Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/d26971-b7a8-4ede-8bb4-49bc43660c97/1/vkjMNUiL2ebzErIPx2oQJy8M3to.mft
File: vkjMNUiL2ebzErIPx2oQJy8M3to.mft (raw, json)
Hash identifier: K3SMlUn/S8Fs5QLjvOw62oPIV148dgwoz4idkBHIEG4=
Subject key identifier: 96:3B:70:E2:CC:22:70:A4:37:BB:07:18:94:47:85:A2:EC:9C:C0:61
Authority key identifier: BE:48:CC:35:48:8B:D9:E6:F3:12:B2:0F:C7:6A:10:27:2F:0C:DE:DA
Certificate issuer: /CN=be48cc35488bd9e6f312b20fc76a10272f0cdeda
Certificate serial: 0198819DD7E9D41ECEAE14B9ED11DEE42640
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vkjMNUiL2ebzErIPx2oQJy8M3to.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/d26971-b7a8-4ede-8bb4-49bc43660c97/1/vkjMNUiL2ebzErIPx2oQJy8M3to.mft
Manifest number: 1621
Signing time: Wed 06 Aug 2025 23:01:01 +0000
Manifest this update: Wed 06 Aug 2025 23:01:01 +0000
Manifest next update: Thu 07 Aug 2025 23:01:01 +0000
Files and hashes: 1: YmYarA5XO8juvrriR0BtAqIdcCU.roa (hash: J8e/3PBcMoffAup3qudGNq5pMDjkvtJSIDtohCQMO8M=)
2: vkjMNUiL2ebzErIPx2oQJy8M3to.crl (hash: ln1lFWUxEEthNVEVAtoZxC1y7mEJFYj+MPWjev6rqRk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/d26971-b7a8-4ede-8bb4-49bc43660c97/1/vkjMNUiL2ebzErIPx2oQJy8M3to.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/d26971-b7a8-4ede-8bb4-49bc43660c97/1/vkjMNUiL2ebzErIPx2oQJy8M3to.mft
rsync://rpki.ripe.net/repository/DEFAULT/vkjMNUiL2ebzErIPx2oQJy8M3to.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:9d:d7:e9:d4:1e:ce:ae:14:b9:ed:11:de:e4:26:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be48cc35488bd9e6f312b20fc76a10272f0cdeda
Validity
Not Before: Aug 6 23:01:01 2025 GMT
Not After : Aug 7 23:01:01 2025 GMT
Subject: CN=963b70e2cc2270a437bb0718944785a2ec9cc061
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:57:e9:15:2f:43:be:0f:e5:f3:51:36:b4:64:
ca:ac:12:64:a3:47:21:2c:9c:62:23:8d:6e:b8:54:
a7:72:d3:bd:9f:f6:87:e1:5c:d5:25:5e:2f:86:61:
23:0e:94:de:f6:45:5d:fb:d6:70:6c:38:82:40:0c:
fe:30:80:78:80:8c:12:a1:cf:a3:c6:29:22:f3:bc:
e3:9b:81:17:a8:63:b8:14:8b:45:b4:81:f1:4e:80:
bb:1a:b2:f4:3f:2b:e0:98:37:42:fd:9c:c1:6e:52:
7c:e8:55:aa:ad:ff:3a:dd:31:e6:04:7d:a0:f0:ad:
6c:c9:a7:65:90:d7:d6:a2:92:17:f5:3e:68:39:cd:
b7:57:04:17:f8:c6:0d:d2:45:e8:b5:ef:82:27:38:
18:32:9f:87:43:58:d6:f3:10:58:e3:5d:e5:73:13:
8b:f9:40:f3:2d:a0:fb:a3:65:fe:22:f4:c4:e2:47:
23:f7:92:46:54:b1:e6:8e:1e:54:6a:a5:cf:ff:8f:
04:65:69:e2:9b:c9:ff:db:4e:87:a2:13:e5:32:28:
ca:73:fe:05:f3:b2:32:15:4e:d7:f7:a8:ab:64:12:
ac:4c:32:15:97:cf:f7:d3:5e:a7:b1:11:83:b1:50:
86:d0:5a:fa:95:07:9b:34:89:f9:79:98:6a:96:eb:
66:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:3B:70:E2:CC:22:70:A4:37:BB:07:18:94:47:85:A2:EC:9C:C0:61
X509v3 Authority Key Identifier:
keyid:BE:48:CC:35:48:8B:D9:E6:F3:12:B2:0F:C7:6A:10:27:2F:0C:DE:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkjMNUiL2ebzErIPx2oQJy8M3to.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d26971-b7a8-4ede-8bb4-49bc43660c97/1/vkjMNUiL2ebzErIPx2oQJy8M3to.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d26971-b7a8-4ede-8bb4-49bc43660c97/1/vkjMNUiL2ebzErIPx2oQJy8M3to.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:2d:56:08:7b:6d:03:df:9f:84:02:37:d3:dd:cf:73:1b:e8:
02:66:b8:1c:d5:5f:12:01:ab:43:e6:6a:4a:28:8c:91:7d:ab:
00:98:ea:75:ae:64:93:82:9f:c4:8a:ea:6e:af:2a:5d:de:7d:
4b:93:54:60:46:a4:65:fe:56:27:5b:48:95:78:f6:64:68:0b:
6e:34:98:66:95:01:25:1b:69:09:5f:16:cd:71:cf:79:51:8e:
95:65:8e:e7:f9:7e:b3:c2:23:d0:ac:8b:4c:a3:e5:cc:20:07:
ca:40:2d:7a:ed:6d:4d:3f:7f:c4:26:ac:d3:ab:fc:87:96:8e:
fd:62:e5:e6:ba:15:9c:5c:1a:c2:a4:95:52:7b:dc:35:15:e2:
d6:ac:24:47:b3:66:98:db:a8:e2:76:bb:88:55:34:73:e9:9a:
56:c1:04:85:69:58:c9:d1:6c:b2:35:49:e9:51:cb:e2:7f:2a:
9f:76:1a:90:9a:43:71:6b:57:dc:48:b8:d7:3a:3a:da:85:88:
da:66:3e:e1:a9:90:7c:9f:2c:1b:23:87:6f:60:4d:00:85:b9:
fd:ce:62:cd:4f:d0:f7:bd:a9:e9:5b:c0:02:a0:c4:11:54:2f:
3a:49:c6:1b:7f:26:f9:d9:9e:d9:6e:fc:e9:31:9c:0c:d7:7e:
26:1c:0d:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 00:44:40 2025 by rpki-client