Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/044350-8cc9-486d-87c9-572c4e129d32/1/vJldFVAngKzfe25qGGXttaDn3Es.mft
File: vJldFVAngKzfe25qGGXttaDn3Es.mft (raw, json)
Hash identifier: +9/SOCW3i5jwjyLjS8Blyfin65Ah0XM3h9CPq9jkO94=
Subject key identifier: 13:DE:1D:11:32:02:C3:90:5A:58:C8:EE:C5:68:9D:EB:A8:F6:60:AB
Authority key identifier: BC:99:5D:15:50:27:80:AC:DF:7B:6E:6A:18:65:ED:B5:A0:E7:DC:4B
Certificate issuer: /CN=bc995d15502780acdf7b6e6a1865edb5a0e7dc4b
Certificate serial: 0198D6CE069CE91E30C0B2AE3D9F932432D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJldFVAngKzfe25qGGXttaDn3Es.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/044350-8cc9-486d-87c9-572c4e129d32/1/vJldFVAngKzfe25qGGXttaDn3Es.mft
Manifest number: 03FF
Signing time: Sat 23 Aug 2025 12:01:22 +0000
Manifest this update: Sat 23 Aug 2025 12:01:22 +0000
Manifest next update: Sun 24 Aug 2025 12:01:22 +0000
Files and hashes: 1: vJldFVAngKzfe25qGGXttaDn3Es.crl (hash: gltxaJiwQrx8fO8Ky1dnIE8LmBPoU5Q/BzLfiyGMCRs=)
2: ylPOOnSs52DARSEahPLXBl4_KnA.roa (hash: lVDEfOqJ+hS5o1tAWzlyu4ZG8E1RuFvF7CBIziXEhTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/044350-8cc9-486d-87c9-572c4e129d32/1/vJldFVAngKzfe25qGGXttaDn3Es.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/044350-8cc9-486d-87c9-572c4e129d32/1/vJldFVAngKzfe25qGGXttaDn3Es.mft
rsync://rpki.ripe.net/repository/DEFAULT/vJldFVAngKzfe25qGGXttaDn3Es.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:ce:06:9c:e9:1e:30:c0:b2:ae:3d:9f:93:24:32:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc995d15502780acdf7b6e6a1865edb5a0e7dc4b
Validity
Not Before: Aug 23 12:01:22 2025 GMT
Not After : Aug 24 12:01:22 2025 GMT
Subject: CN=13de1d113202c3905a58c8eec5689deba8f660ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:16:6b:e5:10:15:a0:b4:3d:bd:50:94:97:d8:
73:a0:f1:c6:76:fb:bf:7a:c1:51:13:b6:a3:f3:36:
81:29:3d:59:03:f0:11:be:ed:11:98:3d:8f:f4:6e:
98:7c:a1:24:ec:8a:27:c4:26:53:1f:09:9d:ea:3b:
c5:a3:33:6f:6b:30:be:8e:81:6e:67:5f:d1:50:3f:
9f:82:74:19:99:77:94:8a:77:1c:ba:cb:81:c6:db:
cd:ac:18:ac:3f:25:9b:da:a1:3f:74:2c:04:db:37:
6c:44:36:7a:6a:f7:12:77:92:83:8f:39:2a:4b:45:
75:71:e1:43:66:66:0e:42:8d:b7:d0:7a:1e:f7:2d:
32:2d:64:f0:92:48:bf:23:1b:5c:04:42:c5:2e:8f:
ca:c0:49:e5:9b:42:47:07:7e:4c:17:54:e2:58:58:
a0:23:b9:c4:a0:77:b0:76:a0:03:f9:22:c2:aa:26:
33:32:1f:e8:9b:76:d5:39:e9:9a:87:aa:d0:4e:fa:
10:cd:53:e6:07:e6:7d:fe:9d:cf:1e:fa:5b:38:64:
7e:5e:40:1a:9c:ec:77:cf:b0:2b:8e:f2:ed:e2:cf:
98:e0:fa:a0:ca:ad:b0:b9:e3:e9:43:a8:b9:d0:24:
8b:17:b7:2c:91:be:03:9a:2c:c0:dd:1c:83:5b:31:
20:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:DE:1D:11:32:02:C3:90:5A:58:C8:EE:C5:68:9D:EB:A8:F6:60:AB
X509v3 Authority Key Identifier:
keyid:BC:99:5D:15:50:27:80:AC:DF:7B:6E:6A:18:65:ED:B5:A0:E7:DC:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJldFVAngKzfe25qGGXttaDn3Es.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/044350-8cc9-486d-87c9-572c4e129d32/1/vJldFVAngKzfe25qGGXttaDn3Es.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/044350-8cc9-486d-87c9-572c4e129d32/1/vJldFVAngKzfe25qGGXttaDn3Es.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:d2:19:ea:12:e3:a2:e6:aa:f3:63:fa:59:9f:87:b1:a6:af:
a8:84:b7:20:7b:4d:98:5a:3d:56:be:c7:66:cb:d5:c9:59:f1:
74:b7:90:c1:05:80:0b:df:62:9b:63:53:a3:71:22:36:0c:75:
90:2b:df:9c:56:68:34:a8:33:e0:3b:73:b9:6d:2e:40:24:1c:
5f:cc:bd:83:fa:32:72:f6:4c:55:b4:1b:b3:50:12:f6:98:87:
32:1f:e3:bb:ce:50:f3:c0:45:c6:9b:94:d0:c3:74:a0:14:88:
4a:51:73:20:d9:66:26:43:b5:a5:34:44:bb:56:74:fb:fc:56:
ec:55:85:7e:03:ed:08:8c:49:65:a6:ae:9d:43:49:1e:1b:c5:
ca:41:67:7d:b1:75:44:3b:be:6d:78:ce:bc:5b:ad:c8:d7:f4:
c2:8d:63:01:c5:70:6b:14:83:46:e9:99:1b:f9:19:4b:be:5b:
5c:c7:74:74:aa:0f:85:c1:39:cb:b0:54:13:0c:10:5e:8c:d3:
22:03:db:58:e6:06:44:21:d6:d8:ef:b1:c2:5f:0c:a2:0e:9f:
72:3e:6c:d2:23:34:f3:4a:63:00:c5:fd:cc:99:90:fd:08:b9:
5e:9d:99:3f:27:6b:2d:6d:5d:74:31:ed:5d:80:db:19:33:89:
fe:79:41:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:51:06 2025 by rpki-client