Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/c15ba7-d82f-4dda-903c-c14aac41a1c2/1/vAB4on8QAyY8TFYbAlB2by9Sbn0.mft
File: vAB4on8QAyY8TFYbAlB2by9Sbn0.mft (raw, json)
Hash identifier: 37T7aqNP85FbaYsxAQpU4y792OCgKY/JPQW/PqYSKxw=
Subject key identifier: 55:BD:97:B1:E4:CB:EA:C9:FB:66:1C:AF:A5:39:4D:10:EB:3D:C9:5E
Authority key identifier: BC:00:78:A2:7F:10:03:26:3C:4C:56:1B:02:50:76:6F:2F:52:6E:7D
Certificate issuer: /CN=bc0078a27f1003263c4c561b0250766f2f526e7d
Certificate serial: 0198D5839AFC34219BF0FD2D3149F9AF58DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vAB4on8QAyY8TFYbAlB2by9Sbn0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/c15ba7-d82f-4dda-903c-c14aac41a1c2/1/vAB4on8QAyY8TFYbAlB2by9Sbn0.mft
Manifest number: 03E8
Signing time: Sat 23 Aug 2025 06:00:28 +0000
Manifest this update: Sat 23 Aug 2025 06:00:28 +0000
Manifest next update: Sun 24 Aug 2025 06:00:28 +0000
Files and hashes: 1: U8RX6_Xhgd2rniYJPgiw5XhDM14.roa (hash: 2r/ZPIhIP4vgQHcp4lEFNmYb4WZmbuMJWG8eyE6HlfQ=)
2: vAB4on8QAyY8TFYbAlB2by9Sbn0.crl (hash: 49FVxlkxSsoRk7IrPnVSsQOcKsmzYtTjntBOFFlVXE0=)
3: vAZxSJwcgiBcI_82IoG7w0HDsHY.roa (hash: p3exCfpQFtu6+djLck5m9Ak9SIsL/faxVMijWb66KP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/c15ba7-d82f-4dda-903c-c14aac41a1c2/1/vAB4on8QAyY8TFYbAlB2by9Sbn0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/c15ba7-d82f-4dda-903c-c14aac41a1c2/1/vAB4on8QAyY8TFYbAlB2by9Sbn0.mft
rsync://rpki.ripe.net/repository/DEFAULT/vAB4on8QAyY8TFYbAlB2by9Sbn0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:9a:fc:34:21:9b:f0:fd:2d:31:49:f9:af:58:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc0078a27f1003263c4c561b0250766f2f526e7d
Validity
Not Before: Aug 23 06:00:28 2025 GMT
Not After : Aug 24 06:00:28 2025 GMT
Subject: CN=55bd97b1e4cbeac9fb661cafa5394d10eb3dc95e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:bc:83:b4:6a:d5:c6:aa:59:4d:f5:35:33:7f:
3b:7f:53:f9:d0:bc:aa:1e:43:f8:af:3e:bc:f5:94:
7c:5d:ae:39:86:c6:49:4c:ba:95:78:97:fb:bf:24:
b7:49:bd:fb:3a:75:30:4e:ad:61:a1:af:4a:22:25:
d9:cc:91:43:10:d7:c7:51:f7:47:d0:87:4d:f5:cb:
7f:18:28:71:c3:77:d1:4d:f8:bf:b3:23:dd:8c:71:
36:93:df:27:ed:34:3e:e3:43:08:aa:d7:10:3d:e4:
12:18:36:c9:68:61:cc:74:da:59:46:3b:58:22:85:
39:49:e7:28:6b:bd:25:e6:d5:5f:6b:bd:df:f1:c7:
aa:04:fe:17:9c:49:27:46:c7:a4:cc:60:fd:06:e6:
c2:b8:78:37:5d:50:13:ab:58:61:e6:91:19:c1:40:
a6:d2:71:61:c5:c4:b6:3a:c0:93:48:cb:a9:87:3f:
f2:6f:86:0e:0d:06:07:5e:5b:53:46:ce:0a:07:8d:
f9:77:e9:6c:a4:dd:2a:8c:8e:fb:cb:76:ce:6e:3d:
f4:8a:a3:bd:bc:36:89:7b:f0:89:06:91:a5:b7:2d:
5e:a5:f0:86:44:0d:27:c4:18:52:ba:08:58:49:52:
26:e3:5a:b8:5a:92:2f:53:75:7b:40:5e:77:99:e9:
18:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:BD:97:B1:E4:CB:EA:C9:FB:66:1C:AF:A5:39:4D:10:EB:3D:C9:5E
X509v3 Authority Key Identifier:
keyid:BC:00:78:A2:7F:10:03:26:3C:4C:56:1B:02:50:76:6F:2F:52:6E:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vAB4on8QAyY8TFYbAlB2by9Sbn0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/c15ba7-d82f-4dda-903c-c14aac41a1c2/1/vAB4on8QAyY8TFYbAlB2by9Sbn0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/c15ba7-d82f-4dda-903c-c14aac41a1c2/1/vAB4on8QAyY8TFYbAlB2by9Sbn0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:2a:39:21:0b:92:07:c8:8c:f6:3d:47:8e:86:12:60:6d:02:
0c:81:72:bb:31:f1:b1:69:7c:cc:0a:ca:15:62:f4:38:1f:57:
9d:c0:34:7b:e4:fc:fe:4a:22:23:63:19:d6:16:9f:c7:01:d5:
ce:cd:f2:b1:71:4a:10:ec:6e:b7:8a:10:d8:e8:64:1c:56:97:
d0:ec:f0:a0:32:3d:55:c9:fe:20:5c:3e:1e:8e:96:d9:84:0f:
45:8a:a3:9a:42:19:1a:4d:b5:ec:c3:c3:c6:b9:8c:74:3d:7f:
e3:09:99:f0:02:f8:17:7d:8a:f5:bd:79:27:c0:8b:dc:9d:89:
b7:6e:53:5e:db:db:3e:ff:61:13:9d:3a:64:b7:12:e0:7b:a9:
12:69:61:7e:2e:17:b2:ec:1e:9a:08:99:b0:b7:6b:66:f5:62:
da:8e:b3:fe:3a:38:2a:d2:23:65:e0:31:70:cb:82:63:a9:09:
d7:73:6d:25:5b:3c:f3:6e:d1:e1:63:ff:84:ba:6d:42:5e:d7:
ca:d5:8d:0e:7b:29:2b:b3:67:33:dc:26:be:a7:d2:68:b1:f1:
c0:3e:0d:14:a2:d0:4c:24:88:1a:d1:9b:92:d8:ae:2a:f1:3b:
0e:3a:d8:9a:9d:e6:90:65:40:a9:8b:75:cf:49:13:34:5e:51:
3b:1c:6a:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:44:40 2025 by rpki-client