Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/ca31df-7c9c-44ef-9ddc-776915488225/1/vR211yi9J2tMdS4SWlCP-HhK0oU.mft
File: vR211yi9J2tMdS4SWlCP-HhK0oU.mft (raw, json)
Hash identifier: IHYTcNIuSsHIGDIk+Asxc20D7Brx8nnpLChdCKnimKY=
Subject key identifier: DB:34:78:D5:07:88:B0:10:A9:E6:C7:6D:E7:78:0A:74:83:AD:F6:1C
Authority key identifier: BD:1D:B5:D7:28:BD:27:6B:4C:75:2E:12:5A:50:8F:F8:78:4A:D2:85
Certificate issuer: /CN=bd1db5d728bd276b4c752e125a508ff8784ad285
Certificate serial: 0198D47360CAC9B978894E979920120236B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vR211yi9J2tMdS4SWlCP-HhK0oU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/ca31df-7c9c-44ef-9ddc-776915488225/1/vR211yi9J2tMdS4SWlCP-HhK0oU.mft
Manifest number: 11EF
Signing time: Sat 23 Aug 2025 01:03:07 +0000
Manifest this update: Sat 23 Aug 2025 01:03:07 +0000
Manifest next update: Sun 24 Aug 2025 01:03:07 +0000
Files and hashes: 1: 7IfWcJSratNnlfLMrnbIuQWgR8I.roa (hash: S2czlmmJLkq2AObWA1vCv3NtLmwVMJ2FnTs6ITj1XcQ=)
2: vR211yi9J2tMdS4SWlCP-HhK0oU.crl (hash: YANK27S/i5u/qyF6I719lR++1zh72THl6A1g574eKus=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/ca31df-7c9c-44ef-9ddc-776915488225/1/vR211yi9J2tMdS4SWlCP-HhK0oU.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/ca31df-7c9c-44ef-9ddc-776915488225/1/vR211yi9J2tMdS4SWlCP-HhK0oU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vR211yi9J2tMdS4SWlCP-HhK0oU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:60:ca:c9:b9:78:89:4e:97:99:20:12:02:36:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd1db5d728bd276b4c752e125a508ff8784ad285
Validity
Not Before: Aug 23 01:03:07 2025 GMT
Not After : Aug 24 01:03:07 2025 GMT
Subject: CN=db3478d50788b010a9e6c76de7780a7483adf61c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:bc:f3:fa:1c:24:f3:5e:7e:02:de:01:61:65:
2e:58:cd:c3:35:20:d2:3d:74:a2:7b:6e:6e:51:e5:
a2:b3:56:05:26:eb:4e:4d:b1:88:45:4a:f6:d4:3f:
78:35:6d:91:96:97:f3:7f:76:41:fe:9c:83:2a:f3:
86:f4:8f:d2:81:b7:2e:3f:46:99:d3:89:15:31:5f:
f7:ab:d0:20:ad:87:9d:da:df:42:16:96:8f:f8:6f:
68:68:87:67:75:ea:04:cd:cd:81:28:18:8a:9c:14:
b5:80:5c:d5:5b:0e:57:9d:ca:7b:58:c7:58:1c:1d:
59:1f:15:63:1a:06:cd:6e:fd:16:51:68:23:e6:aa:
a9:27:be:d0:a6:83:d9:a6:d7:be:ad:c1:05:f8:ef:
df:88:b1:a3:53:eb:f2:02:0e:b3:59:30:d9:17:5b:
62:fa:7e:9e:60:8d:ee:ab:0d:f2:c4:79:d9:1a:4c:
11:fd:c3:06:46:46:3f:80:97:99:2b:af:0d:47:29:
c2:18:e4:4e:4d:a3:8f:00:c0:5f:2a:0d:eb:cb:f9:
50:a4:13:e9:e2:5d:7d:73:50:00:2d:29:a9:e9:71:
f8:a3:c2:78:9f:cb:ef:f8:ac:56:24:ce:19:f0:d9:
59:68:48:c1:91:2e:46:d8:0f:92:64:2f:45:d9:18:
4d:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:34:78:D5:07:88:B0:10:A9:E6:C7:6D:E7:78:0A:74:83:AD:F6:1C
X509v3 Authority Key Identifier:
keyid:BD:1D:B5:D7:28:BD:27:6B:4C:75:2E:12:5A:50:8F:F8:78:4A:D2:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vR211yi9J2tMdS4SWlCP-HhK0oU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/ca31df-7c9c-44ef-9ddc-776915488225/1/vR211yi9J2tMdS4SWlCP-HhK0oU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/ca31df-7c9c-44ef-9ddc-776915488225/1/vR211yi9J2tMdS4SWlCP-HhK0oU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:d1:25:93:0a:7a:30:7b:52:36:1c:4f:c3:28:d8:69:8b:23:
3f:44:33:e5:d3:b1:65:39:54:d3:3b:4e:a8:ce:b9:68:d5:1a:
d1:5b:35:ca:5a:6f:68:82:2c:31:a0:e9:8a:93:04:72:36:0d:
50:c8:b7:3b:ef:32:a3:a4:b3:f8:6c:b1:f7:fc:87:3a:d1:e2:
60:74:c2:0e:bb:9d:28:bf:30:1f:27:07:31:7c:b7:52:06:33:
54:f1:3a:6d:4f:c7:64:7d:5b:14:a8:b7:07:95:f9:b7:94:c8:
bb:b2:2b:ba:d9:80:8c:cb:1a:94:45:20:0f:c6:0c:97:c7:aa:
c2:fd:0d:4c:3f:eb:91:1d:30:6e:78:61:eb:7c:ef:b0:3a:33:
42:99:a0:b6:e2:12:c8:9d:ed:99:df:1f:69:19:a4:0b:70:f9:
4d:38:84:43:80:3b:40:e2:4c:b5:36:f1:91:d8:fc:61:80:a8:
83:77:7b:a1:f0:19:bb:fd:d4:77:f4:d2:01:fb:7e:ca:b7:31:
5e:63:0e:18:b0:ea:95:c0:91:8b:c2:4c:59:36:09:37:79:db:
77:5d:4d:44:2b:7e:af:3c:2b:ef:72:4c:0a:ce:6f:46:47:0e:
45:57:9c:79:f7:4a:32:c3:2a:54:83:36:70:84:91:d4:b2:9d:
5e:04:6b:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:38:43 2025 by rpki-client