Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/8454c6-31c6-4f8b-91d4-267ba172d46d/1/vKOYyNMoLIjZ09AComTkKOa67DY.mft
File: vKOYyNMoLIjZ09AComTkKOa67DY.mft (raw, json)
Hash identifier: qkXE0PLjmBApipWl5vTwA9eCUXFDKQOE/DuQPH7c3Eo=
Subject key identifier: AE:58:DB:4A:D9:46:44:EB:DD:32:59:3E:EA:EA:C4:F1:48:C2:ED:C3
Authority key identifier: BC:A3:98:C8:D3:28:2C:88:D9:D3:D0:02:A2:64:E4:28:E6:BA:EC:36
Certificate issuer: /CN=bca398c8d3282c88d9d3d002a264e428e6baec36
Certificate serial: 0198D65F2D2B4C8C5DB3D0860EC03DC88050
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vKOYyNMoLIjZ09AComTkKOa67DY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/8454c6-31c6-4f8b-91d4-267ba172d46d/1/vKOYyNMoLIjZ09AComTkKOa67DY.mft
Manifest number: 0891
Signing time: Sat 23 Aug 2025 10:00:18 +0000
Manifest this update: Sat 23 Aug 2025 10:00:18 +0000
Manifest next update: Sun 24 Aug 2025 10:00:18 +0000
Files and hashes: 1: vKOYyNMoLIjZ09AComTkKOa67DY.crl (hash: UIPz27V83yUNgbU2B0K6nEI3hu4LBdI0Q3NWjD6GUrM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/8454c6-31c6-4f8b-91d4-267ba172d46d/1/vKOYyNMoLIjZ09AComTkKOa67DY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/8454c6-31c6-4f8b-91d4-267ba172d46d/1/vKOYyNMoLIjZ09AComTkKOa67DY.mft
rsync://rpki.ripe.net/repository/DEFAULT/vKOYyNMoLIjZ09AComTkKOa67DY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:2d:2b:4c:8c:5d:b3:d0:86:0e:c0:3d:c8:80:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bca398c8d3282c88d9d3d002a264e428e6baec36
Validity
Not Before: Aug 23 10:00:18 2025 GMT
Not After : Aug 24 10:00:18 2025 GMT
Subject: CN=ae58db4ad94644ebdd32593eeaeac4f148c2edc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:b6:fe:e4:9d:10:47:7d:53:b4:69:d9:91:3e:
ff:b9:2f:e7:65:3b:35:1f:b5:40:19:d7:2b:62:b6:
34:5a:30:b8:42:c9:5f:35:82:e7:b5:93:18:d8:10:
95:6b:6b:46:2b:c4:43:67:22:db:92:2b:2e:0d:d2:
a7:cd:3f:b7:fa:ac:5a:8b:9d:a1:e1:01:98:c4:ff:
27:3b:a7:8f:e2:cd:2e:5e:97:88:72:16:78:a0:9c:
e3:46:b8:7e:73:c7:d9:aa:b7:b6:bb:26:0e:e1:7b:
d7:03:a1:1a:f1:66:68:53:74:27:81:e1:1a:5a:3e:
e5:1c:24:f9:0f:6c:5e:f3:90:69:fb:70:80:ff:87:
c2:c1:61:0c:6b:97:31:80:54:d6:ac:1b:0b:ec:4f:
da:d1:a1:b9:14:4e:ed:9a:e2:d0:fc:ba:9c:1c:94:
37:d1:dc:1f:8a:8b:66:3d:1e:d3:0a:ea:9a:94:d9:
8a:4f:84:4b:7b:5a:73:fb:87:a5:17:a0:db:d3:c0:
af:90:9d:49:6e:db:ed:e5:74:d9:69:61:96:89:9e:
f0:5f:79:36:63:66:c0:ac:fb:41:00:13:5a:f9:e7:
c4:5f:04:ad:4b:02:8c:c4:4f:72:54:82:66:dc:18:
69:9d:1b:32:2f:06:27:f4:1d:c8:50:ce:70:04:cf:
c5:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:58:DB:4A:D9:46:44:EB:DD:32:59:3E:EA:EA:C4:F1:48:C2:ED:C3
X509v3 Authority Key Identifier:
keyid:BC:A3:98:C8:D3:28:2C:88:D9:D3:D0:02:A2:64:E4:28:E6:BA:EC:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vKOYyNMoLIjZ09AComTkKOa67DY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/8454c6-31c6-4f8b-91d4-267ba172d46d/1/vKOYyNMoLIjZ09AComTkKOa67DY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/8454c6-31c6-4f8b-91d4-267ba172d46d/1/vKOYyNMoLIjZ09AComTkKOa67DY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:14:ea:51:bb:c1:49:99:de:d9:de:6d:91:e9:e1:08:cd:0b:
94:ff:e0:49:0c:1c:70:6a:5c:7b:5d:52:f6:a7:a6:72:2b:cd:
88:ee:05:4a:1b:3f:cc:83:78:cb:dc:b9:b1:9f:58:98:b5:40:
d7:b4:4e:62:1e:28:fe:ae:29:18:a9:b3:1b:6a:f7:19:93:21:
2b:67:75:a0:5b:08:89:98:61:12:88:92:c6:63:7e:26:34:ac:
87:b6:b5:83:84:7f:56:6c:ba:0d:3a:55:8f:02:3a:8e:70:d4:
c4:45:d7:87:28:2d:ad:eb:3f:93:85:42:63:0e:61:f5:8c:69:
41:2b:d0:bc:71:30:01:56:ed:44:d4:23:29:a6:54:e1:d0:25:
e5:f5:a2:3d:ed:69:9f:23:4a:fb:12:9b:82:66:6e:d7:f3:3b:
f9:3d:eb:48:8f:09:7a:03:90:9d:1b:92:e2:9f:bf:44:b8:c8:
3c:82:82:d0:be:88:ef:f8:88:ed:25:31:99:d2:0b:87:a6:66:
16:6a:55:b4:a1:7c:11:f8:0e:d1:16:9a:75:c2:a0:2a:16:0c:
57:cc:80:41:26:73:4e:24:11:af:4a:da:d5:92:6a:f0:69:e5:
87:b5:36:e9:9d:f8:9c:dc:07:d3:5c:79:db:e8:9a:81:1f:be:
d0:a5:cf:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:10:44 2025 by rpki-client