Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/b816b9-91b0-46da-8e58-91488a34fcc8/1/vJxAXxQuU-tnscSZI6t5XoQyjJs.mft
File: vJxAXxQuU-tnscSZI6t5XoQyjJs.mft (raw, json)
Hash identifier: QoErOfVCtsnadWuvKD1V3fR5flpPJsvsuRiQJf/i8rs=
Subject key identifier: BF:05:EE:3E:3E:DC:2A:27:C1:51:2D:A8:3F:F8:AF:8C:0C:C6:F6:31
Authority key identifier: BC:9C:40:5F:14:2E:53:EB:67:B1:C4:99:23:AB:79:5E:84:32:8C:9B
Certificate issuer: /CN=bc9c405f142e53eb67b1c49923ab795e84328c9b
Certificate serial: 0198D4A85563F7AE3D4D521CD859418DE746
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJxAXxQuU-tnscSZI6t5XoQyjJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/b816b9-91b0-46da-8e58-91488a34fcc8/1/vJxAXxQuU-tnscSZI6t5XoQyjJs.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 02:00:58 +0000
Manifest this update: Sat 23 Aug 2025 02:00:58 +0000
Manifest next update: Sun 24 Aug 2025 02:00:58 +0000
Files and hashes: 1: irXjb7CbWugP3w5JDOFWDswYhlc.roa (hash: xfc5cfeM1faq3Raf49DNOnepZD3IOLsHNfYtcKklaZE=)
2: vJxAXxQuU-tnscSZI6t5XoQyjJs.crl (hash: KyX/pGHybUDaKhUciB/Ep4tS7eLGEKWdqQM2pYgcQ2w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/b816b9-91b0-46da-8e58-91488a34fcc8/1/vJxAXxQuU-tnscSZI6t5XoQyjJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/b816b9-91b0-46da-8e58-91488a34fcc8/1/vJxAXxQuU-tnscSZI6t5XoQyjJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/vJxAXxQuU-tnscSZI6t5XoQyjJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:55:63:f7:ae:3d:4d:52:1c:d8:59:41:8d:e7:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc9c405f142e53eb67b1c49923ab795e84328c9b
Validity
Not Before: Aug 23 02:00:58 2025 GMT
Not After : Aug 24 02:00:58 2025 GMT
Subject: CN=bf05ee3e3edc2a27c1512da83ff8af8c0cc6f631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:04:68:fe:d2:5b:8c:3c:ce:3c:fa:26:c3:5c:
d1:50:11:73:36:02:4d:7d:70:04:d3:32:7d:17:91:
15:1d:c2:8e:5e:92:d6:a5:8a:31:7c:33:66:db:ac:
af:ad:4b:bd:85:f1:f3:25:99:7f:c1:60:71:26:31:
92:14:48:ff:66:cb:91:3a:6a:d4:fb:ac:27:04:09:
9f:66:e5:3b:aa:47:91:67:44:5d:7e:71:60:c5:bd:
68:1b:c5:95:4d:86:81:3f:17:87:ae:29:e4:8b:73:
dc:26:9a:c4:1f:67:31:a0:43:2d:81:61:4f:74:43:
c0:51:b7:71:78:77:a5:4f:e7:d6:f9:e5:74:91:a1:
85:3c:73:35:3a:cd:fe:29:45:ab:34:90:ad:23:0f:
ce:68:a7:4f:5b:03:20:8e:7f:47:30:e8:52:31:90:
83:6e:9a:e5:89:ac:da:e4:1d:88:2c:1b:ac:a3:80:
45:17:e9:00:5f:d2:26:94:77:25:7a:fb:f9:e5:0b:
bf:28:c4:81:86:d5:9b:87:34:3e:9c:a1:65:ad:c1:
e8:e1:85:ec:ee:f5:d5:76:53:ea:77:06:b9:7b:42:
37:fa:b6:79:68:54:42:25:cc:e7:e1:41:66:f7:ca:
45:0d:ec:fa:06:74:a1:9f:e3:8f:00:41:3f:46:3b:
e9:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:05:EE:3E:3E:DC:2A:27:C1:51:2D:A8:3F:F8:AF:8C:0C:C6:F6:31
X509v3 Authority Key Identifier:
