Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/97be50-2ce6-4e2b-a3e7-1a6ac98ac6f9/1/vjNkvDj3WxjW9u7yAyCfccJ2jYU.mft
File: vjNkvDj3WxjW9u7yAyCfccJ2jYU.mft (raw, json)
Hash identifier: Fkh4yDN9yEJW+lTojzRw/7kDZdOiH5KF2PEIpKLowZA=
Subject key identifier: BF:F1:D9:95:00:D0:63:90:F4:B7:CA:5F:D4:F5:F3:E3:6F:DA:18:D0
Authority key identifier: BE:33:64:BC:38:F7:5B:18:D6:F6:EE:F2:03:20:9F:71:C2:76:8D:85
Certificate issuer: /CN=be3364bc38f75b18d6f6eef203209f71c2768d85
Certificate serial: 0198D5BC5781E096F61ABD90DCCF46E30393
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vjNkvDj3WxjW9u7yAyCfccJ2jYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/97be50-2ce6-4e2b-a3e7-1a6ac98ac6f9/1/vjNkvDj3WxjW9u7yAyCfccJ2jYU.mft
Manifest number: 1456
Signing time: Sat 23 Aug 2025 07:02:26 +0000
Manifest this update: Sat 23 Aug 2025 07:02:26 +0000
Manifest next update: Sun 24 Aug 2025 07:02:26 +0000
Files and hashes: 1: j55rwmP0M5U3k7x3VXFxJgSVySg.roa (hash: 5VX+pyc2hFJtXaEa0bGAy71RA09akkBJFD4zo26BAY8=)
2: kkSPJZVB96rAbN17P-YUAJN7aaE.roa (hash: 8dKJzCnviJKMMlZ3r9gbzAQciz/e0KQ17aqwbgXszyU=)
3: vjNkvDj3WxjW9u7yAyCfccJ2jYU.crl (hash: 1u4m0mYxOR83omD3JOHjz0nYnIka6b5eCtMgC+JkTeA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/97be50-2ce6-4e2b-a3e7-1a6ac98ac6f9/1/vjNkvDj3WxjW9u7yAyCfccJ2jYU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/97be50-2ce6-4e2b-a3e7-1a6ac98ac6f9/1/vjNkvDj3WxjW9u7yAyCfccJ2jYU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vjNkvDj3WxjW9u7yAyCfccJ2jYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:57:81:e0:96:f6:1a:bd:90:dc:cf:46:e3:03:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be3364bc38f75b18d6f6eef203209f71c2768d85
Validity
Not Before: Aug 23 07:02:26 2025 GMT
Not After : Aug 24 07:02:26 2025 GMT
Subject: CN=bff1d99500d06390f4b7ca5fd4f5f3e36fda18d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3c:80:fb:6a:30:3d:f0:d5:6f:ce:8d:fa:cc:
7d:ec:a4:fe:ce:90:09:79:48:6e:1c:d8:1d:b4:48:
a8:ee:d7:2a:a6:4a:37:a1:7e:31:8e:82:f0:d3:b7:
db:2d:c9:16:0c:18:9c:55:47:74:0a:ed:a2:4c:91:
02:c7:61:dd:37:dd:d8:d0:d8:c5:b6:69:cf:c9:38:
cb:19:7c:24:e9:ed:bc:4d:36:02:fb:3e:93:54:ff:
13:62:7b:ac:b0:55:e1:17:fb:1f:3d:e2:a0:9f:1a:
2a:36:22:24:0e:a7:ff:99:ae:00:df:27:ae:f6:71:
d6:86:e9:43:4f:46:97:fa:f1:0a:89:13:dd:cb:f4:
f2:c3:fa:9d:10:38:2c:17:31:85:f4:c2:23:18:80:
80:77:90:17:df:c7:66:24:c3:21:b5:bb:93:8f:67:
4e:31:b7:88:1d:31:ef:39:4e:99:ea:e7:52:f2:d4:
c8:35:4b:dd:96:8b:cd:e7:0d:e2:7d:ea:a7:1e:34:
8b:6b:86:77:62:95:2b:86:ba:9a:9c:40:3f:98:55:
bb:6e:09:ea:c8:39:6d:0e:b2:48:e3:1c:1e:b1:4c:
58:69:9e:98:e4:d2:cb:20:7e:1a:88:08:8a:ac:e6:
b6:f9:41:83:00:a5:34:83:e8:e6:7f:72:a0:dd:9d:
88:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:F1:D9:95:00:D0:63:90:F4:B7:CA:5F:D4:F5:F3:E3:6F:DA:18:D0
X509v3 Authority Key Identifier:
keyid:BE:33:64:BC:38:F7:5B:18:D6:F6:EE:F2:03:20:9F:71:C2:76:8D:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vjNkvDj3WxjW9u7yAyCfccJ2jYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/97be50-2ce6-4e2b-a3e7-1a6ac98ac6f9/1/vjNkvDj3WxjW9u7yAyCfccJ2jYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/97be50-2ce6-4e2b-a3e7-1a6ac98ac6f9/1/vjNkvDj3WxjW9u7yAyCfccJ2jYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:b7:a1:ab:f5:8c:69:d3:27:87:e6:df:38:c2:12:7e:fe:67:
5b:a4:c3:fd:9d:63:f2:37:61:7d:b7:da:38:da:bd:13:8a:24:
6d:8d:a0:01:c8:05:06:1d:40:7d:d9:74:97:3c:7e:c6:dc:54:
be:c0:db:43:34:1e:1e:31:e6:5c:ae:ba:64:88:2e:c3:fb:6c:
37:ba:7f:0b:1b:92:fc:21:06:bb:0c:ce:d4:46:0c:d9:19:6e:
fa:c0:87:37:d2:35:f0:35:f2:b1:3f:4a:49:7b:42:fd:ec:9b:
88:c2:97:87:21:20:e9:cf:e4:e2:13:0e:d3:25:26:7c:04:cf:
66:c6:76:46:5d:95:19:89:21:e9:c7:2f:99:2f:86:56:a2:4e:
8c:e1:d9:ce:a0:e1:da:09:46:d9:7b:07:69:75:d0:87:68:51:
33:91:b1:c0:08:e0:0d:0e:bf:4e:db:ca:ed:04:ac:9c:a2:a7:
91:7c:4c:3e:01:5d:90:61:ae:a5:36:d4:06:da:f9:9c:3f:c2:
1f:14:6b:d3:c3:00:41:52:d5:5e:48:f4:d6:12:f7:12:c1:c7:
42:67:f6:90:f2:78:dd:4e:4d:68:53:da:5c:94:89:ab:06:2e:
58:ca:6f:d3:ad:ff:a7:0d:35:30:f0:f0:d0:89:3b:e2:36:bf:
e5:a5:65:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:06:45 2025 by rpki-client