Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/a55553-2975-4244-b260-5bdbf6f847f9/1/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.mft
File: vXN0f3i9Mo0K4ciRcbOBqhkBGs4.mft (raw, json)
Hash identifier: 3iYa2aT4lOpiqwkd1uz2EiAd7HZ8oQQDcCT0BMv1rmE=
Subject key identifier: B8:15:9E:9E:D4:83:1D:FB:8F:51:A7:2A:CB:C2:4A:F8:DF:19:4E:5E
Authority key identifier: BD:73:74:7F:78:BD:32:8D:0A:E1:C8:91:71:B3:81:AA:19:01:1A:CE
Certificate issuer: /CN=bd73747f78bd328d0ae1c89171b381aa19011ace
Certificate serial: 0198D9601F35F7561A04C3E2DCAE45DCB4CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/a55553-2975-4244-b260-5bdbf6f847f9/1/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.mft
Manifest number: E0
Signing time: Sun 24 Aug 2025 00:00:11 +0000
Manifest this update: Sun 24 Aug 2025 00:00:11 +0000
Manifest next update: Mon 25 Aug 2025 00:00:11 +0000
Files and hashes: 1: D98Ck1_qKOXalzx0pMS_FarSGM8.roa (hash: u49BF5lQyjsLl1bn3ULD3SUQ9N/pcixaCTatnIvy4v0=)
2: tCV34_eFEm-bBTr3p-Dum9J6ZzA.roa (hash: lJs/8jun541iQ5FmJ+SShA8Wi27D6ss5N6YmTLmASl4=)
3: vXN0f3i9Mo0K4ciRcbOBqhkBGs4.crl (hash: 1C/3m3Dl0/l6NnkIFdANcPbXOb9jdq+8/TNl57pJzJM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/a55553-2975-4244-b260-5bdbf6f847f9/1/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/a55553-2975-4244-b260-5bdbf6f847f9/1/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 17:19:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d9:60:1f:35:f7:56:1a:04:c3:e2:dc:ae:45:dc:b4:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd73747f78bd328d0ae1c89171b381aa19011ace
Validity
Not Before: Aug 24 00:00:11 2025 GMT
Not After : Aug 25 00:00:11 2025 GMT
Subject: CN=b8159e9ed4831dfb8f51a72acbc24af8df194e5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:10:65:f7:d5:ae:20:2f:86:b3:78:82:45:2d:
cf:a0:0b:a4:6b:05:66:59:55:ac:3f:70:ac:e8:a8:
e9:d2:54:8a:2f:90:6f:75:92:65:7f:21:46:b1:d0:
1a:74:64:fa:c6:6a:77:e0:e4:2f:2b:27:0b:1f:fb:
f0:92:9d:a8:7d:c8:fb:09:e0:70:49:1e:9d:33:70:
a5:73:09:59:99:2c:b8:89:c9:bb:36:0f:02:ef:cc:
09:0c:ce:14:99:28:ed:0f:3e:b4:22:3e:d3:bb:a5:
09:4a:10:34:a8:dc:98:03:7c:6b:ee:cf:03:f1:62:
64:74:b4:69:5c:11:10:4c:e2:5a:50:24:22:25:51:
a2:2d:69:cc:aa:ff:db:5f:e0:a8:b7:35:d2:6b:85:
4b:29:03:a1:69:04:b8:27:4b:22:b7:0c:16:7f:d4:
5b:60:2d:b2:fc:27:3d:2b:23:99:bc:19:7b:59:f0:
c3:fa:8b:32:8a:19:e6:58:e3:40:f7:3c:9b:ca:7f:
33:0e:ca:da:31:37:b5:76:fa:77:64:fb:f0:9a:68:
19:2a:c5:a9:e9:cf:bc:fc:72:12:2b:22:83:44:e6:
5e:b2:9b:6f:67:a0:3b:ef:b2:ea:71:2e:5d:d9:3d:
19:c5:14:6d:39:1c:77:79:0c:9f:0c:f3:77:31:a0:
f8:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:15:9E:9E:D4:83:1D:FB:8F:51:A7:2A:CB:C2:4A:F8:DF:19:4E:5E
X509v3 Authority Key Identifier:
keyid:BD:73:74:7F:78:BD:32:8D:0A:E1:C8:91:71:B3:81:AA:19:01:1A:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a55553-2975-4244-b260-5bdbf6f847f9/1/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a55553-2975-4244-b260-5bdbf6f847f9/1/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:f9:e3:3c:17:1f:45:76:fd:d9:60:3b:ac:b3:1e:4d:03:a7:
91:3b:6c:fc:3f:d7:ee:26:77:3a:fe:41:4b:35:be:1b:0c:ad:
70:72:32:7e:bb:fb:29:ac:3b:7e:5f:e4:ec:c0:2f:9f:f5:2b:
d1:83:14:b1:fb:40:62:bf:51:5b:26:41:78:e2:bc:8a:7e:2b:
a5:ec:c8:2d:41:d4:2f:87:8d:83:ba:a9:0e:cd:1e:ba:d6:19:
88:88:94:b3:90:09:ba:82:4d:34:64:18:cf:24:d4:e2:1f:c0:
be:c4:31:f5:33:83:80:91:3a:c1:5b:b9:b1:5a:2c:d9:e6:e4:
76:41:eb:91:01:c3:01:81:fb:5e:4d:9c:e7:cf:5d:81:1c:70:
b2:bc:06:f2:15:d5:eb:fa:1e:7e:d5:ec:b8:cf:55:47:0e:9d:
dd:81:40:9a:f6:ba:92:08:67:a0:7e:de:5f:30:5c:bb:b7:36:
d3:c7:50:2c:43:45:49:a3:81:b6:d0:05:67:5b:07:dd:da:d3:
43:d2:f7:a5:8f:0c:41:8f:ef:56:d2:1d:4f:0e:55:79:b3:5e:
72:05:b7:33:e6:45:23:55:25:67:64:03:8a:50:3c:05:59:2e:
b7:93:e6:a0:45:0b:8a:ab:77:d9:e3:e6:84:a3:c1:f7:ab:ee:
ab:41:ae:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:10:52 2025 by rpki-client