Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3f19f9-8395-4088-af17-e5ca67c11533/1/vPnwsJRzjFKC-_SzBnDsX9y1id8.mft
File: vPnwsJRzjFKC-_SzBnDsX9y1id8.mft (raw, json)
Hash identifier: gFQVEFgFW84yMdMFwH7mHd9raMUajub/79Ejal5J3Io=
Subject key identifier: EA:33:F7:F7:12:C3:6A:2C:59:A2:0F:F3:24:3D:5B:A9:AE:A8:65:AD
Authority key identifier: BC:F9:F0:B0:94:73:8C:52:82:FB:F4:B3:06:70:EC:5F:DC:B5:89:DF
Certificate issuer: /CN=bcf9f0b094738c5282fbf4b30670ec5fdcb589df
Certificate serial: 0198D47242F5C4553A70F4B8CCC5C50AFAF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vPnwsJRzjFKC-_SzBnDsX9y1id8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3f19f9-8395-4088-af17-e5ca67c11533/1/vPnwsJRzjFKC-_SzBnDsX9y1id8.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 01:01:54 +0000
Manifest this update: Sat 23 Aug 2025 01:01:54 +0000
Manifest next update: Sun 24 Aug 2025 01:01:54 +0000
Files and hashes: 1: GcXZXurTGrAnFXKjvUHU9XD_YyQ.roa (hash: CVqER74xo0XyQrFlwwf0CdK9BC9SAVXvCBJxlFB4CBw=)
2: vPnwsJRzjFKC-_SzBnDsX9y1id8.crl (hash: r3xHWP0sk/3JcKt5A6kzQzUYBZc+PEit+Sz/Q0JCJc4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/3f19f9-8395-4088-af17-e5ca67c11533/1/vPnwsJRzjFKC-_SzBnDsX9y1id8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/3f19f9-8395-4088-af17-e5ca67c11533/1/vPnwsJRzjFKC-_SzBnDsX9y1id8.mft
rsync://rpki.ripe.net/repository/DEFAULT/vPnwsJRzjFKC-_SzBnDsX9y1id8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:42:f5:c4:55:3a:70:f4:b8:cc:c5:c5:0a:fa:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcf9f0b094738c5282fbf4b30670ec5fdcb589df
Validity
Not Before: Aug 23 01:01:54 2025 GMT
Not After : Aug 24 01:01:54 2025 GMT
Subject: CN=ea33f7f712c36a2c59a20ff3243d5ba9aea865ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f5:09:31:77:b5:ac:53:28:ff:83:d6:c0:db:
5d:59:58:3f:de:6c:0e:f0:63:c3:e0:57:ae:12:a7:
b6:92:ca:f3:14:04:ee:99:c8:81:bd:66:d2:dd:4e:
cb:97:4a:8a:d0:74:7a:f9:ba:27:03:6d:54:48:a8:
5c:0b:94:1a:51:eb:38:dc:f0:83:82:3c:2e:31:0d:
9d:af:5c:24:b5:50:3d:6b:10:01:fb:dc:f3:2a:27:
47:4d:c9:89:d5:75:fa:6e:f1:c3:55:01:64:10:07:
f2:2b:0c:ba:55:ef:79:9a:04:37:86:02:c3:3f:dc:
c0:85:cb:23:b5:ad:89:c7:80:c1:d4:d9:30:f8:f2:
fe:96:bc:17:d1:be:73:bc:3e:f7:9a:75:15:41:cc:
1d:43:28:fc:b6:30:71:d9:03:53:39:d0:74:d0:86:
96:e0:1e:3b:c0:72:aa:b7:77:88:cb:87:02:eb:08:
50:77:5f:b2:cc:1f:8a:d7:15:04:f7:48:35:e6:a1:
a3:11:95:66:b5:7a:59:83:96:35:70:b6:ff:d5:de:
9f:bf:55:1a:41:a7:af:21:df:10:e5:f2:55:b1:07:
56:e3:37:ca:30:78:32:d5:d3:d3:92:ca:c0:86:9a:
7f:26:d3:55:94:77:6d:ee:38:8b:c9:a0:ab:2d:23:
27:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:33:F7:F7:12:C3:6A:2C:59:A2:0F:F3:24:3D:5B:A9:AE:A8:65:AD
X509v3 Authority Key Identifier:
keyid:BC:F9:F0:B0:94:73:8C:52:82:FB:F4:B3:06:70:EC:5F:DC:B5:89:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vPnwsJRzjFKC-_SzBnDsX9y1id8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3f19f9-8395-4088-af17-e5ca67c11533/1/vPnwsJRzjFKC-_SzBnDsX9y1id8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3f19f9-8395-4088-af17-e5ca67c11533/1/vPnwsJRzjFKC-_SzBnDsX9y1id8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:a3:7a:aa:f8:81:ff:11:7f:a5:7b:53:2c:9b:84:a2:58:d1:
90:23:aa:41:94:54:fb:00:ea:52:89:ad:4a:4b:ee:2f:22:2b:
b7:c6:35:1e:2a:a1:70:01:8b:f2:58:c5:fe:13:28:73:79:11:
67:86:a6:b4:18:e8:bc:e7:1a:b0:7a:3d:ce:93:0e:03:9c:10:
a7:6d:18:bf:cf:84:2b:f8:60:e1:cd:87:85:9d:5e:b7:54:c1:
00:98:dc:f4:2c:a5:e5:37:d0:c9:2b:2a:03:25:7f:48:63:2a:
f7:0c:0f:6c:4a:a0:9e:6e:a8:7f:2e:55:73:e1:65:b5:1c:48:
dc:66:51:75:8b:38:12:47:2d:a1:d8:d5:b3:f4:e4:fb:27:6b:
66:bb:b6:4b:d8:da:27:36:6d:20:47:99:37:2c:01:69:58:d2:
24:fb:93:7c:66:ba:11:9a:26:c4:c7:34:de:df:df:e8:b4:e4:
28:8f:7a:d6:fc:59:6e:6e:b6:36:0c:ea:2f:97:a3:01:4a:7d:
0d:e1:78:d2:7c:e1:0d:f6:f1:f1:c1:81:69:db:c4:6e:61:62:
99:bd:48:4d:36:10:38:32:00:cf:9c:f8:66:4f:f8:4b:2a:16:
83:aa:04:77:cf:24:84:f0:67:10:f0:2c:d4:9d:0e:5e:a8:3e:
2b:d5:36:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:41:49 2025 by rpki-client