Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/1bcb8b-a3f8-48cc-8db9-3df9e21f4bcc/1/vs7FMeXDd1a4KGY_nMIK1iF3E6w.mft
File: vs7FMeXDd1a4KGY_nMIK1iF3E6w.mft (raw, json)
Hash identifier: Tgv+cL6DXZGpJxGl1hkQ7gudjuZomemPcnyjp8+PkSI=
Subject key identifier: 41:88:67:47:F9:DA:48:25:F3:7E:6B:83:48:AA:C6:F8:C9:A8:7A:37
Authority key identifier: BE:CE:C5:31:E5:C3:77:56:B8:28:66:3F:9C:C2:0A:D6:21:77:13:AC
Certificate issuer: /CN=becec531e5c37756b828663f9cc20ad6217713ac
Certificate serial: 0198730684D62B9F9E0FB2AA5F767C159AF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vs7FMeXDd1a4KGY_nMIK1iF3E6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/1bcb8b-a3f8-48cc-8db9-3df9e21f4bcc/1/vs7FMeXDd1a4KGY_nMIK1iF3E6w.mft
Manifest number: 0F45
Signing time: Mon 04 Aug 2025 03:01:03 +0000
Manifest this update: Mon 04 Aug 2025 03:01:03 +0000
Manifest next update: Tue 05 Aug 2025 03:01:03 +0000
Files and hashes: 1: _d2EFT-OpH3an9-ei2qvPBIPUiU.roa (hash: vjR4Zv9+5SsZfFKRbF6P42t9rz0q1nIneBSdni9L3pM=)
2: ciNzVE1_d0-QMInDSswN3EHLVNg.roa (hash: Wmjyk4Nl2dmeXznw2MTEjEcjFaiybhooG5LGrJ1VKM8=)
3: vs7FMeXDd1a4KGY_nMIK1iF3E6w.crl (hash: e2rESx5174d6QvNQqB8/4VM3TYofUickxCgWhPz6XXc=)
4: yAQLvR2REqCYEITifDYxhFTzX4k.roa (hash: uZgm/9JfNjYwGkoXS3hlL76KCjtvK/3swtvi79WEUbo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/1bcb8b-a3f8-48cc-8db9-3df9e21f4bcc/1/vs7FMeXDd1a4KGY_nMIK1iF3E6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/1bcb8b-a3f8-48cc-8db9-3df9e21f4bcc/1/vs7FMeXDd1a4KGY_nMIK1iF3E6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/vs7FMeXDd1a4KGY_nMIK1iF3E6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:06:84:d6:2b:9f:9e:0f:b2:aa:5f:76:7c:15:9a:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=becec531e5c37756b828663f9cc20ad6217713ac
Validity
Not Before: Aug 4 03:01:03 2025 GMT
Not After : Aug 5 03:01:03 2025 GMT
Subject: CN=41886747f9da4825f37e6b8348aac6f8c9a87a37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:95:c1:bd:ca:d1:a4:cd:9e:e5:4c:0a:5f:20:
4c:2b:42:42:b8:44:f0:9f:3b:8f:4b:ca:cd:65:b7:
2f:3c:7d:47:97:97:ea:22:be:a0:43:eb:f7:b3:0b:
41:f1:b2:be:85:1e:16:11:2b:7a:0c:e8:19:27:82:
38:1c:e3:a8:7d:45:43:69:ed:83:f8:15:29:b5:fc:
ac:41:3b:dd:77:66:81:f6:69:5f:5c:8a:2e:72:9a:
c0:d6:50:e6:68:39:a5:a7:16:7c:d5:87:4f:4d:95:
b3:4b:c7:65:ab:89:d1:10:13:7a:ce:19:c6:78:4e:
85:f4:17:c4:4d:2a:8e:b3:95:e0:e3:fb:14:2a:8e:
12:35:d9:7f:fe:ed:d5:7d:b8:de:d0:9c:86:42:d2:
3d:1c:df:ea:83:91:5d:e6:d4:68:08:dd:b1:ec:b7:
be:1f:eb:d4:f8:0c:ec:cc:26:8e:00:82:11:11:4a:
ea:f2:c2:ca:b4:09:f7:ea:ac:e9:0e:b0:29:f1:cf:
ba:a4:2c:e6:ea:18:48:bf:57:aa:bf:33:a6:08:7c:
5b:1e:c4:59:85:50:f1:93:78:cc:37:13:b9:42:4c:
e9:c8:4a:32:fe:6e:6e:20:1a:20:08:9f:de:d4:58:
37:b5:65:a4:38:d2:3f:92:7a:70:db:db:d9:9f:d6:
4a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:88:67:47:F9:DA:48:25:F3:7E:6B:83:48:AA:C6:F8:C9:A8:7A:37
X509v3 Authority Key Identifier:
keyid:BE:CE:C5:31:E5:C3:77:56:B8:28:66:3F:9C:C2:0A:D6:21:77:13:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vs7FMeXDd1a4KGY_nMIK1iF3E6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/1bcb8b-a3f8-48cc-8db9-3df9e21f4bcc/1/vs7FMeXDd1a4KGY_nMIK1iF3E6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/1bcb8b-a3f8-48cc-8db9-3df9e21f4bcc/1/vs7FMeXDd1a4KGY_nMIK1iF3E6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:92:17:0f:a3:82:5e:1d:27:62:f9:14:94:c3:8b:a0:10:6b:
9c:07:fd:e7:08:f4:97:35:dc:11:e8:0b:93:0a:c1:71:c5:ea:
28:a2:e6:b3:61:0d:e5:39:35:50:c1:c6:5c:25:96:c0:3b:34:
fe:52:3b:8a:3b:a5:58:d2:c7:74:fd:75:df:78:08:7f:3f:10:
6a:8d:d0:c1:07:5b:f8:ac:23:fe:14:2e:03:01:b9:c3:93:3f:
96:67:9e:03:55:16:df:95:f7:76:44:d2:ee:6c:8a:88:d7:d6:
e6:13:22:6a:b4:02:5a:31:e9:ad:69:2e:dd:3c:4f:a2:8c:5f:
d0:c5:b2:07:b1:6c:51:6d:9b:e3:1d:74:d0:ea:8c:03:3b:5d:
61:0d:f6:3a:6c:43:80:c0:31:1b:97:03:1c:44:25:8d:15:db:
e1:26:b1:57:2a:3f:cf:04:95:80:16:45:9e:32:10:53:8c:71:
39:da:32:86:39:1b:2f:01:0a:f8:0f:31:98:bb:7e:d6:25:83:
26:6e:1e:2c:e8:22:32:6f:15:93:c8:94:f3:37:3a:ce:c4:a9:
75:2e:2d:fd:93:0b:c0:d4:1d:29:cd:f9:b2:ab:17:b6:da:3b:
68:7a:76:f6:70:8b:ae:27:6c:59:73:f5:2c:71:c9:02:62:8f:
35:c5:2a:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:10:26 2025 by rpki-client