Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/76dba0-d86b-4d84-b15a-4d6d1256bf9b/1/vlJx8OFYfBRDTySA-RQQGFUHz6E.mft
File: vlJx8OFYfBRDTySA-RQQGFUHz6E.mft (raw, json)
Hash identifier: 0EkfEyOOkjCJtgddHWj5DmQQhv7mnYtn+3HuD15rZPA=
Subject key identifier: E6:30:88:2E:72:0C:AB:1D:59:6E:EE:DC:99:12:52:33:F0:35:47:32
Authority key identifier: BE:52:71:F0:E1:58:7C:14:43:4F:24:80:F9:14:10:18:55:07:CF:A1
Certificate issuer: /CN=be5271f0e1587c14434f2480f91410185507cfa1
Certificate serial: 0198D5F196853F4B300A62689A850A8C8291
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vlJx8OFYfBRDTySA-RQQGFUHz6E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/76dba0-d86b-4d84-b15a-4d6d1256bf9b/1/vlJx8OFYfBRDTySA-RQQGFUHz6E.mft
Manifest number: 15DA
Signing time: Sat 23 Aug 2025 08:00:36 +0000
Manifest this update: Sat 23 Aug 2025 08:00:36 +0000
Manifest next update: Sun 24 Aug 2025 08:00:36 +0000
Files and hashes: 1: bxyMDkypoYoPE36odgLUanwOaLY.roa (hash: /Tdt2l601ImlNiIyf1pfayzYn4s0xCETamIww0AgaGc=)
2: vlJx8OFYfBRDTySA-RQQGFUHz6E.crl (hash: W/rLNJeSVs3Qgs7g3AEnIH7wrcSuAhehfby2VNyMvc8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/76dba0-d86b-4d84-b15a-4d6d1256bf9b/1/vlJx8OFYfBRDTySA-RQQGFUHz6E.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/76dba0-d86b-4d84-b15a-4d6d1256bf9b/1/vlJx8OFYfBRDTySA-RQQGFUHz6E.mft
rsync://rpki.ripe.net/repository/DEFAULT/vlJx8OFYfBRDTySA-RQQGFUHz6E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:96:85:3f:4b:30:0a:62:68:9a:85:0a:8c:82:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5271f0e1587c14434f2480f91410185507cfa1
Validity
Not Before: Aug 23 08:00:36 2025 GMT
Not After : Aug 24 08:00:36 2025 GMT
Subject: CN=e630882e720cab1d596eeedc99125233f0354732
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:aa:12:f9:a5:1c:06:1f:cf:26:76:ad:c7:6b:
6a:ca:f1:35:e6:f0:03:b1:46:69:e1:c4:ee:cd:bc:
f1:7e:ef:8b:d4:e6:f9:a2:38:ee:2b:d9:5f:23:32:
ee:08:5b:ef:24:bb:0c:46:c7:72:01:6f:9f:b0:80:
ec:73:bb:59:23:06:81:a0:40:31:00:3a:df:59:6d:
2d:57:3d:88:b0:cb:ba:5d:61:21:c3:62:90:a8:ed:
65:be:83:6c:f1:0b:e7:36:c4:07:6f:2a:cc:4c:4a:
c1:86:c6:e5:a8:ed:9a:6c:13:9b:27:a1:0a:c1:f5:
9f:cc:0c:0f:ad:18:44:b5:8a:e8:dc:fc:13:5c:88:
6e:41:67:6a:1f:e7:54:e6:6f:1f:37:cd:c0:39:19:
26:dd:12:47:ef:4e:ff:16:ab:ce:e9:d4:70:67:f3:
ef:26:b5:7c:8f:d6:52:fe:3f:6a:2a:dc:96:4b:6f:
12:8e:02:ed:77:ec:f6:1a:c9:5e:e1:7d:9e:de:2d:
3e:64:7a:03:a7:20:be:72:d1:ff:39:27:f1:dd:80:
f8:9b:d9:5c:37:a7:af:dd:83:72:c5:ef:f5:ef:13:
5c:01:d5:a1:24:8e:6c:93:e5:2a:45:a5:c4:5a:71:
76:42:16:18:2b:ea:e0:f3:4c:b0:77:04:34:34:2a:
e2:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:30:88:2E:72:0C:AB:1D:59:6E:EE:DC:99:12:52:33:F0:35:47:32
X509v3 Authority Key Identifier:
keyid:BE:52:71:F0:E1:58:7C:14:43:4F:24:80:F9:14:10:18:55:07:CF:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vlJx8OFYfBRDTySA-RQQGFUHz6E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/76dba0-d86b-4d84-b15a-4d6d1256bf9b/1/vlJx8OFYfBRDTySA-RQQGFUHz6E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/76dba0-d86b-4d84-b15a-4d6d1256bf9b/1/vlJx8OFYfBRDTySA-RQQGFUHz6E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:02:e0:6f:8c:66:0d:17:8e:8f:34:52:c3:e3:90:14:07:7c:
f9:41:c7:6c:35:18:26:92:3c:7e:05:2e:f9:64:59:d9:5e:e4:
9f:64:ac:a9:5d:fa:54:3d:49:80:db:b9:8e:69:0f:b3:8e:90:
68:bf:37:9f:fc:9c:f2:3d:84:a1:28:32:41:6a:e2:82:10:72:
b2:5b:f2:96:b4:b0:ac:be:91:f0:76:1f:0b:e9:a6:1c:0d:7a:
7e:00:d6:4c:bf:48:e3:9f:f9:d6:d8:68:14:0a:c1:f9:01:19:
5e:0e:b0:6e:a3:71:90:71:b8:2e:19:e5:09:22:b0:26:36:b6:
72:90:c0:de:26:48:12:5b:40:77:3f:15:2e:8e:a6:fb:e0:a0:
58:32:64:11:23:d8:b9:fc:c2:c6:95:ee:ed:1b:dc:2f:70:7f:
c7:51:53:79:d3:f0:9b:1d:c2:65:66:93:3d:f2:25:62:56:25:
eb:d5:28:ee:21:6d:98:fc:4c:27:d0:27:50:bf:dd:6b:2f:ef:
3d:50:00:83:85:aa:cf:d4:cd:aa:fe:58:b4:b7:e7:6b:4f:2e:
45:65:eb:00:e9:6e:22:80:0a:24:d7:b2:9c:6e:7a:64:47:32:
6c:42:cb:c0:4c:03:f0:9e:62:06:8b:76:b0:72:7a:f1:9d:ec:
25:03:9c:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:12:28 2025 by rpki-client