
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/0ee921-a721-4f09-80f2-7113fc1b865b/1/vIo7xH0TyD99HPcqE34AZvg9Bgg.mft
File: vIo7xH0TyD99HPcqE34AZvg9Bgg.mft (raw, json)
Hash identifier: qjUTa/KAjRNqlkOw2g7LQ3X2ykt/7DTIZGcMCw8Fb/w=
Subject key identifier: 8E:E0:97:9F:26:91:40:5B:0C:29:D3:F5:AA:56:25:2B:A0:0E:7F:71
Authority key identifier: BC:8A:3B:C4:7D:13:C8:3F:7D:1C:F7:2A:13:7E:00:66:F8:3D:06:08
Certificate issuer: /CN=bc8a3bc47d13c83f7d1cf72a137e0066f83d0608
Certificate serial: 01987F797F6A3C64E2BD1C7776B57393BDD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vIo7xH0TyD99HPcqE34AZvg9Bgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/0ee921-a721-4f09-80f2-7113fc1b865b/1/vIo7xH0TyD99HPcqE34AZvg9Bgg.mft
Manifest number: 1634
Signing time: Wed 06 Aug 2025 13:02:05 +0000
Manifest this update: Wed 06 Aug 2025 13:02:05 +0000
Manifest next update: Thu 07 Aug 2025 13:02:05 +0000
Files and hashes: 1: gphbKzpx6tWGj_zsNbx2el-xjBw.roa (hash: EGV6JtWjWAcUe3P+wNKh2PddbSFnyVdKJ948XnlhOEI=)
2: ndKmZul4TmrLysbdAHv2TdPx3YI.roa (hash: MA6ve6ns46O8nAHaLW/ESCUujJDx6mhMBRqi1sXugZw=)
3: vIo7xH0TyD99HPcqE34AZvg9Bgg.crl (hash: 4Fw/SZ/u/n2hnDGPBHuTLe/+bCi/CQrVQHO3EIPC0Xg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/0ee921-a721-4f09-80f2-7113fc1b865b/1/vIo7xH0TyD99HPcqE34AZvg9Bgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/0ee921-a721-4f09-80f2-7113fc1b865b/1/vIo7xH0TyD99HPcqE34AZvg9Bgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vIo7xH0TyD99HPcqE34AZvg9Bgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 13:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7f:79:7f:6a:3c:64:e2:bd:1c:77:76:b5:73:93:bd:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc8a3bc47d13c83f7d1cf72a137e0066f83d0608
Validity
Not Before: Aug 6 13:02:05 2025 GMT
Not After : Aug 7 13:02:05 2025 GMT
Subject: CN=8ee0979f2691405b0c29d3f5aa56252ba00e7f71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:62:d7:1c:fa:1f:23:a0:d0:47:bb:b8:9a:4e:
03:23:50:ac:03:86:c5:d5:a6:01:e5:78:7a:24:01:
61:ab:0f:4b:2b:70:f5:c7:c5:21:9a:4d:66:2f:c8:
41:45:98:0e:a7:48:ae:78:fc:d7:93:8e:e5:a3:1c:
de:a8:e9:50:82:17:f4:97:7d:17:30:c7:26:7d:29:
9b:3c:90:85:3d:a8:95:e4:c9:dd:af:c5:49:58:8e:
99:a1:4b:79:7c:f7:ff:46:b6:85:bf:60:a4:a1:43:
e4:e5:78:63:87:3c:3a:52:96:21:b3:09:e8:70:0f:
b9:4f:2f:27:95:02:cc:5b:20:8f:e7:dc:54:0d:cf:
0f:79:43:1e:7d:eb:1c:f2:2a:c7:99:cf:c6:5e:62:
af:cc:ac:bd:bf:a8:a0:24:86:5b:5b:ff:0a:55:e5:
c8:bf:4b:3c:f5:14:38:43:dc:be:69:1f:91:7f:29:
f0:f6:fd:04:08:3a:3f:08:91:c2:99:2b:22:5c:b7:
25:b4:06:20:68:1b:17:63:5a:d3:4b:fc:a9:a1:2b:
d5:45:15:cc:60:38:96:f5:98:33:49:00:a8:6d:72:
57:58:0d:17:b0:3f:e2:93:17:9f:c2:d9:9c:5d:b6:
6e:d6:97:31:7a:7f:e4:8f:56:b0:c5:a7:ac:aa:3f:
15:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:E0:97:9F:26:91:40:5B:0C:29:D3:F5:AA:56:25:2B:A0:0E:7F:71
X509v3 Authority Key Identifier:
keyid:BC:8A:3B:C4:7D:13:C8:3F:7D:1C:F7:2A:13:7E:00:66:F8:3D:06:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vIo7xH0TyD99HPcqE34AZvg9Bgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/0ee921-a721-4f09-80f2-7113fc1b865b/1/vIo7xH0TyD99HPcqE34AZvg9Bgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/0ee921-a721-4f09-80f2-7113fc1b865b/1/vIo7xH0TyD99HPcqE34AZvg9Bgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:6e:9f:18:65:59:ab:55:f6:55:c0:3b:54:64:e1:01:16:b5:
e9:07:27:39:81:18:cd:0a:fb:e6:79:d1:ca:dc:85:4e:ac:cd:
a0:98:d8:dc:08:40:cc:7d:fa:28:16:aa:c2:dc:0a:c1:f9:a8:
7f:2c:2b:c8:66:02:42:c8:10:66:49:48:84:8e:27:22:f9:29:
71:a7:68:2e:0c:f6:7e:22:31:ab:96:55:59:d9:44:c1:22:79:
b0:92:e3:f4:14:0d:fe:d3:e3:12:5d:e1:a8:0b:96:79:b9:d3:
da:c6:dd:91:09:9a:ef:0f:dd:22:74:bd:fa:73:9b:2d:3b:0e:
75:d6:b8:e1:42:4f:c7:f7:19:54:72:57:7d:63:e0:07:93:94:
d3:03:74:ef:53:23:11:5b:c2:e9:f2:b7:aa:a8:ec:86:b3:5f:
a2:2f:69:1f:64:e6:4e:3d:11:17:e0:40:f3:b9:3b:1a:44:19:
1c:31:1c:d8:dd:41:77:4e:95:55:56:5f:57:e3:99:44:2b:0a:
6e:95:a3:f1:e6:12:33:d8:b0:a8:16:a8:c0:41:1d:34:9e:93:
b4:32:57:11:ed:3b:ae:04:98:24:42:d4:df:cb:98:d2:9d:c4:
a8:d7:b8:6b:04:3a:aa:7b:ad:15:9d:fb:40:55:bc:76:0b:a9:
1d:ac:65:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 18:24:00 2025 by rpki-client