Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/8d6068-acca-4777-9448-b7cf6a7b2a29/1/vNgzeodIrlhibqk9my9YmNAY3fE.mft
File: vNgzeodIrlhibqk9my9YmNAY3fE.mft (raw, json)
Hash identifier: zWyBe6bFeG197C266Ecz4fxVaLD42/iB5UO0VTlIfq8=
Subject key identifier: D6:29:80:2B:03:11:F2:C2:9F:55:F7:68:89:E5:64:63:E9:4D:5C:3F
Authority key identifier: BC:D8:33:7A:87:48:AE:58:62:6E:A9:3D:9B:2F:58:98:D0:18:DD:F1
Certificate issuer: /CN=bcd8337a8748ae58626ea93d9b2f5898d018ddf1
Certificate serial: 0198D54E5A1E18DE0EA77CC4E23C1C281A94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vNgzeodIrlhibqk9my9YmNAY3fE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/8d6068-acca-4777-9448-b7cf6a7b2a29/1/vNgzeodIrlhibqk9my9YmNAY3fE.mft
Manifest number: 15D7
Signing time: Sat 23 Aug 2025 05:02:18 +0000
Manifest this update: Sat 23 Aug 2025 05:02:18 +0000
Manifest next update: Sun 24 Aug 2025 05:02:18 +0000
Files and hashes: 1: vNgzeodIrlhibqk9my9YmNAY3fE.crl (hash: CmDJXTlGz4L4vSpsU70WAaiGFQjtP5t0DRqWhSf/7WA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/8d6068-acca-4777-9448-b7cf6a7b2a29/1/vNgzeodIrlhibqk9my9YmNAY3fE.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/8d6068-acca-4777-9448-b7cf6a7b2a29/1/vNgzeodIrlhibqk9my9YmNAY3fE.mft
rsync://rpki.ripe.net/repository/DEFAULT/vNgzeodIrlhibqk9my9YmNAY3fE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:5a:1e:18:de:0e:a7:7c:c4:e2:3c:1c:28:1a:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcd8337a8748ae58626ea93d9b2f5898d018ddf1
Validity
Not Before: Aug 23 05:02:18 2025 GMT
Not After : Aug 24 05:02:18 2025 GMT
Subject: CN=d629802b0311f2c29f55f76889e56463e94d5c3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:0d:f0:94:af:af:9d:16:73:3a:fd:4a:c3:40:
57:ec:e9:54:50:0e:b0:72:f1:7c:78:a8:f7:ad:54:
b6:16:2c:16:c9:98:29:c9:b7:e8:54:ff:18:53:fd:
61:87:f3:ed:e7:78:2b:f5:a7:38:07:80:17:e4:bb:
26:b3:47:5b:a6:86:41:7b:bc:dc:c5:e1:94:76:3a:
91:48:28:6e:dd:44:85:78:56:95:7c:7b:c0:44:ed:
64:40:e4:dc:b5:26:58:36:03:9c:9b:ba:47:83:e4:
08:93:27:08:d0:ea:29:49:9e:f3:11:ae:10:4b:73:
a9:71:8c:9d:f1:d0:f8:72:18:06:1c:67:24:9b:ef:
ff:21:e5:aa:09:5c:71:73:1e:16:c3:5b:dd:3a:28:
a5:b8:e7:48:e3:c1:68:4b:3a:6d:9b:a2:f8:fe:af:
15:eb:e6:c5:12:8e:7c:6b:3e:e6:74:66:06:46:ad:
0f:ec:3a:7d:47:52:c5:5d:d5:3b:6f:d4:2c:c4:50:
f4:4c:6b:52:38:ef:a0:aa:6d:65:54:69:31:87:8c:
d8:4d:98:d4:0d:9a:46:f2:ec:24:4e:d2:b0:36:64:
e5:46:76:47:38:9d:77:04:5e:88:3c:ce:d7:c0:5a:
4c:a5:a0:5a:d0:d1:82:f5:27:3f:6b:33:27:7c:f4:
fb:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:29:80:2B:03:11:F2:C2:9F:55:F7:68:89:E5:64:63:E9:4D:5C:3F
X509v3 Authority Key Identifier:
keyid:BC:D8:33:7A:87:48:AE:58:62:6E:A9:3D:9B:2F:58:98:D0:18:DD:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vNgzeodIrlhibqk9my9YmNAY3fE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8d6068-acca-4777-9448-b7cf6a7b2a29/1/vNgzeodIrlhibqk9my9YmNAY3fE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8d6068-acca-4777-9448-b7cf6a7b2a29/1/vNgzeodIrlhibqk9my9YmNAY3fE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:4b:6d:02:5a:23:86:20:d5:ee:37:66:05:b0:2c:b2:56:3a:
57:40:7b:0f:44:23:49:39:81:b4:cb:a0:ea:e4:6d:97:b7:98:
aa:bd:d6:7a:9d:8e:ae:2e:a1:fa:4e:cf:b4:63:16:ca:9a:86:
75:57:14:09:7e:e3:74:23:c1:56:1b:19:71:80:83:29:9f:50:
a1:fa:7c:6a:3a:be:ad:ad:ce:e1:c6:e2:a9:96:fd:d5:7b:8f:
ad:27:ce:2b:f8:81:f9:7b:04:f7:30:85:bb:3d:81:ee:d6:b1:
10:f8:9c:10:59:e0:a6:a6:20:e6:82:20:43:2d:5a:4d:48:86:
6d:ea:19:de:80:14:4c:f2:67:2c:4f:e1:9d:8b:e7:d3:4b:d9:
16:c1:d2:15:c8:ea:6d:64:76:ed:06:18:20:37:43:8e:82:b4:
3e:33:26:76:6a:e1:dc:25:10:f8:e9:62:06:eb:13:e8:52:ae:
79:ec:31:9b:3d:7a:33:dc:3a:dc:8e:4e:a5:4b:aa:0f:20:bb:
9f:47:6c:c2:c1:75:c9:3b:6b:06:8a:22:1b:4e:3c:58:bd:ee:
bd:b0:9c:14:bd:8c:88:30:dd:55:8e:2d:51:9e:c0:66:a5:89:
17:e5:43:4d:b7:8f:37:6b:9b:fa:35:85:3f:95:00:88:ad:02:
cf:ec:77:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:44:52 2025 by rpki-client