbEck4IzrLrfXXwtWyxtAVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:f7:dd:26:c3:05:f5:0a:31:8c:da:9b:9e:f5:9a:bf:c9:73:
9c:43:ad:85:80:4b:9e:04:97:27:a0:3f:74:bb:19:54:f4:f5:
21:0c:8d:df:97:54:0c:2a:d6:f4:e4:d6:e4:1a:ee:81:a3:09:
d0:73:e4:68:eb:4d:40:d2:de:e0:2c:cc:db:e7:a4:39:c6:ee:
59:37:0f:78:bf:b6:79:e6:79:8a:00:31:a6:cd:b3:d7:1d:ef:
a3:c0:d2:aa:90:03:64:95:07:10:d7:e9:02:1e:2b:a9:b1:aa:
c8:14:f2:28:6a:c4:ed:b3:92:ff:75:59:2e:3a:52:f2:6a:1c:
f8:2d:f6:c0:7a:dd:32:72:c7:f2:83:f2:8d:e9:85:3f:12:90:
7a:72:69:f5:2f:0b:ee:3c:f7:33:9e:8b:05:27:8a:90:74:d8:
c5:30:39:59:42:d1:70:a2:8f:2e:15:26:78:47:79:9d:06:fa:
c6:3c:6c:e4:86:a0:b4:c5:c1:1d:31:66:79:82:b3:6d:aa:97:
da:64:12:e1:fc:8e:cd:2e:80:9b:6c:7e:38:db:4e:62:cd:08:
4f:01:c6:d0:e5:71:da:b0:c9:75:6b:8e:f4:34:87:3a:4f:d2:
54:d3:7b:a3:7f:22:2f:d6:23:88:7c:f3:02:f0:fd:08:75:2c:
ea:00:80:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:24:38 2025 by rpki-client