keyid:BC:9C:40:5F:14:2E:53:EB:67:B1:C4:99:23:AB:79:5E:84:32:8C:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJxAXxQuU-tnscSZI6t5XoQyjJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/b816b9-91b0-46da-8e58-91488a34fcc8/1/vJxAXxQuU-tnscSZI6t5XoQyjJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/b816b9-91b0-46da-8e58-91488a34fcc8/1/vJxAXxQuU-tnscSZI6t5XoQyjJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:16:73:3f:bd:a3:83:33:5c:8f:c9:f9:9d:01:94:4f:2e:51:
da:4a:e6:6c:1c:46:fe:06:2d:22:e9:73:d2:73:60:45:3f:d2:
9f:98:c9:78:f1:32:d7:f1:cf:a8:e6:02:42:8e:a6:8b:0f:cb:
18:9f:76:16:87:24:05:07:93:be:52:97:d4:3d:df:ab:58:58:
d9:d8:f2:02:60:ba:7e:c4:6a:81:7a:4a:25:28:8b:51:5f:18:
d1:e6:9c:e8:53:00:01:06:cf:d2:74:9d:c8:dd:af:b3:29:28:
fe:37:97:d4:eb:bf:cd:d7:3a:09:97:b0:cb:60:09:1b:41:f9:
98:e7:8b:69:99:1d:b4:94:88:f1:7a:6f:68:9f:61:de:ea:a4:
8b:4c:94:b7:e3:79:1b:9b:46:f7:36:da:62:9f:b8:ad:60:c2:
d3:e8:ba:f7:3d:fe:03:20:49:3c:8a:56:ce:d5:2c:4d:dd:20:
f5:c3:3a:be:94:b1:58:a3:bd:cc:ed:c1:df:bc:d6:bb:12:7b:
f1:66:25:a7:59:bd:1a:75:42:0f:b6:01:9c:24:91:b2:83:9c:
82:2d:f9:51:c2:b2:81:67:4d:88:c7:ba:52:f4:73:ea:a1:56:
e3:20:77:ba:f7:c9:c9:12:9c:01:52:63:26:91:e0:35:a9:47:
91:39:43:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUqFVj9649TVIc2FlBjedGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjOWM0MDVmMTQyZTUzZWI2N2IxYzQ5OTIzYWI3OTVlODQz
MjhjOWIwHhcNMjUwODIzMDIwMDU4WhcNMjUwODI0MDIwMDU4WjAzMTEwLwYDVQQD
EyhiZjA1ZWUzZTNlZGMyYTI3YzE1MTJkYTgzZmY4YWY4YzBjYzZmNjMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxARo/tJbjDzOPPomw1zRUBFzNgJN
fXAE0zJ9F5EVHcKOXpLWpYoxfDNm26yvrUu9hfHzJZl/wWBxJjGSFEj/ZsuROmrU
+6wnBAmfZuU7qkeRZ0RdfnFgxb1oG8WVTYaBPxeHrinki3PcJprEH2cxoEMtgWFP
dEPAUbdxeHelT+fW+eV0kaGFPHM1Os3+KUWrNJCtIw/OaKdPWwMgjn9HMOhSMZCD
bprliaza5B2ILBuso4BFF+kAX9ImlHclevv55Qu/KMSBhtWbhzQ+nKFlrcHo4YXs
7vXVdlPqdwa5e0I3+rZ5aFRCJczn4UFm98pFDez6BnShn+OPAEE/RjvpPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL8F7j4+3ConwVEtqD/4r4wMxvYxMB8GA1UdIwQY
MBaAFLycQF8ULlPrZ7HEmSOreV6EMoybMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkp4QVh4UXVVLXRuc2NTWkk2dDVYb1F5akpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9iODE2YjktOTFiMC00NmRhLThlNTgt
OTE0ODhhMzRmY2M4LzEvdkp4QVh4UXVVLXRuc2NTWkk2dDVYb1F5akpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS9iODE2YjktOTFiMC00NmRhLThlNTgtOTE0ODhhMzRmY2M4
LzEvdkp4QVh4UXVVLXRuc2NTWkk2dDVYb1F5akpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfRZzP72j
gzNcj8n5nQGUTy5R2krmbBxG/gYtIulz0nNgRT/Sn5jJePEy1/HPqOYCQo6miw/L
GJ92FockBQeTvlKX1D3fq1hY2djyAmC6fsRqgXpKJSiLUV8Y0eac6FMAAQbP0nSd
yN2vsyko/jeX1Ou/zdc6CZewy2AJG0H5mOeLaZkdtJSI8XpvaJ9h3uqki0yUt+N5
G5tG9zbaYp+4rWDC0+i69z3+AyBJPIpWztUsTd0g9cM6vpSxWKO9zO3B37zWuxJ7
8WYlp1m9GnVCD7YBnCSRsoOcgi35UcKygWdNiMe6UvRz6qFW4yB3uvfJyRKcAVJj
JpHgNalHkTlDnQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 09:49:21 2025 by rpki-client