Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/a29c67-f24d-4979-b2af-cc41c4a3198d/1/vMY_AQxUC81FVDRL-5pZou26vCk.mft
File: vMY_AQxUC81FVDRL-5pZou26vCk.mft (raw, json)
Hash identifier: LNG9NC0FkYzVrzA8pOjU+8RhxTKl1SP+ckOwaiz+hwE=
Subject key identifier: F0:B8:4A:02:F5:3D:18:BA:C5:45:C7:0F:A8:30:4A:31:B4:6B:2A:49
Authority key identifier: BC:C6:3F:01:0C:54:0B:CD:45:54:34:4B:FB:9A:59:A2:ED:BA:BC:29
Certificate issuer: /CN=bcc63f010c540bcd4554344bfb9a59a2edbabc29
Certificate serial: 0198D698413C02EB6C8CFBCDC7CF253872BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vMY_AQxUC81FVDRL-5pZou26vCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/a29c67-f24d-4979-b2af-cc41c4a3198d/1/vMY_AQxUC81FVDRL-5pZou26vCk.mft
Manifest number: 1652
Signing time: Sat 23 Aug 2025 11:02:38 +0000
Manifest this update: Sat 23 Aug 2025 11:02:38 +0000
Manifest next update: Sun 24 Aug 2025 11:02:38 +0000
Files and hashes: 1: f54g9Idv6PqQc5NMQvmsvFWJIzA.roa (hash: l130lZQGnDRQWTrBtDjmk6wY+7GBZMzcTr0yBlbCoVI=)
2: vMY_AQxUC81FVDRL-5pZou26vCk.crl (hash: h4iQ1pPWyYzPr3+yLKDRJGIqKd3DdAMAkpi3s9P2478=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/a29c67-f24d-4979-b2af-cc41c4a3198d/1/vMY_AQxUC81FVDRL-5pZou26vCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/a29c67-f24d-4979-b2af-cc41c4a3198d/1/vMY_AQxUC81FVDRL-5pZou26vCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vMY_AQxUC81FVDRL-5pZou26vCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:41:3c:02:eb:6c:8c:fb:cd:c7:cf:25:38:72:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcc63f010c540bcd4554344bfb9a59a2edbabc29
Validity
Not Before: Aug 23 11:02:38 2025 GMT
Not After : Aug 24 11:02:38 2025 GMT
Subject: CN=f0b84a02f53d18bac545c70fa8304a31b46b2a49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:52:56:91:e1:b1:9d:29:9c:3b:23:9d:dd:18:
7f:98:94:f2:69:e0:3a:d8:5c:66:47:e5:cc:ba:98:
35:cc:42:71:c8:2d:0a:dc:0e:0c:d5:a7:29:2a:b7:
c1:2a:25:92:ca:22:d5:ce:59:8b:76:6e:5a:55:67:
f3:2f:d2:05:a9:c8:0f:40:74:bf:98:b7:b2:8c:00:
ac:e2:12:f5:87:8d:f9:f8:f7:3b:ec:18:e9:e3:a0:
7d:b6:5e:55:fc:c4:c1:f8:d8:11:ac:ab:f2:c3:1a:
94:e6:c4:fc:a0:64:ce:2e:d8:b1:c7:f5:e4:6e:5d:
6b:2e:07:66:89:38:93:92:a6:13:18:8f:72:8f:48:
80:32:99:c7:83:e5:97:18:3a:c2:96:2a:e4:4d:c1:
48:a8:38:5f:8e:b6:da:11:13:c9:bd:8f:6e:e5:20:
62:33:08:7b:27:1c:56:e4:f9:d4:10:5f:f6:08:41:
cf:d8:2d:33:f5:79:ec:86:2a:aa:e8:a4:06:4a:a3:
4e:d4:82:41:ea:70:c4:c3:07:4c:e8:ca:8b:42:63:
9d:ab:ca:c5:d6:42:87:ae:99:4b:47:84:36:bb:82:
fc:46:27:b1:7f:1f:9d:49:25:5c:a3:9b:e1:31:a5:
d6:ee:38:44:15:8e:70:42:36:b2:27:7b:ef:8a:86:
3c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:B8:4A:02:F5:3D:18:BA:C5:45:C7:0F:A8:30:4A:31:B4:6B:2A:49
X509v3 Authority Key Identifier:
keyid:BC:C6:3F:01:0C:54:0B:CD:45:54:34:4B:FB:9A:59:A2:ED:BA:BC:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vMY_AQxUC81FVDRL-5pZou26vCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a29c67-f24d-4979-b2af-cc41c4a3198d/1/vMY_AQxUC81FVDRL-5pZou26vCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a29c67-f24d-4979-b2af-cc41c4a3198d/1/vMY_AQxUC81FVDRL-5pZou26vCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:17:46:9e:d5:3f:60:46:e2:5e:a8:fd:5a:46:f7:95:4b:3a:
2c:24:4a:6e:1d:3b:45:87:20:28:a3:72:de:35:d4:69:9d:a1:
1f:7e:a8:b0:d0:7b:1f:ff:b9:24:46:d5:90:d2:35:d6:08:58:
45:54:7b:92:cd:d7:27:a6:93:c0:f3:71:b4:24:d9:0e:9c:ac:
1c:18:78:67:cc:1d:bf:34:10:c9:98:60:a6:6d:76:59:d3:98:
ae:87:53:7a:c2:4f:43:6a:88:9a:8f:0d:cb:2b:66:5f:d4:4a:
d8:fe:e6:04:70:57:bb:ed:06:6b:b3:36:be:65:fa:56:ef:cd:
17:74:cf:bf:66:4c:34:97:0b:ac:2f:c3:ef:40:37:7e:8e:17:
d0:e4:6b:b2:18:38:42:f7:2c:ca:07:47:2b:ae:53:d0:fb:41:
ad:82:6e:d7:c7:8c:3d:df:2a:bb:53:a4:6d:2b:82:ec:45:c4:
83:33:c7:ea:0c:2d:0e:05:da:c3:10:e3:66:8e:19:43:75:34:
cc:88:29:21:0c:a5:cd:65:eb:7f:b8:62:a0:b5:6a:34:59:88:
07:6c:d7:96:07:7e:ca:14:ea:1e:51:db:9c:1d:02:00:94:9a:
46:4d:b0:f5:cf:e9:3e:10:2e:c1:b3:f2:95:c4:5f:91:34:d3:
55:b8:81:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:14:26 2025 by rpki-client