Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/084b6d-523f-48c0-a037-6349a17abb43/1/vBBuTYL7rjTBUqNdQ9D99J1Uvp4.mft
File: vBBuTYL7rjTBUqNdQ9D99J1Uvp4.mft (raw, json)
Hash identifier: TUSsx7+7dtdbE04jIqv0S5oAkBXq1MKg4GSJRHZYOj4=
Subject key identifier: 67:A8:8B:65:C6:CA:8F:DA:BA:88:06:5D:A1:ED:69:89:01:A0:E1:16
Authority key identifier: BC:10:6E:4D:82:FB:AE:34:C1:52:A3:5D:43:D0:FD:F4:9D:54:BE:9E
Certificate issuer: /CN=bc106e4d82fbae34c152a35d43d0fdf49d54be9e
Certificate serial: 0198D54DCFFB633A4B2B0FFC4A950B2CA998
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vBBuTYL7rjTBUqNdQ9D99J1Uvp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/084b6d-523f-48c0-a037-6349a17abb43/1/vBBuTYL7rjTBUqNdQ9D99J1Uvp4.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 05:01:43 +0000
Manifest this update: Sat 23 Aug 2025 05:01:43 +0000
Manifest next update: Sun 24 Aug 2025 05:01:43 +0000
Files and hashes: 1: vBBuTYL7rjTBUqNdQ9D99J1Uvp4.crl (hash: gbminwIaGQ2lejlkEZh7qJ0rY8IstVnQLz9W+i1X8M0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/084b6d-523f-48c0-a037-6349a17abb43/1/vBBuTYL7rjTBUqNdQ9D99J1Uvp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/084b6d-523f-48c0-a037-6349a17abb43/1/vBBuTYL7rjTBUqNdQ9D99J1Uvp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/vBBuTYL7rjTBUqNdQ9D99J1Uvp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:cf:fb:63:3a:4b:2b:0f:fc:4a:95:0b:2c:a9:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc106e4d82fbae34c152a35d43d0fdf49d54be9e
Validity
Not Before: Aug 23 05:01:43 2025 GMT
Not After : Aug 24 05:01:43 2025 GMT
Subject: CN=67a88b65c6ca8fdaba88065da1ed698901a0e116
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e7:58:7a:01:2c:0d:be:2e:fc:1f:eb:1d:a2:
ed:31:4d:4a:35:1e:a0:9f:c4:7a:2b:ee:5c:38:ea:
92:23:51:d4:74:f4:88:ee:96:42:ec:d0:ae:c6:12:
38:c8:5a:c5:8c:97:0e:38:3b:d1:bf:77:f1:ed:bb:
bd:27:d8:19:82:c0:a7:2c:2e:cf:25:d0:72:4d:fb:
7b:ef:be:45:41:a1:29:a8:06:3a:59:46:8a:70:5d:
53:b3:4b:4a:55:22:cf:df:86:af:6c:e2:17:fb:b9:
4c:60:5d:f3:63:12:29:5a:2f:31:83:e4:2c:b4:9d:
7a:41:92:e6:c4:51:28:15:d3:eb:bd:46:a5:31:8e:
3e:4b:ff:a8:61:ae:4c:10:f2:5f:b2:d2:e6:1f:99:
f4:a4:06:ba:89:b3:7a:be:20:aa:f6:5b:2b:5d:67:
81:c1:f1:d4:ea:75:80:24:1d:31:a7:ed:59:00:b1:
fc:e0:cc:39:5e:7f:b7:11:38:93:96:1c:3a:2f:a1:
24:f3:39:d6:02:ae:b4:a7:4d:67:fa:6d:b0:32:ac:
9d:fd:58:53:0a:84:95:b1:30:fc:c0:74:62:17:d2:
35:0a:68:a3:c9:e5:45:72:56:54:ae:32:44:5b:54:
14:b6:6e:6e:d7:37:a0:c4:3b:0f:2a:44:42:40:d4:
7f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:A8:8B:65:C6:CA:8F:DA:BA:88:06:5D:A1:ED:69:89:01:A0:E1:16
X509v3 Authority Key Identifier:
keyid:BC:10:6E:4D:82:FB:AE:34:C1:52:A3:5D:43:D0:FD:F4:9D:54:BE:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vBBuTYL7rjTBUqNdQ9D99J1Uvp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/084b6d-523f-48c0-a037-6349a17abb43/1/vBBuTYL7rjTBUqNdQ9D99J1Uvp4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/084b6d-523f-48c0-a037-6349a17abb43/1/vBBuTYL7rjTBUqNdQ9D99J1Uvp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:26:45:f5:be:2e:f0:89:39:77:f4:d2:c6:eb:c5:c5:e4:50:
b8:45:33:03:47:22:f4:bf:6e:81:49:e5:11:7b:42:c4:9c:76:
53:4b:07:43:51:34:15:32:38:f1:1e:41:d1:89:bb:1f:9f:b5:
e9:aa:94:40:2d:66:04:24:a2:52:d8:64:38:b3:97:f6:37:b5:
89:64:46:31:16:74:ce:2d:29:f6:e9:21:8e:3e:c0:73:44:ef:
6a:84:26:8c:30:2a:37:ce:63:fb:6b:0c:51:8d:9e:87:13:e2:
18:ae:cd:5a:bd:aa:f0:6a:07:f5:0f:ff:be:bc:02:5b:22:71:
c7:d2:40:93:05:1f:80:5a:26:19:f9:2d:c8:87:98:93:e9:a8:
db:0a:6b:ec:92:37:1b:66:65:b0:9c:bf:d9:77:7c:3d:15:af:
94:6a:c0:de:f5:b4:f9:b7:91:fd:37:46:83:02:2b:0d:ef:7b:
20:9a:32:3a:6f:10:92:2c:27:9d:8e:39:d3:4a:9f:e2:ea:aa:
0c:41:bc:15:35:62:1d:13:42:fe:d9:ac:c4:f7:8d:ce:cb:56:
66:fe:06:02:0b:58:2f:cb:27:ea:2d:69:89:94:49:12:bd:d6:
c9:a9:69:6d:1d:fd:66:13:bc:cd:6f:04:75:31:f6:2b:0e:98:
f0:64:86:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:35:32 2025 by rpki-client