Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/296972-a1b9-4517-82cb-f2cdb7f575e9/1/vYqFV99_ssQY-OvxfAoe8GJddKM.mft
File: vYqFV99_ssQY-OvxfAoe8GJddKM.mft (raw, json)
Hash identifier: XVCjFZ6rurwgov4i64/9yDM3RzYIKfjKDvUnFjFrtXc=
Subject key identifier: 69:75:37:5F:57:69:E2:F4:AB:15:A5:20:6B:4A:20:F3:50:0E:38:40
Authority key identifier: BD:8A:85:57:DF:7F:B2:C4:18:F8:EB:F1:7C:0A:1E:F0:62:5D:74:A3
Certificate issuer: /CN=bd8a8557df7fb2c418f8ebf17c0a1ef0625d74a3
Certificate serial: 019898251A522C8B1D375E08C26211FA2AD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vYqFV99_ssQY-OvxfAoe8GJddKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/296972-a1b9-4517-82cb-f2cdb7f575e9/1/vYqFV99_ssQY-OvxfAoe8GJddKM.mft
Manifest number: 05CD
Signing time: Mon 11 Aug 2025 08:00:24 +0000
Manifest this update: Mon 11 Aug 2025 08:00:24 +0000
Manifest next update: Tue 12 Aug 2025 08:00:24 +0000
Files and hashes: 1: 1-F1dC3gm9bPEhI6Q-p2D7L1QBrg.roa (hash: daRs+QD0gbPIEc7NEpV/tWArongeaf2OpCfMozGCDfE=)
2: vYqFV99_ssQY-OvxfAoe8GJddKM.crl (hash: SIFVbUu41cmEPehHX0/iHIpIm/htNaA0CS49xsmhRng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/296972-a1b9-4517-82cb-f2cdb7f575e9/1/vYqFV99_ssQY-OvxfAoe8GJddKM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/296972-a1b9-4517-82cb-f2cdb7f575e9/1/vYqFV99_ssQY-OvxfAoe8GJddKM.mft
rsync://rpki.ripe.net/repository/DEFAULT/vYqFV99_ssQY-OvxfAoe8GJddKM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:98:25:1a:52:2c:8b:1d:37:5e:08:c2:62:11:fa:2a:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd8a8557df7fb2c418f8ebf17c0a1ef0625d74a3
Validity
Not Before: Aug 11 08:00:24 2025 GMT
Not After : Aug 12 08:00:24 2025 GMT
Subject: CN=6975375f5769e2f4ab15a5206b4a20f3500e3840
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d3:14:f8:60:02:c2:89:5e:45:a8:39:c1:52:
db:93:f5:c6:12:0e:6b:e3:a2:5e:da:f5:2e:89:70:
6c:44:bc:fd:0a:41:12:55:9b:3c:b5:7c:17:25:b4:
be:77:16:1e:a5:13:08:91:bf:be:06:38:2f:a7:3b:
d5:05:a6:31:28:14:e8:21:c4:07:20:92:07:01:50:
9a:4f:f5:04:5a:8e:15:da:83:4b:49:2d:b4:cd:44:
4d:97:ec:d0:af:99:6e:50:0f:2d:67:3f:ec:e2:59:
ed:1e:51:57:75:e9:28:77:69:e9:b7:3b:28:ca:08:
7f:95:1f:f3:0d:54:64:c6:07:87:3f:40:71:93:5c:
59:72:4b:28:cc:31:8b:b3:57:25:e0:d4:be:2b:5a:
15:17:16:84:fa:c0:42:32:87:1f:30:e6:f4:3e:dd:
89:32:af:e2:09:99:26:5b:42:97:51:d9:b9:37:45:
18:53:fe:ab:57:a5:23:2c:55:4b:43:e5:76:69:8f:
f7:61:d0:a9:01:6a:75:fb:9c:80:e3:2b:1c:71:bb:
45:30:39:e6:f7:65:43:d1:e7:3c:c3:cc:5c:cb:1e:
b1:13:b2:d7:e2:12:0d:88:77:4f:ec:3b:3e:52:7b:
3f:cf:1d:3f:48:10:52:9b:8e:50:61:e3:6c:f8:38:
1c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:75:37:5F:57:69:E2:F4:AB:15:A5:20:6B:4A:20:F3:50:0E:38:40
X509v3 Authority Key Identifier:
keyid:BD:8A:85:57:DF:7F:B2:C4:18:F8:EB:F1:7C:0A:1E:F0:62:5D:74:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vYqFV99_ssQY-OvxfAoe8GJddKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/296972-a1b9-4517-82cb-f2cdb7f575e9/1/vYqFV99_ssQY-OvxfAoe8GJddKM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/296972-a1b9-4517-82cb-f2cdb7f575e9/1/vYqFV99_ssQY-OvxfAoe8GJddKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:03:8e:4f:c5:76:96:17:5b:22:12:38:a6:91:48:7b:36:c8:
05:b6:21:d5:28:9b:b9:a7:ca:9d:58:b2:ab:16:83:e8:7a:1e:
98:4d:96:1c:df:1b:a7:43:c6:2f:8b:b3:93:12:f2:b4:b6:ac:
c5:84:80:a6:aa:84:fb:c1:31:d8:b8:50:0d:21:94:92:74:f2:
21:7a:29:3e:9d:52:f5:61:dd:45:ce:31:a9:4c:59:6b:c4:d2:
42:ac:fd:b4:bf:64:f6:23:70:27:8e:c0:b8:37:42:42:5e:37:
4d:da:ef:7d:7e:2f:77:05:8f:b6:42:9d:b9:c0:79:2f:f2:ba:
2c:49:6b:ec:5c:56:e5:f9:cc:6e:c1:30:38:70:9b:32:6b:d3:
33:d7:d9:c6:c1:34:14:08:9d:4c:b6:da:c8:42:d2:9f:db:e1:
8a:9c:33:eb:82:8f:6e:bb:08:51:a1:73:86:84:5b:10:cd:36:
8a:f1:0a:57:9e:47:e8:e3:f7:72:a3:42:12:dd:b0:ae:25:1b:
aa:1c:15:9d:0b:15:19:c5:fe:f4:6a:e0:55:e8:8a:29:f1:17:
b7:5d:03:3b:6d:cd:28:62:13:40:d7:91:eb:73:48:da:7e:f6:
ae:6a:d2:b1:67:2c:d6:69:1e:32:49:72:54:de:1f:82:e9:53:
df:43:8d:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 10:31:45 2025 by rpki-client