Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/c3ab69-7162-4222-aa20-4e3b20ec16a3/1/vGOjbVyAZRqJp2kGyeNAL7NFaNo.mft
File: vGOjbVyAZRqJp2kGyeNAL7NFaNo.mft (raw, json)
Hash identifier: H/o3Zw29JTD8vwQKq3e4fjTysmis7QO4CA0vBJZY1C0=
Subject key identifier: 49:97:94:AA:29:5C:17:9E:EF:FA:C7:B1:1D:E3:A0:46:39:49:BD:01
Authority key identifier: BC:63:A3:6D:5C:80:65:1A:89:A7:69:06:C9:E3:40:2F:B3:45:68:DA
Certificate issuer: /CN=bc63a36d5c80651a89a76906c9e3402fb34568da
Certificate serial: 0198D773D56112169E8BF63FD097690BA573
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vGOjbVyAZRqJp2kGyeNAL7NFaNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/c3ab69-7162-4222-aa20-4e3b20ec16a3/1/vGOjbVyAZRqJp2kGyeNAL7NFaNo.mft
Manifest number: 03D4
Signing time: Sat 23 Aug 2025 15:02:29 +0000
Manifest this update: Sat 23 Aug 2025 15:02:29 +0000
Manifest next update: Sun 24 Aug 2025 15:02:29 +0000
Files and hashes: 1: 8pgaGBXBaUb02KKfxBTaArJBx7M.roa (hash: MwzlZRqfpq85Jtfy1BfMUyKAa2i1GlwvDq8Y0Ug3Xu8=)
2: B6_6e2WVsyfaOmjKudfNr0g4dMs.roa (hash: rRjjEbNFtXOP8HK5A6ODglpO6DXLSRaxFyjXQUR8uMo=)
3: vGOjbVyAZRqJp2kGyeNAL7NFaNo.crl (hash: SmpYiNksylpZtYeYko3x8ybFtgqjgEYry3GTVkFgSxw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/c3ab69-7162-4222-aa20-4e3b20ec16a3/1/vGOjbVyAZRqJp2kGyeNAL7NFaNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/c3ab69-7162-4222-aa20-4e3b20ec16a3/1/vGOjbVyAZRqJp2kGyeNAL7NFaNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/vGOjbVyAZRqJp2kGyeNAL7NFaNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:73:d5:61:12:16:9e:8b:f6:3f:d0:97:69:0b:a5:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc63a36d5c80651a89a76906c9e3402fb34568da
Validity
Not Before: Aug 23 15:02:29 2025 GMT
Not After : Aug 24 15:02:29 2025 GMT
Subject: CN=499794aa295c179eeffac7b11de3a0463949bd01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:f4:64:75:4b:7c:8a:a4:c1:50:d0:5e:1e:14:
09:d7:96:7f:d7:61:74:c0:da:27:45:4e:02:e6:45:
0a:2c:52:0d:ea:e9:f6:e6:06:6d:37:a8:7c:59:85:
d1:4f:b4:f2:ff:e0:96:8d:43:90:da:39:6a:7e:bb:
21:19:80:c2:d9:a0:81:cd:8d:c8:3f:f7:bd:45:35:
24:c7:fc:43:26:a7:74:a5:47:e7:26:36:c1:f8:c9:
22:a0:0d:7f:df:87:aa:cd:7e:a1:b5:dc:7c:ac:f8:
8e:83:fc:44:01:38:71:cb:80:38:d3:62:cc:1f:54:
94:91:76:92:ad:d8:89:99:1b:19:c9:c0:4a:f3:d4:
3a:39:30:65:dc:cf:a6:31:72:d4:cd:a8:e2:de:cd:
0b:23:b0:cc:57:d6:b9:3e:5c:dd:9a:35:28:f4:e6:
d5:14:0c:29:c5:a8:42:80:39:b1:1b:a6:0a:ff:e9:
16:6a:08:63:6c:86:a5:66:39:68:b3:aa:fe:af:e1:
27:19:c6:c7:d9:53:dd:db:81:fc:3d:bc:25:85:94:
94:15:94:37:31:53:74:2d:a9:8c:db:9d:6b:d3:c1:
60:30:74:c5:be:4d:d3:d2:e9:9b:5b:15:a7:5f:6b:
e4:3c:4e:41:5b:cb:3b:77:43:c4:d3:6d:76:89:d1:
5d:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:97:94:AA:29:5C:17:9E:EF:FA:C7:B1:1D:E3:A0:46:39:49:BD:01
X509v3 Authority Key Identifier:
keyid:BC:63:A3:6D:5C:80:65:1A:89:A7:69:06:C9:E3:40:2F:B3:45:68:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vGOjbVyAZRqJp2kGyeNAL7NFaNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/c3ab69-7162-4222-aa20-4e3b20ec16a3/1/vGOjbVyAZRqJp2kGyeNAL7NFaNo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/c3ab69-7162-4222-aa20-4e3b20ec16a3/1/vGOjbVyAZRqJp2kGyeNAL7NFaNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:4c:5e:54:fb:44:fc:91:00:79:e9:2d:a3:9b:31:b8:df:be:
c0:6b:95:ce:3d:e6:4c:da:70:03:46:4d:e0:98:cd:57:5a:06:
39:86:bb:84:11:ac:60:b1:2b:16:1f:4c:51:6f:7f:41:15:35:
33:e3:41:3c:b5:a6:82:a9:81:28:66:46:83:89:4a:89:f6:91:
e7:e2:c6:b8:fd:10:45:1d:be:a8:17:56:53:04:89:76:a4:3c:
28:6a:c9:bc:2e:07:6b:1f:bf:a2:94:8f:a2:64:2b:13:23:b1:
ae:1e:64:65:5a:a9:87:62:ef:aa:9a:c2:a5:f6:aa:c2:fd:0f:
ce:65:52:af:23:86:ab:96:15:28:81:17:d9:9c:59:c4:0a:49:
0f:6d:3f:f9:7d:ab:9e:c1:24:66:da:70:84:4e:10:89:61:f5:
57:dc:4a:e4:e1:a4:0d:9c:a7:78:e1:48:d7:da:f8:97:57:3b:
d6:b5:78:9e:61:b5:02:7f:75:e2:e0:7b:fb:67:91:bd:6a:3c:
1b:0a:cb:e3:ea:af:07:fb:01:0d:38:fa:24:b6:c9:e3:a0:05:
9b:12:c1:f7:52:71:a2:d7:83:c6:c5:d5:7b:a1:0d:db:04:35:
f7:9a:d6:00:50:75:ee:48:2f:de:3b:ab:55:a2:7f:ef:bd:60:
9f:e1:3c:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:29:56 2025 by rpki-client