Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/3abb5f-3379-4ed6-94c1-c7e338ff3b59/1/vIiPBTCZ-sOlWYZEfLOxA4SV8zI.mft
File: vIiPBTCZ-sOlWYZEfLOxA4SV8zI.mft (raw, json)
Hash identifier: QunCkA2k0xWN0dVXjU2tKSV/IeLP7XX+0E45xfbpcHQ=
Subject key identifier: 96:B6:BC:C3:DB:30:75:6A:C3:9A:EC:79:0A:C3:BE:2D:7B:E0:1B:0E
Authority key identifier: BC:88:8F:05:30:99:FA:C3:A5:59:86:44:7C:B3:B1:03:84:95:F3:32
Certificate issuer: /CN=bc888f053099fac3a55986447cb3b1038495f332
Certificate serial: 0198D54E543884BCE08AB6F0445941683B5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vIiPBTCZ-sOlWYZEfLOxA4SV8zI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/3abb5f-3379-4ed6-94c1-c7e338ff3b59/1/vIiPBTCZ-sOlWYZEfLOxA4SV8zI.mft
Manifest number: 0A43
Signing time: Sat 23 Aug 2025 05:02:17 +0000
Manifest this update: Sat 23 Aug 2025 05:02:17 +0000
Manifest next update: Sun 24 Aug 2025 05:02:17 +0000
Files and hashes: 1: aAkRe7Jm1-dx0uQ95bjB-xCoSJc.roa (hash: c881F7DVYDXIoCHO9T/789+rI+yYESWFHrY/FcifwTE=)
2: vIiPBTCZ-sOlWYZEfLOxA4SV8zI.crl (hash: uArkLRqvRvz27hiIjPJFECK7pBBzmQrJL4Byn0Wnbf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/3abb5f-3379-4ed6-94c1-c7e338ff3b59/1/vIiPBTCZ-sOlWYZEfLOxA4SV8zI.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/3abb5f-3379-4ed6-94c1-c7e338ff3b59/1/vIiPBTCZ-sOlWYZEfLOxA4SV8zI.mft
rsync://rpki.ripe.net/repository/DEFAULT/vIiPBTCZ-sOlWYZEfLOxA4SV8zI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:54:38:84:bc:e0:8a:b6:f0:44:59:41:68:3b:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc888f053099fac3a55986447cb3b1038495f332
Validity
Not Before: Aug 23 05:02:17 2025 GMT
Not After : Aug 24 05:02:17 2025 GMT
Subject: CN=96b6bcc3db30756ac39aec790ac3be2d7be01b0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:9b:fb:6b:9a:5c:c2:3c:5a:2d:e4:f6:e1:fc:
b2:ed:38:bb:92:fc:01:33:29:b5:26:09:d2:7c:24:
5c:a3:5c:49:44:9c:49:2f:41:c2:94:79:b3:2d:fa:
7a:45:9c:b9:ce:77:55:92:3f:39:17:26:e3:d1:9c:
e5:15:a3:37:c6:a6:dc:71:12:3b:1a:03:58:54:13:
a2:e3:dc:7b:81:e5:ad:65:a9:cd:de:77:85:7c:2c:
b8:ea:0a:ad:3e:e5:0e:39:0a:8f:33:bf:3a:3a:42:
9e:e7:82:54:e1:f0:77:73:81:49:f8:16:d6:32:b4:
46:c3:bc:85:bc:56:28:4e:e4:b7:a2:ea:55:1a:ed:
75:bc:a2:8b:15:60:cf:4c:d1:8c:b0:a3:0d:b3:50:
94:50:ff:60:77:b5:cd:e9:fc:89:af:35:aa:51:f7:
c9:7b:70:52:13:0c:18:73:03:dd:f6:2b:66:b4:1e:
20:75:cf:10:a1:f6:c0:06:9c:98:6e:6a:e6:a8:4f:
b2:a5:5a:87:8a:65:d6:6e:65:4c:8f:e8:6b:33:1f:
54:2e:53:67:70:23:ea:b7:98:5f:48:83:19:99:33:
ab:de:f1:b3:97:08:56:a4:70:dc:e5:1c:d2:94:82:
8f:df:0e:07:ee:39:cd:47:6c:96:ce:76:a4:ab:fd:
9b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:B6:BC:C3:DB:30:75:6A:C3:9A:EC:79:0A:C3:BE:2D:7B:E0:1B:0E
X509v3 Authority Key Identifier:
keyid:BC:88:8F:05:30:99:FA:C3:A5:59:86:44:7C:B3:B1:03:84:95:F3:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vIiPBTCZ-sOlWYZEfLOxA4SV8zI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3abb5f-3379-4ed6-94c1-c7e338ff3b59/1/vIiPBTCZ-sOlWYZEfLOxA4SV8zI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3abb5f-3379-4ed6-94c1-c7e338ff3b59/1/vIiPBTCZ-sOlWYZEfLOxA4SV8zI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:0f:cb:69:a4:ef:d4:ff:40:69:cf:ef:3a:80:86:fe:15:80:
e4:66:ac:07:34:04:5a:cb:33:40:20:f5:c5:4a:92:b1:61:47:
e7:f3:d7:cf:3f:69:f0:ab:47:42:f8:fb:40:33:4d:43:07:eb:
e9:db:29:a9:87:6e:3d:41:73:cd:12:53:12:2c:16:8a:41:13:
d1:bf:24:68:0b:6f:80:ca:61:15:3d:8b:0c:68:5d:e7:c9:66:
e4:03:eb:f4:e2:33:65:3f:44:5d:02:3f:64:9a:8c:8a:20:62:
dd:05:d9:67:d2:42:97:8f:b4:0f:aa:c0:db:8f:54:94:3f:17:
23:1f:80:44:6a:20:25:4a:7d:f0:0c:38:bf:89:81:b7:dd:0c:
fc:57:d1:86:fd:2d:da:ec:a6:a5:55:77:d2:fb:82:47:2b:3e:
0b:76:72:b9:32:b3:62:e6:df:61:dd:d4:c0:87:67:8a:4c:5c:
b9:a6:0e:09:73:f2:a7:2f:ae:07:36:cc:30:f8:11:ac:12:aa:
bf:61:c0:6b:0b:70:22:80:b5:27:51:1b:3e:f0:9a:fa:f8:87:
ed:6f:ad:59:2f:57:56:b0:31:cc:52:71:89:25:ac:9b:79:47:
c0:df:cc:81:99:ff:fb:15:04:ef:1f:2b:5f:77:f6:96:81:20:
6e:d3:2d:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:30:15 2025 by rpki-client