Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/7d2944-1ed6-4fcd-8c5c-77b4bbe35a9e/1/vG0u13lNMhfPqv4crVP3Vbgs46k.mft
File: vG0u13lNMhfPqv4crVP3Vbgs46k.mft (raw, json)
Hash identifier: Tnv67dNSoidYAZsuRe46B557tkb9zqV2eUkvmFrH1xA=
Subject key identifier: E7:70:92:00:78:EC:3C:08:97:4D:1C:77:D8:6E:5A:07:E3:95:18:37
Authority key identifier: BC:6D:2E:D7:79:4D:32:17:CF:AA:FE:1C:AD:53:F7:55:B8:2C:E3:A9
Certificate issuer: /CN=bc6d2ed7794d3217cfaafe1cad53f755b82ce3a9
Certificate serial: 0198D5BC3B1D024651762D7F03B6D66F4197
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vG0u13lNMhfPqv4crVP3Vbgs46k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/7d2944-1ed6-4fcd-8c5c-77b4bbe35a9e/1/vG0u13lNMhfPqv4crVP3Vbgs46k.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 07:02:19 +0000
Manifest this update: Sat 23 Aug 2025 07:02:19 +0000
Manifest next update: Sun 24 Aug 2025 07:02:19 +0000
Files and hashes: 1: Rfx73to5lynfa5P988aJIcpZHW0.roa (hash: fb46D6K33gqqGx/M4AgtMP1UJSgJ24dkYkKRuFAfTRM=)
2: vG0u13lNMhfPqv4crVP3Vbgs46k.crl (hash: 398u3/nduyl2Hz4ig0BAzFwJs+6+QNmTL/AayfrmZDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/7d2944-1ed6-4fcd-8c5c-77b4bbe35a9e/1/vG0u13lNMhfPqv4crVP3Vbgs46k.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/7d2944-1ed6-4fcd-8c5c-77b4bbe35a9e/1/vG0u13lNMhfPqv4crVP3Vbgs46k.mft
rsync://rpki.ripe.net/repository/DEFAULT/vG0u13lNMhfPqv4crVP3Vbgs46k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 07:02:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:3b:1d:02:46:51:76:2d:7f:03:b6:d6:6f:41:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc6d2ed7794d3217cfaafe1cad53f755b82ce3a9
Validity
Not Before: Aug 23 07:02:19 2025 GMT
Not After : Aug 24 07:02:19 2025 GMT
Subject: CN=e770920078ec3c08974d1c77d86e5a07e3951837
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:77:44:4e:dc:fd:4f:92:d5:f6:a0:02:8c:2f:
59:f2:a4:8a:02:9a:7f:c1:5c:29:d5:d1:de:82:f3:
29:87:89:c1:b0:df:6c:cc:1d:a3:ee:54:c4:0b:e5:
53:5e:66:03:ae:66:b8:64:d1:a4:b2:74:8b:64:13:
50:d5:38:39:55:12:90:2c:52:0c:be:47:16:97:a2:
29:df:b6:46:98:44:31:92:35:f3:a3:4f:85:db:74:
61:72:81:b1:a4:2e:e4:1b:ad:18:52:74:4c:e7:35:
04:46:6e:68:73:c0:c7:f6:b9:b8:03:bc:c5:4c:da:
39:7a:b5:b7:c8:d0:23:2c:ee:36:3b:ea:1e:ad:de:
45:bc:cf:68:b0:d0:77:97:8b:27:1b:d5:00:e0:99:
6d:2c:32:01:8f:12:e2:22:a0:8a:a8:e8:c7:96:a6:
a8:2b:45:5e:7b:0e:c4:28:e0:60:50:c1:57:4f:cc:
ed:ac:52:77:8d:45:6d:f8:ef:eb:ad:a5:87:04:34:
41:68:4b:a5:bd:09:aa:65:c5:91:91:c9:d9:72:f9:
6f:fa:ba:c0:e1:ed:c5:01:96:d5:da:bb:ec:76:ff:
0c:0f:c1:bd:59:67:33:fa:ff:38:e6:63:a6:45:39:
f4:cb:10:f3:61:ca:5f:dd:31:f4:f0:7f:9f:b2:6f:
0e:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:70:92:00:78:EC:3C:08:97:4D:1C:77:D8:6E:5A:07:E3:95:18:37
X509v3 Authority Key Identifier:
keyid:BC:6D:2E:D7:79:4D:32:17:CF:AA:FE:1C:AD:53:F7:55:B8:2C:E3:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vG0u13lNMhfPqv4crVP3Vbgs46k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7d2944-1ed6-4fcd-8c5c-77b4bbe35a9e/1/vG0u13lNMhfPqv4crVP3Vbgs46k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7d2944-1ed6-4fcd-8c5c-77b4bbe35a9e/1/vG0u13lNMhfPqv4crVP3Vbgs46k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:9d:04:e8:9b:1a:15:e6:b6:bc:54:a9:26:b5:4d:e3:c8:1a:
76:95:18:c8:63:e2:d2:dc:e5:80:4f:f4:b5:97:0e:d9:00:48:
0c:d6:ed:85:03:dc:a0:23:62:16:ce:45:da:fc:a8:97:a8:26:
ce:81:19:55:33:1c:67:46:66:60:ee:57:5b:eb:5b:65:d9:56:
d0:61:9d:d0:bf:84:32:eb:6a:96:64:5a:e9:5a:fe:5b:c4:65:
60:2a:61:c1:7f:64:01:f8:98:43:ef:2c:a7:09:65:e1:3e:75:
1b:e4:eb:83:8c:e1:a3:d9:4f:9b:e4:75:d3:5b:74:b6:17:e1:
df:54:ee:d5:38:88:eb:76:16:c1:36:c6:42:65:dc:2d:e3:c9:
49:f5:73:f6:f7:be:b0:42:f5:c2:6a:fa:6c:ab:d0:61:3d:55:
9a:65:22:6e:9f:9f:52:1b:de:1d:5e:19:0d:46:4e:50:e4:21:
b8:2e:ee:ab:b3:07:99:38:56:6f:c0:2f:0e:f9:db:3f:7c:5f:
43:71:e9:3b:ba:fa:ae:d2:35:13:78:dd:8a:7d:86:bd:91:3f:
4b:b1:9e:48:64:a7:e7:11:7e:59:96:cd:63:b0:19:ee:58:4c:
74:50:81:99:7e:78:01:d7:ba:6c:7c:db:ca:ee:ef:b9:ee:20:
de:5e:ac:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:07:43 2025 by rpki-client