Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/ad4f52-9c28-4512-8c1a-0d597c7da9c8/1/vLTmKU5_5Gc_e8b1f0gTjpWPzO0.mft
File: vLTmKU5_5Gc_e8b1f0gTjpWPzO0.mft (raw, json)
Hash identifier: Tkuhzbs6KosqPOS8Ksxgi76WzBgLuO+UlkQcXO455sg=
Subject key identifier: D7:FE:C4:90:E9:E1:12:9F:D2:86:BD:76:2A:F7:76:89:19:42:C0:AF
Authority key identifier: BC:B4:E6:29:4E:7F:E4:67:3F:7B:C6:F5:7F:48:13:8E:95:8F:CC:ED
Certificate issuer: /CN=bcb4e6294e7fe4673f7bc6f57f48138e958fcced
Certificate serial: 019873E2124F12A3D82EC94682311BDAABA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vLTmKU5_5Gc_e8b1f0gTjpWPzO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/ad4f52-9c28-4512-8c1a-0d597c7da9c8/1/vLTmKU5_5Gc_e8b1f0gTjpWPzO0.mft
Manifest number: 1617
Signing time: Mon 04 Aug 2025 07:00:52 +0000
Manifest this update: Mon 04 Aug 2025 07:00:52 +0000
Manifest next update: Tue 05 Aug 2025 07:00:52 +0000
Files and hashes: 1: 26eRBtfHaWUq94c0EN14EglvEno.roa (hash: rVQUyz2NEj2yBSOTyg+XToghqiDGJFkQfMW8NYYr5DE=)
2: vLTmKU5_5Gc_e8b1f0gTjpWPzO0.crl (hash: XYuEQJIFH0C6zoU79+7ATU5BjBHHB2yv1HvOdw2Ty9Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/ad4f52-9c28-4512-8c1a-0d597c7da9c8/1/vLTmKU5_5Gc_e8b1f0gTjpWPzO0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/ad4f52-9c28-4512-8c1a-0d597c7da9c8/1/vLTmKU5_5Gc_e8b1f0gTjpWPzO0.mft
rsync://rpki.ripe.net/repository/DEFAULT/vLTmKU5_5Gc_e8b1f0gTjpWPzO0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:12:4f:12:a3:d8:2e:c9:46:82:31:1b:da:ab:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcb4e6294e7fe4673f7bc6f57f48138e958fcced
Validity
Not Before: Aug 4 07:00:52 2025 GMT
Not After : Aug 5 07:00:52 2025 GMT
Subject: CN=d7fec490e9e1129fd286bd762af776891942c0af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:84:32:3d:ad:41:d2:02:7e:34:3a:6a:1f:fa:
57:43:bd:3b:ed:e4:4f:52:98:0d:f7:19:14:10:94:
8e:78:f5:cc:34:18:66:21:e1:bf:35:4b:e4:d1:76:
8f:0e:a4:6e:f1:3e:ce:a8:9f:56:dc:b9:d1:7e:a7:
66:2b:93:ff:d2:8f:5c:99:c8:0a:b4:47:15:a8:3c:
dc:ec:22:b1:28:85:d7:3b:7d:07:bc:76:65:1e:a1:
a5:b0:85:9a:90:2c:75:a0:f8:7a:5f:d9:55:fa:5a:
68:4b:e8:d7:46:7f:d7:61:bf:db:81:33:7a:ee:da:
60:e3:fb:f6:1c:17:7c:40:2d:f5:7e:40:36:3b:d7:
25:8b:10:d5:74:88:15:a4:b3:7a:ba:68:61:25:44:
6a:33:7f:3d:1c:79:23:be:35:c4:00:8e:fe:0d:85:
7d:ba:67:14:6f:e6:fb:f2:71:a1:08:9c:47:41:cf:
97:41:1a:7e:5e:3e:5d:d5:d5:ce:72:af:09:02:2d:
64:8f:1c:ec:1d:4e:84:43:3b:e6:bb:d9:96:22:85:
58:83:44:c3:60:bb:51:76:41:96:3e:d0:20:69:c0:
f5:6c:37:37:7d:e2:9f:8e:6a:5d:a1:68:46:e4:e0:
c8:f9:63:b1:14:39:44:b9:d4:c4:62:ca:03:54:45:
c0:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:FE:C4:90:E9:E1:12:9F:D2:86:BD:76:2A:F7:76:89:19:42:C0:AF
X509v3 Authority Key Identifier:
keyid:BC:B4:E6:29:4E:7F:E4:67:3F:7B:C6:F5:7F:48:13:8E:95:8F:CC:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vLTmKU5_5Gc_e8b1f0gTjpWPzO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/ad4f52-9c28-4512-8c1a-0d597c7da9c8/1/vLTmKU5_5Gc_e8b1f0gTjpWPzO0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/ad4f52-9c28-4512-8c1a-0d597c7da9c8/1/vLTmKU5_5Gc_e8b1f0gTjpWPzO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:41:53:e2:59:2a:72:22:84:31:26:3b:93:5e:d9:1c:df:45:
fe:fd:01:3a:ec:77:1e:9a:46:56:e3:8f:48:5e:8e:55:a1:7c:
a7:22:5a:0e:5a:3a:cf:ab:8b:16:56:c9:ba:25:45:ef:ed:b4:
f1:b6:90:64:99:a1:cb:c2:c9:e5:56:a7:e7:73:85:7b:9e:24:
5b:39:7f:a7:4a:62:82:22:01:5b:d1:74:e5:af:1c:1a:46:70:
e7:f5:99:0d:e8:30:f1:9a:85:72:11:20:49:05:66:0d:b3:47:
87:25:9f:3e:cb:31:5a:39:73:cc:1c:1b:6b:2f:d0:fa:0f:c9:
3c:cb:0a:29:3b:a1:9d:eb:19:ac:81:c6:36:85:9a:d7:ef:b5:
73:f2:01:c8:7f:9b:bb:3a:13:68:5b:14:30:f8:23:cc:48:47:
91:74:79:24:c2:98:95:a5:13:26:bf:9a:b9:a5:5e:3a:e9:01:
b9:00:b3:12:5a:a5:be:d2:4e:dd:39:c5:8e:54:97:eb:f1:43:
ba:90:13:02:3f:e3:09:78:93:66:98:a3:25:78:a2:d6:40:70:
66:74:b6:43:cb:32:e5:27:76:cf:8e:55:42:71:44:3b:51:dc:
0f:d4:c5:2d:40:96:3e:3d:da:e3:3d:a4:e6:38:cd:7a:ff:12:
f3:c9:44:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:27:39 2025 by rpki-client