Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/2d1a0a-71cc-4f57-aa63-bedac10aacdc/1/v1vcQQat3onhzpwyuAeyCC67mUQ.mft
File: v1vcQQat3onhzpwyuAeyCC67mUQ.mft (raw, json)
Hash identifier: NzKM4nmRZ5eoxxV0ceSF492TtVTaRGUuVotDh2ADQJM=
Subject key identifier: 08:AD:BD:86:1B:1E:87:5D:FC:21:BE:D1:73:32:ED:37:1B:B0:6A:E7
Authority key identifier: BF:5B:DC:41:06:AD:DE:89:E1:CE:9C:32:B8:07:B2:08:2E:BB:99:44
Certificate issuer: /CN=bf5bdc4106adde89e1ce9c32b807b2082ebb9944
Certificate serial: 0198D4E04B60AE72380122FB3A4D41BB14A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v1vcQQat3onhzpwyuAeyCC67mUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/2d1a0a-71cc-4f57-aa63-bedac10aacdc/1/v1vcQQat3onhzpwyuAeyCC67mUQ.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 03:02:05 +0000
Manifest this update: Sat 23 Aug 2025 03:02:05 +0000
Manifest next update: Sun 24 Aug 2025 03:02:05 +0000
Files and hashes: 1: Uy9WOwPWbRCpTH3lj7ESDUuv-LI.roa (hash: 1fij03uU2Ynnat5tn8++7hQPOH2AmJ+7FEvkLIb0i0I=)
2: v1vcQQat3onhzpwyuAeyCC67mUQ.crl (hash: Dg10kRQyThiS+7rb4bnx0dZlZpiPsYjtTDF/0ytkl9U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/2d1a0a-71cc-4f57-aa63-bedac10aacdc/1/v1vcQQat3onhzpwyuAeyCC67mUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/2d1a0a-71cc-4f57-aa63-bedac10aacdc/1/v1vcQQat3onhzpwyuAeyCC67mUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/v1vcQQat3onhzpwyuAeyCC67mUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:4b:60:ae:72:38:01:22:fb:3a:4d:41:bb:14:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf5bdc4106adde89e1ce9c32b807b2082ebb9944
Validity
Not Before: Aug 23 03:02:05 2025 GMT
Not After : Aug 24 03:02:05 2025 GMT
Subject: CN=08adbd861b1e875dfc21bed17332ed371bb06ae7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:bb:dc:9e:86:4d:13:75:48:6d:6a:44:b8:60:
eb:b1:8b:5d:0b:cb:c4:da:70:72:e8:83:8b:bc:9a:
ed:f6:89:18:86:6d:52:7c:c7:19:6c:e7:f5:9c:83:
55:47:ab:e6:62:b4:ae:10:bf:ad:27:f9:1b:9c:e2:
55:e8:cc:46:d0:8b:5d:1e:8a:24:16:33:3b:f1:31:
fe:28:77:e3:e2:8b:b1:74:0f:4a:ef:f8:09:5c:ce:
e2:a3:08:3d:58:f7:fe:48:79:73:e0:c2:ce:8f:3e:
a3:2e:94:d4:79:83:fc:22:72:14:11:67:a7:4f:67:
f5:b6:f6:84:04:ad:5c:36:9b:a8:3d:d1:01:e9:b8:
bf:e9:b7:8b:da:35:5d:38:13:b5:f3:76:9b:c0:f8:
3f:17:0e:4e:03:92:34:c7:a9:c4:45:84:f2:35:e7:
91:05:e7:df:fe:65:78:49:80:3f:33:29:91:54:1e:
83:b7:b8:b2:c4:64:fc:b5:da:2f:72:13:76:8c:f3:
30:e3:35:2a:b6:39:11:50:68:2e:53:52:1b:c2:fd:
2b:4b:9e:62:6e:ca:83:c9:49:fe:98:ef:3a:69:24:
da:05:ed:2d:b2:48:72:1b:95:5f:5f:ac:31:a0:52:
9f:70:e9:6f:27:b2:76:fd:b7:aa:b4:f1:42:21:c9:
a9:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:AD:BD:86:1B:1E:87:5D:FC:21:BE:D1:73:32:ED:37:1B:B0:6A:E7
X509v3 Authority Key Identifier:
keyid:BF:5B:DC:41:06:AD:DE:89:E1:CE:9C:32:B8:07:B2:08:2E:BB:99:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v1vcQQat3onhzpwyuAeyCC67mUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/2d1a0a-71cc-4f57-aa63-bedac10aacdc/1/v1vcQQat3onhzpwyuAeyCC67mUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/2d1a0a-71cc-4f57-aa63-bedac10aacdc/1/v1vcQQat3onhzpwyuAeyCC67mUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:71:ed:ea:f6:e7:ee:73:3c:f9:fa:d4:ea:7c:1e:2c:16:64:
df:38:d8:69:a9:f0:64:f5:34:2f:db:67:1e:3d:b8:4e:47:ca:
13:15:66:51:47:f1:c1:9a:e2:6c:b7:16:76:ed:c1:f3:9a:98:
f8:b2:67:7c:2c:ec:6a:fd:4e:9b:26:e5:75:c1:5b:1f:74:90:
3a:5f:65:ef:d5:58:fe:9d:dc:5b:c7:2c:cb:80:3c:19:d1:22:
1a:58:08:63:f0:91:bb:f8:4e:76:bb:96:96:62:f0:17:38:e1:
db:e4:20:af:56:46:f2:a6:0d:a2:21:46:39:ac:06:6f:8e:45:
d0:2a:6e:03:d8:b5:67:58:5c:2a:d9:48:62:73:c7:2a:2f:4d:
57:b4:d4:68:c1:b3:9a:43:6f:d5:4c:c8:47:ca:2d:9a:4e:52:
72:28:ba:2a:bd:d9:73:d6:cd:37:11:fc:28:00:cc:2e:e3:6b:
2c:88:f8:a3:fc:37:fb:e8:78:fa:f4:3e:45:8d:73:d6:88:04:
ce:92:bf:e3:df:2d:63:5e:a7:2f:3f:5a:74:55:a8:ec:97:54:
a5:72:a1:80:31:ab:b4:48:91:75:9c:cf:c4:49:84:36:bf:2d:
70:f0:e9:60:f7:9d:05:e6:67:b3:2f:0a:47:a2:9f:0d:a8:68:
bf:d2:5b:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:31:21 2025 by rpki-client