Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/vP0tpUR9AHYW693Cpw_qxed8Sos.mft
File: vP0tpUR9AHYW693Cpw_qxed8Sos.mft (raw, json)
Hash identifier: em3h+C2V8Q4aug/97XwsOjm2cJ+m0qPOmDIbO23+ssw=
Subject key identifier: 30:B2:2D:B5:AB:DF:35:60:6E:1F:D8:0F:07:2E:3F:32:61:98:84:DF
Authority key identifier: BC:FD:2D:A5:44:7D:00:76:16:EB:DD:C2:A7:0F:EA:C5:E7:7C:4A:8B
Certificate issuer: /CN=bcfd2da5447d007616ebddc2a70feac5e77c4a8b
Certificate serial: 0198D705F99A7C1D2A657AA5AEB1A13EE3E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP0tpUR9AHYW693Cpw_qxed8Sos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/vP0tpUR9AHYW693Cpw_qxed8Sos.mft
Manifest number: 0ED1
Signing time: Sat 23 Aug 2025 13:02:29 +0000
Manifest this update: Sat 23 Aug 2025 13:02:29 +0000
Manifest next update: Sun 24 Aug 2025 13:02:29 +0000
Files and hashes: 1: 8qm9bEbxwfNKbG7VK6lFr1L7h68.roa (hash: 75uVkQx0ihlVy8p/hI6UBtxjUc4hu50c+jP7jjKtmh4=)
2: CwdCUQsFV7CyApTMyt6j3A_OJVA.roa (hash: SME0C7xkpjziLPa0GzpInguFdkdM75z/nCo/zXQqOyk=)
3: vP0tpUR9AHYW693Cpw_qxed8Sos.crl (hash: sbmOovkmcRM+TSqeMcxJi7KAvSOfGQffukNL1CL19IU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/vP0tpUR9AHYW693Cpw_qxed8Sos.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/vP0tpUR9AHYW693Cpw_qxed8Sos.mft
rsync://rpki.ripe.net/repository/DEFAULT/vP0tpUR9AHYW693Cpw_qxed8Sos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:f9:9a:7c:1d:2a:65:7a:a5:ae:b1:a1:3e:e3:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcfd2da5447d007616ebddc2a70feac5e77c4a8b
Validity
Not Before: Aug 23 13:02:29 2025 GMT
Not After : Aug 24 13:02:29 2025 GMT
Subject: CN=30b22db5abdf35606e1fd80f072e3f32619884df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:cf:19:63:d3:3b:6f:42:c1:7d:fe:ac:4a:0f:
f4:51:f2:6a:4c:d4:31:f4:ce:d4:af:04:c0:01:fe:
75:26:ce:be:a7:68:6e:85:04:32:26:20:ca:27:1b:
5b:ae:fe:0d:e0:fe:e6:a9:03:fe:c8:3d:ef:92:a3:
2a:f6:7a:23:c1:4f:05:08:8f:12:91:12:74:91:bc:
2c:a8:bf:51:89:b2:70:56:1b:eb:77:ca:5d:43:6e:
23:9a:e9:b1:79:54:7c:e9:08:a2:6b:89:32:b3:ab:
67:49:e7:4a:25:f2:af:ab:08:21:a0:81:23:07:48:
a4:94:b3:89:de:94:6b:13:7e:30:89:b6:54:30:92:
2f:a4:30:22:45:e0:85:45:66:c9:fa:75:63:ec:08:
90:00:95:94:9e:ce:51:7e:91:1d:f1:71:14:37:91:
43:57:71:10:58:5e:be:8c:51:ca:5e:0d:49:f2:d2:
8e:14:a4:8a:26:9e:8d:90:c6:4c:bc:33:2c:e1:a5:
c5:c1:9a:00:dd:17:7b:47:c3:76:9d:9c:6b:da:85:
ad:83:2e:78:36:55:9b:6d:bf:09:26:7e:5f:f9:78:
33:df:ee:b6:9e:6d:52:51:e9:ad:28:f3:2b:7a:e2:
f2:31:9c:fc:44:b4:e3:87:93:b2:a5:89:43:63:fc:
31:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:B2:2D:B5:AB:DF:35:60:6E:1F:D8:0F:07:2E:3F:32:61:98:84:DF
X509v3 Authority Key Identifier:
keyid:BC:FD:2D:A5:44:7D:00:76:16:EB:DD:C2:A7:0F:EA:C5:E7:7C:4A:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP0tpUR9AHYW693Cpw_qxed8Sos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/vP0tpUR9AHYW693Cpw_qxed8Sos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/vP0tpUR9AHYW693Cpw_qxed8Sos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:ca:8d:eb:eb:de:c2:1c:4b:e3:85:57:1b:0f:4a:50:1a:aa:
a7:04:9e:4e:5b:55:ae:d0:1c:12:23:55:03:95:f9:9d:fa:0b:
cd:66:8f:03:3c:b2:06:82:0c:bd:7a:14:79:7c:0c:d6:bc:c0:
6c:20:55:91:11:7e:63:61:63:3c:db:b6:72:03:53:54:90:4a:
b6:08:5c:4b:0f:3c:51:c8:6f:77:a7:27:46:6d:dc:6e:3d:72:
78:37:8f:62:df:d0:80:30:58:3b:58:b6:52:3c:cc:f5:93:90:
d0:9e:e1:24:ac:1b:f5:0b:e0:a9:35:e4:1d:35:19:0e:8e:df:
c6:a7:c3:8c:31:6c:87:01:6b:3a:7c:4d:18:5c:76:6a:00:f0:
ea:44:9f:9e:75:36:58:6e:eb:43:2f:c6:77:24:81:4c:9e:55:
50:cb:cc:13:65:5c:2d:1f:ef:b0:64:31:11:3f:85:cf:16:0e:
9c:57:6c:46:73:1b:16:55:14:f5:d0:0b:12:f4:2b:d6:f8:93:
5f:4f:3a:24:4f:63:ea:ed:b4:42:3b:58:52:aa:0a:f8:5e:34:
14:9c:fa:40:7f:00:64:81:43:67:1b:7f:e5:57:89:52:0c:c2:
35:a9:23:ad:2b:87:bf:df:3e:14:af:85:95:72:3e:ba:dd:e3:
44:ec:5b:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:12:50 2025 by rpki-client