Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/8a734a-d2b8-411e-a557-50d6ba6aacb8/1/Vg0eibTnQuaQYqldNR3uqWtRePs.mft
File: Vg0eibTnQuaQYqldNR3uqWtRePs.mft (raw, json)
Hash identifier: YmT013YcqWFQ6beyrRBu2opcb7nDBj0i0iicZf7MR+I=
Subject key identifier: BD:25:B2:4F:2D:81:9E:E8:CE:95:81:5E:53:B3:5C:E0:8A:2E:1D:C5
Authority key identifier: 56:0D:1E:89:B4:E7:42:E6:90:62:A9:5D:35:1D:EE:A9:6B:51:78:FB
Certificate issuer: /CN=560d1e89b4e742e69062a95d351deea96b5178fb
Certificate serial: 0198D4736FE0FE00F95022DD15B3C96C2358
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vg0eibTnQuaQYqldNR3uqWtRePs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/8a734a-d2b8-411e-a557-50d6ba6aacb8/1/Vg0eibTnQuaQYqldNR3uqWtRePs.mft
Manifest number: 03B2
Signing time: Sat 23 Aug 2025 01:03:11 +0000
Manifest this update: Sat 23 Aug 2025 01:03:11 +0000
Manifest next update: Sun 24 Aug 2025 01:03:11 +0000
Files and hashes: 1: Vg0eibTnQuaQYqldNR3uqWtRePs.crl (hash: Qe4kABalP78wPPK8VUu/Yze93d5u+ca3y9eEVvclm4I=)
2: xe_FlpDuD-n9_M4USiSXk6Ycnbw.roa (hash: yJ1Pd1TWtovjk0/IapFR+YDI373SvMNyYMwVt0mGMMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/8a734a-d2b8-411e-a557-50d6ba6aacb8/1/Vg0eibTnQuaQYqldNR3uqWtRePs.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/8a734a-d2b8-411e-a557-50d6ba6aacb8/1/Vg0eibTnQuaQYqldNR3uqWtRePs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vg0eibTnQuaQYqldNR3uqWtRePs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:6f:e0:fe:00:f9:50:22:dd:15:b3:c9:6c:23:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=560d1e89b4e742e69062a95d351deea96b5178fb
Validity
Not Before: Aug 23 01:03:11 2025 GMT
Not After : Aug 24 01:03:11 2025 GMT
Subject: CN=bd25b24f2d819ee8ce95815e53b35ce08a2e1dc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:de:78:61:73:38:3b:d7:1b:95:90:5a:c4:cf:
ab:6a:ae:5a:a0:2e:9d:b7:55:c9:8d:d0:11:63:93:
c8:a0:f4:25:80:cf:14:f5:07:d6:18:a9:6e:d2:4d:
e0:8f:ea:de:64:90:49:bb:50:0f:47:97:57:10:2f:
0b:36:f6:bd:24:6b:12:b5:0a:19:a7:b4:47:bb:e6:
24:39:27:3c:51:b0:3c:be:f9:56:bf:41:15:38:bc:
94:5d:64:5e:c0:92:ac:e3:97:be:2d:d4:f5:11:0e:
93:6c:5e:17:9f:0a:c4:18:0b:db:3a:08:ba:5d:69:
40:da:f7:f1:ba:a7:ef:19:28:7a:f6:52:84:62:7d:
b1:4d:14:a1:f9:dc:60:8b:59:9b:89:8c:bf:f3:60:
a0:a2:26:7a:99:5e:47:9d:02:cf:27:f1:3c:59:61:
df:b3:2d:ec:ad:dc:28:a5:2f:89:0d:21:30:03:9e:
82:3d:6a:d8:b0:f9:92:91:79:94:11:5b:7a:29:b4:
55:8c:fa:95:d8:8c:e5:0b:72:6c:ed:89:3b:dc:a4:
0f:07:c8:a9:36:2e:79:e2:d0:07:6b:ee:5b:f6:40:
47:c6:48:bd:d7:1c:e3:e3:12:c1:df:82:1b:17:f1:
1d:f1:4b:65:56:df:e6:0b:7a:4b:6d:94:e6:61:c0:
60:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:25:B2:4F:2D:81:9E:E8:CE:95:81:5E:53:B3:5C:E0:8A:2E:1D:C5
X509v3 Authority Key Identifier:
keyid:56:0D:1E:89:B4:E7:42:E6:90:62:A9:5D:35:1D:EE:A9:6B:51:78:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vg0eibTnQuaQYqldNR3uqWtRePs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/8a734a-d2b8-411e-a557-50d6ba6aacb8/1/Vg0eibTnQuaQYqldNR3uqWtRePs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/8a734a-d2b8-411e-a557-50d6ba6aacb8/1/Vg0eibTnQuaQYqldNR3uqWtRePs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:3c:95:4d:25:6d:73:9b:da:0b:28:49:2c:f4:e3:72:ac:f9:
fe:a3:70:51:78:13:b7:94:8d:52:d3:98:84:d3:38:e3:3e:82:
dc:82:03:2d:17:06:31:ac:4d:65:47:78:37:73:6f:f6:f4:62:
d5:95:8f:4b:96:90:d4:b9:fd:d5:9d:35:96:48:d7:aa:26:ee:
3d:99:ed:00:4f:71:0b:45:c2:24:fb:ad:94:32:11:60:62:19:
85:07:67:9b:1d:85:d2:00:26:8a:a5:67:3f:5d:02:42:be:57:
46:1f:24:01:36:be:b9:5d:ee:71:cc:97:39:bd:00:bb:e7:6d:
12:70:69:f9:b2:75:72:16:71:d0:c8:59:d0:17:bc:6b:59:e0:
c9:a3:78:72:62:be:ea:f5:ba:71:ff:41:39:af:58:bb:59:44:
6a:a5:cf:31:b9:74:cf:f3:7f:80:db:03:90:01:3e:c0:51:e4:
71:bd:ff:65:62:1a:83:a4:80:8b:42:ec:bc:46:47:f6:ea:1e:
59:21:f9:81:32:04:e8:a8:03:c7:11:83:73:b8:5f:54:18:a7:
9e:74:c4:54:07:46:8f:e9:52:61:1a:5a:80:17:37:e3:81:f0:
b8:c2:e3:49:85:89:59:88:a8:a7:64:58:91:4e:13:d3:c9:7b:
09:64:76:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:27 2025 by rpki-client