Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/9f4282-dfeb-40c1-af84-a564ec011c5d/1/vIwagDL1fyKwFFSmXvMt6ndJbQs.mft
File: vIwagDL1fyKwFFSmXvMt6ndJbQs.mft (raw, json)
Hash identifier: fNqi7WEtkACLE7n2h46VXCw0l0dwG1opz3pM3fPbObI=
Subject key identifier: 3C:C9:5D:81:4D:03:B1:68:B4:40:B5:7A:5E:05:4D:75:65:45:3B:79
Authority key identifier: BC:8C:1A:80:32:F5:7F:22:B0:14:54:A6:5E:F3:2D:EA:77:49:6D:0B
Certificate issuer: /CN=bc8c1a8032f57f22b01454a65ef32dea77496d0b
Certificate serial: 0198D70593760A34DE688900CFE73AC62113
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vIwagDL1fyKwFFSmXvMt6ndJbQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/9f4282-dfeb-40c1-af84-a564ec011c5d/1/vIwagDL1fyKwFFSmXvMt6ndJbQs.mft
Manifest number: 097E
Signing time: Sat 23 Aug 2025 13:02:03 +0000
Manifest this update: Sat 23 Aug 2025 13:02:03 +0000
Manifest next update: Sun 24 Aug 2025 13:02:03 +0000
Files and hashes: 1: 87EiEbuhBkMDFm619edEsUyoB7Y.roa (hash: iu5N7p/QfYR3g8fpVRiIN4OpWGAgMRa+uUZVim92tYw=)
2: hhHnsqFssAy3cZ6p2eic8J_5Jkg.roa (hash: 4+RUythcb8WdsV0R43hgKvkcYTcHEmIS4/pDs5LGxZk=)
3: vIwagDL1fyKwFFSmXvMt6ndJbQs.crl (hash: +Hx+NQ+9dx5Sm5T6a96IdPbiFN1TQ3L4skUJdAUydzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/9f4282-dfeb-40c1-af84-a564ec011c5d/1/vIwagDL1fyKwFFSmXvMt6ndJbQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/9f4282-dfeb-40c1-af84-a564ec011c5d/1/vIwagDL1fyKwFFSmXvMt6ndJbQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/vIwagDL1fyKwFFSmXvMt6ndJbQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:93:76:0a:34:de:68:89:00:cf:e7:3a:c6:21:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc8c1a8032f57f22b01454a65ef32dea77496d0b
Validity
Not Before: Aug 23 13:02:03 2025 GMT
Not After : Aug 24 13:02:03 2025 GMT
Subject: CN=3cc95d814d03b168b440b57a5e054d7565453b79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5f:8f:aa:86:6c:e7:2e:0f:e4:2f:d8:ec:8a:
be:65:d5:ee:4e:0d:a6:00:64:76:db:e1:91:7a:5f:
ba:2f:3d:6c:4f:0c:3d:1c:0a:eb:51:57:dc:61:8a:
c1:17:08:3d:63:68:4a:d6:d4:c2:8a:db:da:68:44:
43:a9:b0:07:4e:dc:c0:93:e3:c2:58:a9:78:92:1d:
1a:8d:29:09:30:1c:5b:6f:7e:8f:6e:a2:2e:b2:3e:
99:8f:af:09:e8:6a:5f:26:14:ac:8b:bb:b6:61:d9:
ce:5b:a9:90:b2:d8:d7:1b:c1:cb:10:a7:05:93:58:
22:41:d2:51:44:95:45:44:18:08:17:e3:f5:13:05:
3f:09:c9:98:79:73:ca:7e:45:77:52:b5:d3:cd:62:
1f:35:47:0e:3e:da:ef:49:1b:fc:81:03:3f:22:fe:
d0:88:58:91:af:45:76:e8:ed:26:93:80:9d:68:5a:
21:93:8e:4b:e2:45:3d:ee:3c:1e:95:ad:24:d1:77:
33:46:06:cb:71:75:1d:f1:1c:1e:30:51:b0:f0:9c:
dc:16:16:78:db:b0:a1:11:80:61:30:e3:60:5d:78:
79:67:ff:6e:19:66:a9:59:52:ed:03:eb:22:6f:f9:
df:79:42:b0:5d:7a:b0:f5:d0:95:25:2c:5d:6c:11:
c7:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:C9:5D:81:4D:03:B1:68:B4:40:B5:7A:5E:05:4D:75:65:45:3B:79
X509v3 Authority Key Identifier:
keyid:BC:8C:1A:80:32:F5:7F:22:B0:14:54:A6:5E:F3:2D:EA:77:49:6D:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vIwagDL1fyKwFFSmXvMt6ndJbQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9f4282-dfeb-40c1-af84-a564ec011c5d/1/vIwagDL1fyKwFFSmXvMt6ndJbQs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9f4282-dfeb-40c1-af84-a564ec011c5d/1/vIwagDL1fyKwFFSmXvMt6ndJbQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:93:42:17:92:fb:83:1f:b5:18:a9:86:a8:42:78:35:df:c7:
1c:03:61:eb:e2:28:34:f0:75:94:ee:d5:d5:ab:ff:ea:27:86:
c5:31:93:62:bf:44:84:d0:14:93:59:b2:ca:1a:67:f5:19:6a:
87:eb:7b:fa:81:22:f7:38:98:f9:94:5a:44:9f:f5:1f:1b:70:
03:9f:ef:30:45:5f:77:41:83:f4:cc:3e:a4:cd:a8:d2:94:95:
9d:7e:e1:bd:4e:f7:cf:cf:5f:a4:06:28:4f:d5:c1:e7:a3:98:
ae:4a:b0:6c:0e:2b:a8:c7:90:12:56:2b:e7:a0:77:5a:5e:57:
2a:c1:8e:08:af:50:7e:0f:d6:e4:1c:17:dd:8c:f6:79:94:92:
c4:62:44:3a:47:6b:20:09:4a:6b:45:63:f7:b8:64:0b:71:a2:
5a:1d:34:8b:73:d3:db:a0:17:66:10:94:a8:20:88:9c:e5:6c:
d9:62:d4:7e:7d:8f:e9:cd:c1:32:6c:0a:8b:ed:2b:cf:ac:59:
d0:3f:7d:49:8c:e7:5e:24:33:f0:d7:9f:45:5e:fc:05:11:c9:
4d:5e:89:a3:28:9e:c4:9d:72:47:0c:27:32:77:20:49:75:48:
f2:0d:5c:28:e1:48:f6:15:55:c5:96:3f:5a:a1:96:ad:af:f4:
9e:62:71:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:07:40 2025 by rpki-client