Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.mft
File: vCYT4PJtOQfwljQL4FDCAdNY1tU.mft (raw, json)
Hash identifier: z58/uLJ77a3N9usF4zPF5GWSiBhQMh6vUAachIIfkOU=
Subject key identifier: 70:09:13:9A:BF:D0:57:44:8A:C2:9D:60:A2:89:77:A9:F0:B2:48:B2
Authority key identifier: BC:26:13:E0:F2:6D:39:07:F0:96:34:0B:E0:50:C2:01:D3:58:D6:D5
Certificate issuer: /CN=bc2613e0f26d3907f096340be050c201d358d6d5
Certificate serial: 0198D54E89309F4C6C6FBBB6319EF451B7C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vCYT4PJtOQfwljQL4FDCAdNY1tU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.mft
Manifest number: 0301
Signing time: Sat 23 Aug 2025 05:02:30 +0000
Manifest this update: Sat 23 Aug 2025 05:02:30 +0000
Manifest next update: Sun 24 Aug 2025 05:02:30 +0000
Files and hashes: 1: urJ49fIkD8qF9GsD_zFu82_16aQ.roa (hash: CgkfZ2tObyCZ5wcx0o7Zqg/j5Bh2RYB4YUbPkk96BQA=)
2: vCYT4PJtOQfwljQL4FDCAdNY1tU.crl (hash: wzFCP2/szIg6z6LJQchClt0pDM+SQdoMU2K8QgR1jVs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vCYT4PJtOQfwljQL4FDCAdNY1tU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:89:30:9f:4c:6c:6f:bb:b6:31:9e:f4:51:b7:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc2613e0f26d3907f096340be050c201d358d6d5
Validity
Not Before: Aug 23 05:02:30 2025 GMT
Not After : Aug 24 05:02:30 2025 GMT
Subject: CN=7009139abfd057448ac29d60a28977a9f0b248b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:96:90:76:22:37:57:eb:f3:bd:cb:53:21:ea:
31:b1:05:f6:e2:c1:d0:2b:82:cd:4d:c6:bc:74:97:
99:f4:77:9a:b7:a0:ad:a4:6a:5f:e4:a7:47:30:aa:
f1:be:1c:db:6f:99:ec:7e:9b:74:c7:8f:80:32:3d:
51:5f:56:68:82:d2:43:29:c8:3c:5f:1e:9a:b0:fd:
57:78:df:29:e1:f2:0f:33:c9:41:dd:1d:63:24:cb:
d4:27:e1:69:6d:e8:6e:e2:ca:f9:27:08:a2:4d:03:
f1:f1:df:99:1e:ca:46:c7:72:73:54:13:b3:1d:55:
7e:c2:87:f8:d3:69:c0:22:80:64:7e:5f:b4:9a:22:
3c:a5:14:96:72:fa:13:a9:80:63:da:11:1d:8a:b4:
86:c5:96:3d:3d:fe:1f:bf:c9:cf:7b:51:03:ce:f2:
4a:8c:61:6f:54:24:eb:a7:8d:94:e7:f8:8d:ee:7e:
78:20:6b:cf:ad:92:49:8e:f9:c2:7f:5e:c8:db:53:
47:1d:ed:ef:6c:05:55:11:fb:b0:1c:c3:4c:68:c2:
0c:a8:8f:1a:0a:7e:60:a1:fc:fd:55:62:6a:da:f3:
7d:b1:94:eb:aa:67:eb:02:46:46:eb:8e:87:85:99:
9a:37:f8:10:c1:c8:4a:b5:0d:28:d0:e8:3c:22:4a:
4f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:09:13:9A:BF:D0:57:44:8A:C2:9D:60:A2:89:77:A9:F0:B2:48:B2
X509v3 Authority Key Identifier:
keyid:BC:26:13:E0:F2:6D:39:07:F0:96:34:0B:E0:50:C2:01:D3:58:D6:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vCYT4PJtOQfwljQL4FDCAdNY1tU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:93:83:39:10:1b:5f:a4:cf:52:3a:52:89:8a:22:00:42:c4:
9e:88:ad:d3:ac:dc:63:b7:7e:4d:4a:14:5f:04:3d:ce:13:a7:
df:b3:0f:ce:30:4b:3f:a8:b7:aa:31:94:70:f2:14:f2:39:cc:
b3:80:3e:6d:5a:ed:e3:96:5f:0d:72:3e:57:10:e2:f6:c5:e0:
ac:9f:34:77:7b:ab:60:e9:ae:8d:92:e8:9e:ea:e2:ff:dd:7e:
13:a3:21:11:23:96:d9:f5:04:59:ca:6a:bc:c2:db:e8:34:3d:
b8:bb:84:e1:31:66:0b:e9:86:d3:4a:44:da:99:a1:2f:ef:75:
69:c6:a4:83:5d:2c:9d:f1:b9:77:eb:33:6a:70:84:e3:14:6c:
99:7c:67:bc:d8:f0:2b:01:80:8f:25:67:23:d7:79:0f:e3:9d:
a5:c5:6f:64:98:b6:03:12:dd:85:e2:cb:fa:8c:14:03:a0:c2:
16:fe:40:62:e3:87:cb:d8:d4:b6:76:0e:17:51:31:b3:7c:26:
61:34:0d:b0:da:8f:7b:c5:70:2f:b4:cb:8c:83:dc:0f:1d:74:
8d:d9:4c:87:d8:62:08:29:d0:26:96:68:d3:3e:cd:18:e9:18:
58:d0:14:9c:72:40:6a:3d:8a:44:f2:f0:b6:be:d4:5f:a5:6c:
5b:ab:93:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:28:34 2025 by rpki-client