Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.mft
File: vMzI9LN9iSKM0CPSUh0plo3guSU.mft (raw, json)
Hash identifier: NdkjiuelQKZKX17H2Q8qh5q75mlAS4m69Asc68+pUbY=
Subject key identifier: DB:06:E1:BD:F6:4B:F0:5C:CA:E0:22:B3:75:84:C3:D7:A7:81:C4:AA
Authority key identifier: BC:CC:C8:F4:B3:7D:89:22:8C:D0:23:D2:52:1D:29:96:8D:E0:B9:25
Certificate issuer: /CN=bcccc8f4b37d89228cd023d2521d29968de0b925
Certificate serial: 0198D8512512CF25472E52470255167659F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vMzI9LN9iSKM0CPSUh0plo3guSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.mft
Manifest number: 106E
Signing time: Sat 23 Aug 2025 19:04:13 +0000
Manifest this update: Sat 23 Aug 2025 19:04:13 +0000
Manifest next update: Sun 24 Aug 2025 19:04:13 +0000
Files and hashes: 1: c9UMX3iq8tErq5TMlo_-MEWj5uw.roa (hash: 1c2+eOFvPteNDBjZlr3CfkaamwjtVyHeqkTL5YVw+fo=)
2: vMzI9LN9iSKM0CPSUh0plo3guSU.crl (hash: rXxYVo11IhMoUKK4i2JWigQN0twX4gIchYEIo9dzr7c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vMzI9LN9iSKM0CPSUh0plo3guSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:51:25:12:cf:25:47:2e:52:47:02:55:16:76:59:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcccc8f4b37d89228cd023d2521d29968de0b925
Validity
Not Before: Aug 23 19:04:13 2025 GMT
Not After : Aug 24 19:04:13 2025 GMT
Subject: CN=db06e1bdf64bf05ccae022b37584c3d7a781c4aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:73:98:5f:31:d2:48:aa:43:2c:0d:66:57:ab:
5a:a1:82:dc:4d:52:2e:aa:06:cc:27:e7:f5:9f:10:
d3:25:19:d9:86:a0:07:01:13:5d:1a:2b:54:69:5c:
d5:aa:6d:38:5d:1c:dd:38:0b:96:10:f9:6d:d7:a3:
a4:2a:e6:d1:51:32:12:a9:d6:26:32:0b:4a:ab:e8:
ba:c4:08:09:13:10:90:ee:6f:35:4f:62:d2:7b:03:
95:e3:c0:00:f5:65:bc:71:dd:9c:e9:40:ec:ce:5a:
eb:c8:c8:63:29:82:e7:86:3e:9d:9f:ca:eb:95:80:
a3:79:60:7b:7e:5b:4e:fb:30:1e:dd:da:60:ed:69:
73:ed:20:a0:80:d7:a5:0a:8e:50:be:4e:5a:07:92:
e8:5f:76:01:2c:96:92:1e:59:0a:e8:7c:40:8f:3d:
07:91:08:3c:5d:69:08:94:7e:8f:27:f0:59:26:72:
d4:2b:29:91:21:90:56:87:a4:a4:87:7f:4d:5a:93:
fd:6e:70:0a:a0:d6:f3:85:d7:e6:c8:b6:36:63:7c:
1d:a9:e8:87:98:0f:06:b4:2a:1a:74:3e:2c:c0:07:
1e:21:89:4e:da:d0:e3:83:bb:10:2a:ef:b2:d9:e1:
73:53:9f:1b:9c:3f:d6:9b:75:91:fb:af:83:50:b8:
22:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:06:E1:BD:F6:4B:F0:5C:CA:E0:22:B3:75:84:C3:D7:A7:81:C4:AA
X509v3 Authority Key Identifier:
keyid:BC:CC:C8:F4:B3:7D:89:22:8C:D0:23:D2:52:1D:29:96:8D:E0:B9:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vMzI9LN9iSKM0CPSUh0plo3guSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/818f2c-ce7a-4b61-aa0f-0215c4eaa7c3/1/vMzI9LN9iSKM0CPSUh0plo3guSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:3e:da:7c:72:70:8d:93:a5:2c:11:23:63:86:6b:d6:2a:87:
82:8d:7e:7f:0f:05:05:0c:44:01:22:f9:93:5f:2d:af:7b:19:
54:52:21:cd:a7:72:b6:c1:e6:9b:33:57:33:ec:1d:cd:15:78:
91:c1:c6:51:72:9b:2e:14:90:3d:4d:7c:2e:a8:bf:85:34:d9:
af:1c:d8:55:f6:18:c1:83:9f:ae:0b:e0:44:47:94:c3:51:6b:
38:1e:21:51:76:38:c1:3f:6c:a7:69:a9:88:64:4e:bd:ad:dd:
e7:ef:1e:07:53:d1:41:95:61:ad:e3:76:4e:d7:f9:1f:5b:64:
e2:ed:94:0d:a3:7e:37:65:a7:65:ec:ff:85:03:40:20:e5:92:
bd:30:e2:6c:2c:74:d7:4f:86:ea:a4:af:75:92:95:4a:d8:7d:
8d:57:a8:bc:8f:63:42:6f:7e:47:f1:0a:19:83:b5:12:00:0c:
21:2f:8e:72:5c:8f:46:df:bd:92:11:56:f3:c7:ce:c5:11:15:
2a:de:32:12:2c:20:88:f7:c4:69:81:c2:2c:69:1f:68:2f:09:
b2:11:40:45:4b:80:ac:d8:f0:81:9b:bc:0a:83:21:b1:11:90:
e4:e3:4f:24:14:44:97:ff:70:3e:ca:94:35:2e:4d:24:9e:bc:
ed:c6:7c:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:49:04 2025 by rpki-client