Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/d07e9e-132a-48e2-9538-902aec440464/1/vK-LpZ96PF0A_grUVk2AUk33-pA.mft
File: vK-LpZ96PF0A_grUVk2AUk33-pA.mft (raw, json)
Hash identifier: J3Cyzr/EhlHZiWHlxpwwkTWqvqNzD8BfoN0IKmPiUVc=
Subject key identifier: 0A:07:7E:14:30:91:AD:1C:37:81:98:B0:0E:0B:AC:8E:A5:B8:25:F0
Authority key identifier: BC:AF:8B:A5:9F:7A:3C:5D:00:FE:0A:D4:56:4D:80:52:4D:F7:FA:90
Certificate issuer: /CN=bcaf8ba59f7a3c5d00fe0ad4564d80524df7fa90
Certificate serial: 0198D4A8200ADA3E45EFEB4A210C51867A41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vK-LpZ96PF0A_grUVk2AUk33-pA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/d07e9e-132a-48e2-9538-902aec440464/1/vK-LpZ96PF0A_grUVk2AUk33-pA.mft
Manifest number: 1646
Signing time: Sat 23 Aug 2025 02:00:44 +0000
Manifest this update: Sat 23 Aug 2025 02:00:44 +0000
Manifest next update: Sun 24 Aug 2025 02:00:44 +0000
Files and hashes: 1: A27u4uaTW6Wfn1YJN7sriqWyvlY.roa (hash: eRUT0mnKKp1D1eZhZRZxpjyCM3yHa+jgOt2PMVH/I+o=)
2: vK-LpZ96PF0A_grUVk2AUk33-pA.crl (hash: gwvtsWfqm8l1IPi4j9GZuKJp7OPXEJUtdPfY5JsuvFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/d07e9e-132a-48e2-9538-902aec440464/1/vK-LpZ96PF0A_grUVk2AUk33-pA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/d07e9e-132a-48e2-9538-902aec440464/1/vK-LpZ96PF0A_grUVk2AUk33-pA.mft
rsync://rpki.ripe.net/repository/DEFAULT/vK-LpZ96PF0A_grUVk2AUk33-pA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:20:0a:da:3e:45:ef:eb:4a:21:0c:51:86:7a:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcaf8ba59f7a3c5d00fe0ad4564d80524df7fa90
Validity
Not Before: Aug 23 02:00:44 2025 GMT
Not After : Aug 24 02:00:44 2025 GMT
Subject: CN=0a077e143091ad1c378198b00e0bac8ea5b825f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9c:ea:ec:05:3b:a8:74:12:91:81:02:20:07:
07:e9:c4:2a:16:da:a5:ee:d8:89:6f:bf:70:c0:a3:
8b:b4:1a:50:4d:2f:05:04:af:62:ae:17:82:ba:6f:
4b:5e:8d:76:49:f0:68:53:66:5f:d5:7d:88:4d:63:
0c:da:33:65:1c:07:52:e3:10:7d:97:9d:16:80:76:
e5:56:e2:74:1b:2d:b0:e3:bd:a4:5d:63:25:fa:0c:
25:a6:37:b7:ac:e8:d6:4e:ad:d6:cf:16:fc:0a:0b:
ed:f1:48:a6:21:6c:37:78:66:15:46:61:67:43:42:
7f:2d:5d:66:1d:60:25:5a:7a:95:16:bf:36:8b:70:
37:fc:df:7e:9d:f3:63:0a:23:44:e5:ca:34:9f:11:
f4:b9:8e:48:13:71:af:8c:c6:6e:f5:b9:33:71:bd:
ff:6c:27:d5:6e:32:8d:fa:c1:4f:33:03:60:ca:43:
ca:a6:cb:fb:bc:aa:39:5b:8d:7e:23:f0:bf:d4:bf:
7c:90:96:0b:48:99:c0:67:a0:91:42:48:22:26:aa:
33:07:47:15:f6:92:d1:ea:02:6d:40:ba:d0:26:5d:
dc:f1:e8:d4:ff:80:04:b7:15:f9:3a:9c:3f:0a:52:
e9:28:80:58:96:28:27:da:90:e0:4b:67:92:30:fc:
82:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:07:7E:14:30:91:AD:1C:37:81:98:B0:0E:0B:AC:8E:A5:B8:25:F0
X509v3 Authority Key Identifier:
keyid:BC:AF:8B:A5:9F:7A:3C:5D:00:FE:0A:D4:56:4D:80:52:4D:F7:FA:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vK-LpZ96PF0A_grUVk2AUk33-pA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d07e9e-132a-48e2-9538-902aec440464/1/vK-LpZ96PF0A_grUVk2AUk33-pA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/d07e9e-132a-48e2-9538-902aec440464/1/vK-LpZ96PF0A_grUVk2AUk33-pA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:51:63:16:1e:eb:12:a5:b8:91:28:dc:11:8b:2a:6f:dd:65:
a1:a9:ce:3c:af:9a:f5:b9:ec:27:71:32:14:e3:9a:8e:7b:17:
2e:3d:c4:98:f5:7a:55:09:b6:a2:a6:20:da:03:1d:a4:06:21:
31:11:2a:6c:23:f1:f8:43:dd:bc:5d:9e:e8:38:54:a0:5e:b2:
f2:76:22:7c:2a:c7:09:91:a0:6c:aa:96:90:3e:22:6b:ee:b2:
c9:c9:1a:f2:06:ee:d4:b8:84:ae:2d:a8:52:b5:04:f1:16:b1:
66:eb:76:13:54:ed:f9:99:bf:e3:2a:3b:c7:4f:e4:e6:e5:9a:
2b:46:12:26:2f:f0:e3:64:4a:15:95:ca:b9:d5:5d:9b:9f:7b:
61:07:77:56:67:a1:23:31:67:92:3f:69:f9:81:e5:0f:00:bf:
f2:2e:4a:cd:3b:d9:8d:80:b9:53:75:c0:55:ed:7b:60:f9:13:
c8:45:73:b1:8c:36:4d:4c:6f:57:83:d6:6a:80:74:ff:4c:e9:
2a:97:ad:5b:5e:5f:6d:0e:5f:1f:ef:14:75:b1:4d:72:72:cc:
e9:d3:ad:db:a6:c2:ac:2c:2a:3c:bc:be:cb:ad:81:9e:42:2b:
89:1d:59:c8:54:b3:b8:5b:5a:5e:45:84:c6:77:92:71:b3:7e:
78:9a:14:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:36:27 2025 by rpki-client