Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/94a062-8510-44d5-9e4b-c32a9a085ae0/1/vx1ZdLTlmcpy3MTawGbXcUIC78k.mft
File: vx1ZdLTlmcpy3MTawGbXcUIC78k.mft (raw, json)
Hash identifier: ahom+v3G3NIWEVWcBdxWlasZvhND9sHL8zHmR5kssaw=
Subject key identifier: 0E:9D:FE:F8:D6:62:70:DA:9A:FC:08:E1:34:85:E9:7E:FC:68:32:10
Authority key identifier: BF:1D:59:74:B4:E5:99:CA:72:DC:C4:DA:C0:66:D7:71:42:02:EF:C9
Certificate issuer: /CN=bf1d5974b4e599ca72dcc4dac066d7714202efc9
Certificate serial: 0198737486EBCC192B97D3431C8BF0676129
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vx1ZdLTlmcpy3MTawGbXcUIC78k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/94a062-8510-44d5-9e4b-c32a9a085ae0/1/vx1ZdLTlmcpy3MTawGbXcUIC78k.mft
Manifest number: 1618
Signing time: Mon 04 Aug 2025 05:01:13 +0000
Manifest this update: Mon 04 Aug 2025 05:01:13 +0000
Manifest next update: Tue 05 Aug 2025 05:01:13 +0000
Files and hashes: 1: oj5pO6PbAIedrwIhX-SgXkuxPgQ.roa (hash: chkdnhybp0jJ1hG80xmgFXkOcgLkze7nqAVVBuJ+bhU=)
2: vx1ZdLTlmcpy3MTawGbXcUIC78k.crl (hash: MRRTTv9hufyLrQ38rQQKHBMZmBF4ZbZ8BHTVAgR/LNc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/94a062-8510-44d5-9e4b-c32a9a085ae0/1/vx1ZdLTlmcpy3MTawGbXcUIC78k.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/94a062-8510-44d5-9e4b-c32a9a085ae0/1/vx1ZdLTlmcpy3MTawGbXcUIC78k.mft
rsync://rpki.ripe.net/repository/DEFAULT/vx1ZdLTlmcpy3MTawGbXcUIC78k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:74:86:eb:cc:19:2b:97:d3:43:1c:8b:f0:67:61:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf1d5974b4e599ca72dcc4dac066d7714202efc9
Validity
Not Before: Aug 4 05:01:13 2025 GMT
Not After : Aug 5 05:01:13 2025 GMT
Subject: CN=0e9dfef8d66270da9afc08e13485e97efc683210
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:35:d5:f1:65:c9:6b:34:59:ae:9e:9c:d2:a9:
86:63:c3:95:a4:b8:ca:9c:de:54:c2:4c:a2:7b:d5:
51:97:21:ad:6a:b5:63:93:76:3b:f9:7c:bd:35:7e:
c3:a3:6d:2d:32:fc:75:75:f8:3c:af:88:f6:04:1a:
bb:d8:f9:23:64:c1:1e:86:98:a8:63:28:2b:d6:a6:
de:a1:01:73:0f:03:6d:5a:13:a8:4d:2c:c6:91:05:
4d:28:0b:f3:4a:bd:76:0c:f8:1c:f9:f2:8f:44:41:
60:fc:a6:ea:70:dc:2e:f5:ff:f7:1b:29:2f:c9:ba:
17:b7:30:04:18:5e:d1:58:2e:f5:ba:56:68:d7:ee:
24:19:19:0d:88:b0:f9:de:c0:39:19:04:2a:6e:85:
9a:60:0e:a5:53:ba:fa:6b:e2:36:69:a9:a8:2a:b8:
dd:36:22:de:62:aa:51:de:f5:0c:40:f2:10:84:d5:
22:09:3d:f3:75:d8:05:54:f9:14:6e:73:c2:ac:a1:
c7:df:2d:f4:7d:22:e5:32:a2:5f:91:53:dc:36:b1:
c8:c5:08:27:54:76:79:40:68:ad:8a:f2:90:8c:14:
9f:84:20:eb:b8:6e:71:26:d5:07:55:70:50:6f:74:
17:5a:9e:fa:57:57:89:41:2b:84:4b:3a:56:b7:22:
d4:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:9D:FE:F8:D6:62:70:DA:9A:FC:08:E1:34:85:E9:7E:FC:68:32:10
X509v3 Authority Key Identifier:
keyid:BF:1D:59:74:B4:E5:99:CA:72:DC:C4:DA:C0:66:D7:71:42:02:EF:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vx1ZdLTlmcpy3MTawGbXcUIC78k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/94a062-8510-44d5-9e4b-c32a9a085ae0/1/vx1ZdLTlmcpy3MTawGbXcUIC78k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/94a062-8510-44d5-9e4b-c32a9a085ae0/1/vx1ZdLTlmcpy3MTawGbXcUIC78k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:2f:23:6b:40:6b:19:fb:cf:25:84:23:c9:86:43:0a:f3:30:
11:a8:03:25:96:43:e2:91:e3:2b:b7:4c:62:37:35:57:8b:59:
03:e1:ac:02:bc:27:01:66:ae:c3:a3:b9:40:6f:3b:fb:97:a1:
d9:fe:52:40:cd:4f:71:fb:95:cb:d0:f5:4c:7d:c7:d8:2c:91:
c8:15:16:a7:db:58:bf:f6:fe:99:c7:58:3b:8d:27:c6:9f:d2:
5e:94:c4:30:f6:cc:b8:e8:2a:39:55:5b:e1:e9:6b:ff:6d:a4:
36:80:23:d8:ff:10:b9:c1:c2:9b:25:ee:c8:89:bb:c7:52:d4:
77:de:41:d3:6a:ba:de:dc:f2:d4:92:8f:59:18:72:5d:38:6f:
ba:25:9a:3f:f7:c7:2b:a8:ab:72:bb:43:90:57:47:d7:9a:16:
58:5e:73:2c:7a:15:9b:0a:1b:19:e9:a9:83:59:80:6a:9f:a9:
75:af:1f:a6:d1:b3:d1:04:c9:ca:4f:80:31:c4:a9:55:fd:56:
08:cd:56:09:ee:e2:e8:5b:d3:06:56:fe:25:90:76:b2:bb:dd:
6d:62:cc:b9:7f:0b:28:91:41:e5:a8:bf:e8:b5:87:19:c4:89:
ba:4d:2e:d7:6f:3d:c3:d9:63:1a:a2:84:2c:de:c0:bc:77:21:
46:ca:49:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 10:58:40 2025 by rpki-client