Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/33684a-12c2-423a-bd3a-3ddffdeb9207/1/vflgsO5rxdD2oMZKafL4Yln9zVg.mft
File: vflgsO5rxdD2oMZKafL4Yln9zVg.mft (raw, json)
Hash identifier: Mn3P5N37JrRFNOtKSer8Fw03Dta0OtV0vOdPYDaGYk8=
Subject key identifier: 83:A6:61:FF:67:D2:44:7C:F6:41:4D:DD:F0:96:73:64:FE:E0:DD:62
Authority key identifier: BD:F9:60:B0:EE:6B:C5:D0:F6:A0:C6:4A:69:F2:F8:62:59:FD:CD:58
Certificate issuer: /CN=bdf960b0ee6bc5d0f6a0c64a69f2f86259fdcd58
Certificate serial: 0198D5F13C3C0F4B711F89316F66BB4DAF0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vflgsO5rxdD2oMZKafL4Yln9zVg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/33684a-12c2-423a-bd3a-3ddffdeb9207/1/vflgsO5rxdD2oMZKafL4Yln9zVg.mft
Manifest number: 1522
Signing time: Sat 23 Aug 2025 08:00:13 +0000
Manifest this update: Sat 23 Aug 2025 08:00:13 +0000
Manifest next update: Sun 24 Aug 2025 08:00:13 +0000
Files and hashes: 1: rEdLOhgJ5xMWvLwmv0wizm-cOW0.roa (hash: 5KEvRv7KqMLhpYGvFA0tU5bp6PFE1qlP3ELvibmeSX4=)
2: vflgsO5rxdD2oMZKafL4Yln9zVg.crl (hash: k8M61HersveWuuM0MkEPHB7qB1XlYL8fWZJ1O0xnX94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/33684a-12c2-423a-bd3a-3ddffdeb9207/1/vflgsO5rxdD2oMZKafL4Yln9zVg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/33684a-12c2-423a-bd3a-3ddffdeb9207/1/vflgsO5rxdD2oMZKafL4Yln9zVg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vflgsO5rxdD2oMZKafL4Yln9zVg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:3c:3c:0f:4b:71:1f:89:31:6f:66:bb:4d:af:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdf960b0ee6bc5d0f6a0c64a69f2f86259fdcd58
Validity
Not Before: Aug 23 08:00:13 2025 GMT
Not After : Aug 24 08:00:13 2025 GMT
Subject: CN=83a661ff67d2447cf6414dddf0967364fee0dd62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:b6:9c:39:8a:54:a9:c5:55:b5:62:be:82:66:
d1:17:d4:e6:76:34:53:2f:c3:0e:02:a9:17:7e:78:
b2:80:b8:ba:c5:46:14:d9:d9:30:f8:67:23:89:58:
05:00:3d:45:71:34:47:22:cc:75:24:31:e8:ee:a3:
0d:e9:f9:27:55:d1:3a:6a:49:2d:9a:0e:7e:32:79:
ca:00:24:05:99:79:49:3c:1d:46:de:e2:9a:fe:43:
89:0a:b6:52:e1:c5:af:ba:3d:6e:d2:89:de:ca:17:
b2:13:37:55:00:7c:a3:26:42:24:dd:d8:8f:5e:f3:
ef:80:7c:4e:06:61:24:65:4f:05:dd:ae:1e:5b:7b:
49:66:b7:13:80:5d:36:a9:cc:a0:35:8f:31:57:c8:
ac:0f:d8:2a:c3:c6:3b:48:88:8b:1e:39:eb:7c:63:
49:f5:be:5c:60:f7:3a:b8:23:e8:22:41:6f:ba:ac:
e5:b6:c0:cc:2d:8a:b6:ef:5c:55:17:7a:9d:95:09:
69:f2:1c:0b:75:ee:a4:eb:4d:4b:d6:c9:88:bd:c5:
13:c8:ea:7f:bc:87:c2:29:0b:aa:41:eb:a7:a7:5a:
c8:cc:ad:cf:50:ce:a9:64:95:cc:35:47:9c:d9:22:
91:d8:11:41:65:17:e7:ac:ff:1e:0a:2b:e4:fb:86:
6e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:A6:61:FF:67:D2:44:7C:F6:41:4D:DD:F0:96:73:64:FE:E0:DD:62
X509v3 Authority Key Identifier:
keyid:BD:F9:60:B0:EE:6B:C5:D0:F6:A0:C6:4A:69:F2:F8:62:59:FD:CD:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vflgsO5rxdD2oMZKafL4Yln9zVg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/33684a-12c2-423a-bd3a-3ddffdeb9207/1/vflgsO5rxdD2oMZKafL4Yln9zVg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/33684a-12c2-423a-bd3a-3ddffdeb9207/1/vflgsO5rxdD2oMZKafL4Yln9zVg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:4c:ff:bd:c2:af:02:ee:78:e1:db:4c:b6:34:53:8f:68:4e:
59:10:c8:18:86:88:e6:56:e7:79:fa:61:3d:3d:f4:07:37:02:
54:67:21:cd:39:1a:55:c2:c4:62:12:81:ac:72:d0:fb:a5:52:
0e:66:52:7a:86:8f:05:51:5d:fc:de:b8:a6:52:13:2d:76:02:
b1:83:43:af:e5:b8:7e:56:9d:6f:74:80:e9:2a:ed:e7:da:1e:
44:35:8c:ae:89:fb:f9:1d:7a:6d:a5:f2:9e:9f:d8:5c:fb:ca:
77:3e:a1:51:d9:9e:b2:24:9a:0e:2c:2b:51:b4:bc:55:1a:a0:
3c:a2:af:8c:b1:7b:6e:40:86:7f:42:de:b5:7d:3c:3e:3c:21:
56:e0:bd:d5:17:b3:8a:c5:9a:d9:e2:f0:6d:2d:76:84:e4:a1:
54:5a:6f:b8:0e:c7:5f:25:28:b7:a4:31:3a:14:0c:0f:6b:2c:
a8:e8:59:4b:c3:e2:57:0d:b3:1f:91:94:30:58:bc:a1:96:49:
64:61:88:59:9f:6c:20:ce:3d:65:23:be:b5:f0:9a:7c:63:ab:
a2:a6:bd:85:1f:d3:09:d3:d8:20:66:6c:7f:8e:8e:b5:de:a1:
02:38:a3:3a:72:e3:b9:bd:25:1e:e5:3f:15:f0:75:60:49:7b:
83:75:eb:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:40:20 2025 by rpki-client