Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/d5e5cb-5b27-47f6-8acb-0350787225c8/1/vJA0A8IKbNsiNmzHrPSOn5m-NP8.mft
File: vJA0A8IKbNsiNmzHrPSOn5m-NP8.mft (raw, json)
Hash identifier: zLcOT4LX1/pIeo/NeraRn+dcmEszdZCkBYHQytJIlcI=
Subject key identifier: 02:56:29:4B:8A:07:9B:B6:42:C8:5B:97:1E:63:D9:D5:98:AA:78:01
Authority key identifier: BC:90:34:03:C2:0A:6C:DB:22:36:6C:C7:AC:F4:8E:9F:99:BE:34:FF
Certificate issuer: /CN=bc903403c20a6cdb22366cc7acf48e9f99be34ff
Certificate serial: 0198D4DFEEAB1D71A32C7D686C0D09731F90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJA0A8IKbNsiNmzHrPSOn5m-NP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/d5e5cb-5b27-47f6-8acb-0350787225c8/1/vJA0A8IKbNsiNmzHrPSOn5m-NP8.mft
Manifest number: 0D11
Signing time: Sat 23 Aug 2025 03:01:42 +0000
Manifest this update: Sat 23 Aug 2025 03:01:42 +0000
Manifest next update: Sun 24 Aug 2025 03:01:42 +0000
Files and hashes: 1: AFiiX1ExBRX0sjF1OFaXff5vX-o.roa (hash: s6dqOT6FYSZSQT8asyjr/q9SCL3Hless8wyrxiVHEwU=)
2: vJA0A8IKbNsiNmzHrPSOn5m-NP8.crl (hash: YCb2B3PZAPLB2muHpA/nLfT122yW68YpE9xDa0BuWP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/d5e5cb-5b27-47f6-8acb-0350787225c8/1/vJA0A8IKbNsiNmzHrPSOn5m-NP8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/d5e5cb-5b27-47f6-8acb-0350787225c8/1/vJA0A8IKbNsiNmzHrPSOn5m-NP8.mft
rsync://rpki.ripe.net/repository/DEFAULT/vJA0A8IKbNsiNmzHrPSOn5m-NP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:ee:ab:1d:71:a3:2c:7d:68:6c:0d:09:73:1f:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc903403c20a6cdb22366cc7acf48e9f99be34ff
Validity
Not Before: Aug 23 03:01:42 2025 GMT
Not After : Aug 24 03:01:42 2025 GMT
Subject: CN=0256294b8a079bb642c85b971e63d9d598aa7801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:52:2d:2f:bc:da:10:db:13:d4:1d:cd:5f:57:
a1:b7:d7:6e:6e:1a:36:79:a4:53:ea:cc:ac:d6:c1:
fd:d3:b0:cb:17:4a:e5:0b:a0:5c:fb:50:53:86:95:
8f:77:96:c4:38:77:3b:14:71:7b:27:14:d2:06:e1:
32:f8:11:a3:de:d7:07:87:79:53:e4:75:65:0c:4e:
50:2a:3f:9c:bc:6f:ab:14:de:65:3d:3d:47:61:49:
25:a2:8a:84:a2:5f:27:bc:49:8e:a8:3d:ae:ca:80:
bb:25:54:e3:5e:5f:34:10:d4:44:73:1a:be:07:9a:
8f:06:6b:0b:a6:8a:9e:0a:18:81:e1:6f:10:95:56:
59:a3:54:38:28:eb:ce:ee:6e:bb:2e:6f:1d:58:15:
31:3a:3e:a8:28:ef:fb:3b:5c:79:e0:e8:2d:1f:0f:
9b:1c:80:98:81:67:56:c8:90:70:69:e1:91:c3:66:
bc:11:cd:24:91:18:86:09:d1:80:41:ef:4e:d9:f4:
b4:78:98:10:5c:f2:01:c7:e1:78:0e:83:b9:18:df:
b5:d2:c2:3d:1d:60:7b:27:72:ad:20:79:5f:c7:d1:
20:ff:a1:f5:d4:d2:e9:8e:14:5f:fe:b8:62:c1:a8:
ec:fc:80:09:47:9d:91:94:25:30:1e:f7:92:82:14:
3a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:56:29:4B:8A:07:9B:B6:42:C8:5B:97:1E:63:D9:D5:98:AA:78:01
X509v3 Authority Key Identifier:
keyid:BC:90:34:03:C2:0A:6C:DB:22:36:6C:C7:AC:F4:8E:9F:99:BE:34:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJA0A8IKbNsiNmzHrPSOn5m-NP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/d5e5cb-5b27-47f6-8acb-0350787225c8/1/vJA0A8IKbNsiNmzHrPSOn5m-NP8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/d5e5cb-5b27-47f6-8acb-0350787225c8/1/vJA0A8IKbNsiNmzHrPSOn5m-NP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:51:9a:99:73:91:e8:53:c4:c9:a2:27:59:81:b9:c7:61:88:
5c:e9:69:4a:da:d7:70:19:ee:c3:b3:c7:2f:7b:06:d4:ca:f2:
30:32:75:2c:82:04:60:a7:c5:55:d6:65:5c:c1:ff:d2:6d:db:
fd:85:73:0e:07:1b:cf:8a:a1:b4:ab:6a:f6:7f:cd:c5:2f:08:
40:5d:6a:e9:1d:92:7e:65:53:fd:07:98:13:2e:e9:67:ff:49:
e3:08:8c:4a:70:46:42:f3:03:2f:63:23:82:7a:3a:01:d7:61:
ae:cc:a9:8d:b5:db:cb:a9:07:57:34:3e:8d:ca:da:8f:95:3c:
b8:94:b0:05:f5:a4:e4:b2:4a:f5:23:2a:00:d4:ab:13:e2:a2:
49:40:42:29:7c:e0:8c:bb:86:22:e7:4d:ac:42:7a:2b:a2:3f:
0b:b1:3e:e1:e0:ae:b3:b2:5d:dc:e5:ce:a5:6d:a3:cd:1b:8f:
09:4a:0e:7c:ba:72:a5:bc:9d:24:29:72:a7:3e:3d:a7:77:c4:
f5:e3:fe:fc:c6:17:d2:2d:d7:59:c6:dc:7a:9c:07:79:28:57:
a6:54:0c:eb:d2:2e:1e:34:30:f0:e1:3e:17:19:6c:2f:f2:9d:
f7:d3:7b:cf:00:2a:87:1f:57:7e:a3:c1:48:33:58:16:92:e6:
c3:57:b3:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:31:02 2025 by rpki-client