
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/4b63ea-e4f0-44b0-bd2e-9e19d08cb71f/1/vQJhZVRjI1ZFC8S7S22s_HnfMCU.mft
File: vQJhZVRjI1ZFC8S7S22s_HnfMCU.mft (raw, json)
Hash identifier: sGk9O9lSJutGRNDYlMdCi8pLVOIWRfu2A+TNcxrV6rE=
Subject key identifier: 93:FF:63:18:0A:BE:06:C8:FB:FE:40:7C:20:0B:17:73:1F:64:FB:B9
Authority key identifier: BD:02:61:65:54:63:23:56:45:0B:C4:BB:4B:6D:AC:FC:79:DF:30:25
Certificate issuer: /CN=bd02616554632356450bc4bb4b6dacfc79df3025
Certificate serial: 0198D6603FD1EB1ADEA01C9326560F25BBCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vQJhZVRjI1ZFC8S7S22s_HnfMCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/4b63ea-e4f0-44b0-bd2e-9e19d08cb71f/1/vQJhZVRjI1ZFC8S7S22s_HnfMCU.mft
Manifest number: 0C11
Signing time: Sat 23 Aug 2025 10:01:28 +0000
Manifest this update: Sat 23 Aug 2025 10:01:28 +0000
Manifest next update: Sun 24 Aug 2025 10:01:28 +0000
Files and hashes: 1: vQJhZVRjI1ZFC8S7S22s_HnfMCU.crl (hash: YM1oao37RvgwYCT2NzYZBvZuo7NAVdhPbozEnC81csA=)
2: zW8H9236KdsFPYHIiVwdIlsjLeA.roa (hash: A3BKCbMqcBICoyGdtSjfGVXeNlYAC0vfSMBZfdSiSAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/4b63ea-e4f0-44b0-bd2e-9e19d08cb71f/1/vQJhZVRjI1ZFC8S7S22s_HnfMCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/4b63ea-e4f0-44b0-bd2e-9e19d08cb71f/1/vQJhZVRjI1ZFC8S7S22s_HnfMCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vQJhZVRjI1ZFC8S7S22s_HnfMCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:3f:d1:eb:1a:de:a0:1c:93:26:56:0f:25:bb:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd02616554632356450bc4bb4b6dacfc79df3025
Validity
Not Before: Aug 23 10:01:28 2025 GMT
Not After : Aug 24 10:01:28 2025 GMT
Subject: CN=93ff63180abe06c8fbfe407c200b17731f64fbb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:66:ac:10:2d:c9:ee:a7:57:2e:cb:2f:87:b8:
18:9e:5e:09:83:57:dc:53:08:2b:97:b0:a3:e3:8e:
79:5e:db:3b:c6:89:cb:d8:02:53:48:08:4c:46:38:
6d:63:52:b7:af:50:ce:c4:d5:f2:3a:f6:79:c3:51:
62:fc:89:c5:9e:07:c6:82:3b:ff:41:2f:1f:1f:fa:
b3:d2:4d:33:4a:97:e5:a3:03:73:a5:e0:53:ce:3d:
c9:32:10:a5:97:51:76:c7:a9:76:dc:fb:72:93:27:
23:bf:27:cb:04:ad:c4:82:bc:ae:ef:a5:54:30:95:
bc:a9:f9:a2:9d:bb:73:32:06:c1:b2:52:1b:d2:49:
3f:d0:65:42:aa:75:05:2d:a6:11:87:67:d6:e1:34:
02:d7:4c:d1:d0:4e:d0:86:9a:ab:ac:92:c3:07:75:
16:78:67:4a:2e:ec:70:35:8d:2f:69:bc:37:e9:85:
d0:cc:00:ad:2d:8e:96:75:7b:a0:ca:54:27:9a:46:
ac:a1:ee:29:59:9f:52:58:ea:3e:fa:cd:0b:ed:0c:
31:d6:fe:6a:cd:8d:8b:1f:87:ae:e9:e7:67:6e:7a:
0d:eb:99:6e:71:7f:78:55:c2:06:b6:e5:ab:17:30:
62:bd:d9:00:ba:a3:eb:95:1a:bb:e0:aa:b7:ca:8d:
3e:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:FF:63:18:0A:BE:06:C8:FB:FE:40:7C:20:0B:17:73:1F:64:FB:B9
X509v3 Authority Key Identifier:
keyid:BD:02:61:65:54:63:23:56:45:0B:C4:BB:4B:6D:AC:FC:79:DF:30:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vQJhZVRjI1ZFC8S7S22s_HnfMCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/4b63ea-e4f0-44b0-bd2e-9e19d08cb71f/1/vQJhZVRjI1ZFC8S7S22s_HnfMCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/4b63ea-e4f0-44b0-bd2e-9e19d08cb71f/1/vQJhZVRjI1ZFC8S7S22s_HnfMCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:c9:42:0b:9b:58:98:dd:52:9d:5f:b4:ce:f4:da:93:e4:2a:
71:17:d8:79:40:0c:20:dc:11:fa:dc:3b:54:70:f6:a8:be:e4:
c2:d0:4c:18:08:0a:46:ac:ea:3c:7a:d8:95:3a:6c:ad:0d:73:
f6:d5:29:96:90:45:3a:3a:2e:20:e5:b7:24:f2:e7:58:a7:91:
7b:01:22:28:8f:2b:fb:04:15:1b:98:df:21:88:22:7b:26:4f:
8b:d3:88:1a:f6:eb:e3:1c:9e:d6:5d:d4:5c:dc:81:ce:af:9f:
8e:e7:f2:d9:4c:b8:ef:00:b5:4b:10:82:21:30:c9:a5:3a:88:
af:2f:7a:42:63:38:76:09:be:b0:58:39:b4:31:52:f1:c9:f8:
9e:f9:08:30:6f:fc:c1:18:ba:e8:76:85:6a:91:52:a2:dc:6f:
1f:bb:c9:5c:74:af:82:bc:4b:c3:bf:95:16:78:e5:65:90:a2:
8e:79:e7:34:62:80:a7:0c:16:91:a2:ee:99:fc:26:ca:ef:77:
e1:97:75:b5:ad:04:da:85:14:8e:6a:d8:35:72:4e:3b:6d:ad:
06:a5:12:f5:e7:1c:57:79:53:ad:7a:3d:7e:f1:59:a1:bc:1f:
99:ff:53:c9:92:22:48:e3:8a:7b:aa:60:e8:53:26:eb:31:d8:
5f:d0:0a:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:03:16 2025 by rpki-client