Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/ffc204-d4d2-4a67-85af-f9a33ff011cb/1/vvZlBYLADbslkc7cKYwM08WWirA.mft
File: vvZlBYLADbslkc7cKYwM08WWirA.mft (raw, json)
Hash identifier: NCOfka/gYXJvJEYbhtnutdKLiSPAxxvy23oPobkjPhw=
Subject key identifier: 1B:8B:29:6E:4A:48:87:61:3C:F0:80:1F:6C:17:C1:68:03:4E:1E:77
Authority key identifier: BE:F6:65:05:82:C0:0D:BB:25:91:CE:DC:29:8C:0C:D3:C5:96:8A:B0
Certificate issuer: /CN=bef6650582c00dbb2591cedc298c0cd3c5968ab0
Certificate serial: 0198D4A7AFFC5280DC979E5D22B3F452A8DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vvZlBYLADbslkc7cKYwM08WWirA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/ffc204-d4d2-4a67-85af-f9a33ff011cb/1/vvZlBYLADbslkc7cKYwM08WWirA.mft
Manifest number: 151C
Signing time: Sat 23 Aug 2025 02:00:16 +0000
Manifest this update: Sat 23 Aug 2025 02:00:16 +0000
Manifest next update: Sun 24 Aug 2025 02:00:16 +0000
Files and hashes: 1: VJcY17IQh2BSqR-lhhdapfFR2Jg.roa (hash: 42V4cyYK1j/bnIgnYxXURiJulSqpvLBcVAwt2BGPORo=)
2: vvZlBYLADbslkc7cKYwM08WWirA.crl (hash: lMPCYBBFkfzE52Vfn40nHhJdVDGEJje7AYgLmvJgsmE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/ffc204-d4d2-4a67-85af-f9a33ff011cb/1/vvZlBYLADbslkc7cKYwM08WWirA.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/ffc204-d4d2-4a67-85af-f9a33ff011cb/1/vvZlBYLADbslkc7cKYwM08WWirA.mft
rsync://rpki.ripe.net/repository/DEFAULT/vvZlBYLADbslkc7cKYwM08WWirA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:af:fc:52:80:dc:97:9e:5d:22:b3:f4:52:a8:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bef6650582c00dbb2591cedc298c0cd3c5968ab0
Validity
Not Before: Aug 23 02:00:16 2025 GMT
Not After : Aug 24 02:00:16 2025 GMT
Subject: CN=1b8b296e4a4887613cf0801f6c17c168034e1e77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ca:7a:9d:b1:32:b9:e8:4b:3e:16:3c:a5:a7:
5a:f4:49:0f:ad:86:fe:72:e5:f1:10:a8:c6:de:77:
ed:e0:8f:6c:9c:7f:d8:4f:35:7d:9a:00:37:fa:40:
e5:6b:61:fe:b3:4b:fb:77:9d:9a:d4:28:b9:46:cd:
c8:2a:04:3b:15:5d:78:7d:95:a2:c1:0c:c1:69:f5:
e0:0a:da:db:d7:8e:d0:f7:9d:4f:2a:6a:c8:b4:17:
32:8b:9a:85:22:11:21:33:ac:47:33:5b:17:c1:e0:
53:3e:fc:0f:09:ad:13:8c:37:86:d5:5b:b2:b7:90:
3d:77:f2:30:31:db:b6:c4:fe:87:c0:6c:54:9e:1a:
57:f9:69:98:a6:9a:56:c7:ab:c1:e4:da:ec:0d:94:
57:23:99:47:d4:41:45:4f:57:93:1c:f1:b6:b1:37:
2b:26:0d:6a:f9:15:79:9a:61:4f:eb:60:85:04:be:
1a:da:1d:d8:f0:f5:2d:74:a5:a9:b9:26:8e:bc:17:
e7:da:42:47:08:9b:18:64:d0:ab:4a:6c:5c:f5:92:
9a:a5:28:d0:6d:63:04:5f:80:23:b0:19:74:e4:53:
09:00:26:7a:64:8e:0d:f3:f7:5c:5f:3e:29:33:be:
ac:d6:01:dc:48:b3:f9:fd:3b:53:27:d3:48:70:3d:
c1:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:8B:29:6E:4A:48:87:61:3C:F0:80:1F:6C:17:C1:68:03:4E:1E:77
X509v3 Authority Key Identifier:
keyid:BE:F6:65:05:82:C0:0D:BB:25:91:CE:DC:29:8C:0C:D3:C5:96:8A:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vvZlBYLADbslkc7cKYwM08WWirA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/ffc204-d4d2-4a67-85af-f9a33ff011cb/1/vvZlBYLADbslkc7cKYwM08WWirA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/ffc204-d4d2-4a67-85af-f9a33ff011cb/1/vvZlBYLADbslkc7cKYwM08WWirA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:8a:8c:04:e6:b3:eb:dc:b5:43:af:1e:b8:01:b3:21:07:43:
09:11:86:8c:99:41:17:9f:ad:1f:2c:1e:d1:3d:30:5f:81:52:
a3:9c:fe:96:33:59:ac:8f:6c:1b:88:17:99:be:cf:c7:23:33:
0b:ec:d2:49:80:22:05:aa:64:c3:af:b6:7e:40:63:09:53:2e:
9a:03:9d:d8:f5:5d:6b:92:da:d0:ab:8c:55:2b:d0:bc:2e:b4:
a7:80:7d:3f:8c:25:26:b3:0f:80:70:97:44:8a:ae:2e:30:a3:
e0:c1:cd:84:c1:fa:ac:16:6f:ea:7b:ee:a1:89:f5:47:aa:ef:
9e:0b:a8:88:af:92:fc:eb:8e:33:1d:19:b3:34:06:4c:12:0c:
8a:89:cc:1d:d9:ae:bd:3d:91:0a:b2:f0:1c:df:d6:4d:d4:dc:
d7:d1:06:35:08:08:43:4a:19:ab:73:04:88:aa:36:9f:bc:c3:
9c:1a:81:3c:55:2d:51:0d:37:99:2f:47:c6:76:76:ed:62:e1:
12:01:9a:aa:6a:8d:6b:ec:e2:eb:66:4a:78:d7:80:b8:bc:8d:
34:f1:a9:c3:6c:c7:92:eb:56:f8:f2:49:d6:df:ad:a2:45:69:
77:60:26:85:75:5b:3f:02:57:00:71:28:72:5f:87:c2:53:ce:
ac:7d:a3:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:29:24 2025 by rpki-client