Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/fb8edb-e304-4714-952e-c66bea1f1aa2/1/vP76Crl0AEjYO0idnKTgKOD1z-8.mft
File: vP76Crl0AEjYO0idnKTgKOD1z-8.mft (raw, json)
Hash identifier: 0skV/52aEGLeY4mN3iEeUtRoHX5tG0MHlyoLa68LrMo=
Subject key identifier: 8F:02:8E:61:4B:62:80:4A:A7:9E:06:C3:CA:35:9F:4E:55:E0:25:61
Authority key identifier: BC:FE:FA:0A:B9:74:00:48:D8:3B:48:9D:9C:A4:E0:28:E0:F5:CF:EF
Certificate issuer: /CN=bcfefa0ab9740048d83b489d9ca4e028e0f5cfef
Certificate serial: 0198D4A807287AF86FA6C3E9556CEBA4D734
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP76Crl0AEjYO0idnKTgKOD1z-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/fb8edb-e304-4714-952e-c66bea1f1aa2/1/vP76Crl0AEjYO0idnKTgKOD1z-8.mft
Manifest number: 11A6
Signing time: Sat 23 Aug 2025 02:00:38 +0000
Manifest this update: Sat 23 Aug 2025 02:00:38 +0000
Manifest next update: Sun 24 Aug 2025 02:00:38 +0000
Files and hashes: 1: 2TuJ468zw177jpyYFJB20BZ9Xpw.roa (hash: 3VZS4XpdpT/Xy05QO4Zu5eaSIrPsPgN7ySrg2oUytz0=)
2: vP76Crl0AEjYO0idnKTgKOD1z-8.crl (hash: 51BmwZKoqWE4o6Phmh/81L04h8sl7ThQqZU1y2/dVwo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/fb8edb-e304-4714-952e-c66bea1f1aa2/1/vP76Crl0AEjYO0idnKTgKOD1z-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/fb8edb-e304-4714-952e-c66bea1f1aa2/1/vP76Crl0AEjYO0idnKTgKOD1z-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/vP76Crl0AEjYO0idnKTgKOD1z-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:07:28:7a:f8:6f:a6:c3:e9:55:6c:eb:a4:d7:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcfefa0ab9740048d83b489d9ca4e028e0f5cfef
Validity
Not Before: Aug 23 02:00:38 2025 GMT
Not After : Aug 24 02:00:38 2025 GMT
Subject: CN=8f028e614b62804aa79e06c3ca359f4e55e02561
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b8:46:5b:b4:7d:96:ff:d0:03:23:4a:e4:08:
eb:af:46:ff:df:ba:79:3a:20:dc:48:96:10:2a:a1:
7a:47:ab:8d:cd:8e:b6:4f:ee:f0:4f:ab:53:d9:75:
aa:fa:19:59:13:cb:56:70:d9:f8:1e:6a:9e:ae:25:
71:19:57:5d:f3:84:78:f0:f1:53:5d:29:b7:1a:7a:
36:ad:39:d6:d4:ee:0d:20:c0:f8:24:98:4f:dc:63:
b7:99:17:b8:ac:f3:f6:4f:82:75:7b:e2:6e:ef:28:
da:e8:74:0b:f4:0a:bf:aa:28:b0:0f:fa:6e:63:dd:
91:b0:74:ec:15:5d:0a:55:cf:91:a2:8d:39:f5:1f:
8f:a7:2b:64:3d:f4:cd:e5:24:72:eb:8e:11:d5:74:
2f:e0:db:27:70:c7:e5:42:bb:d7:b9:3c:cf:87:3d:
56:9e:15:c1:ce:bd:05:7c:c5:69:91:1f:aa:05:e0:
20:47:a6:f9:47:db:06:11:2d:a9:05:63:c9:db:c7:
1e:da:df:9e:ca:95:e6:6c:ac:10:69:17:ff:6c:3d:
96:03:de:e4:50:07:59:51:8c:2c:16:56:40:ad:e2:
68:71:be:e8:95:c7:19:2e:0a:00:1c:ff:8a:3a:eb:
84:c1:1b:a3:f8:9f:16:64:77:ba:1b:cb:e0:3f:28:
29:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:02:8E:61:4B:62:80:4A:A7:9E:06:C3:CA:35:9F:4E:55:E0:25:61
X509v3 Authority Key Identifier:
keyid:BC:FE:FA:0A:B9:74:00:48:D8:3B:48:9D:9C:A4:E0:28:E0:F5:CF:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP76Crl0AEjYO0idnKTgKOD1z-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/fb8edb-e304-4714-952e-c66bea1f1aa2/1/vP76Crl0AEjYO0idnKTgKOD1z-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/fb8edb-e304-4714-952e-c66bea1f1aa2/1/vP76Crl0AEjYO0idnKTgKOD1z-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:28:d2:7a:32:a3:2c:66:14:22:f4:1a:a0:3d:dd:6f:35:d9:
a2:c7:82:3e:17:f6:87:60:89:d2:1f:77:fc:83:2c:23:de:57:
ce:da:f2:61:3a:d0:6a:4e:68:86:99:a6:cd:9f:60:62:a0:03:
5f:7f:80:02:31:43:80:d9:ce:24:d4:1b:2c:70:ef:f2:85:1f:
25:f9:f3:30:ec:bf:58:2d:93:8e:3e:6d:9c:be:30:ae:16:b1:
1e:59:37:34:e2:25:ae:16:2a:37:de:b8:3e:31:38:d2:a9:a2:
14:1d:8e:8e:2b:5c:b9:bb:fa:e9:ee:79:65:81:fa:35:60:ad:
ec:97:44:6b:d7:c1:9f:9c:6b:fd:6a:80:ac:e6:3e:23:7a:21:
a8:c7:51:15:56:4a:8b:e0:5f:67:a9:2f:fe:ae:37:41:57:a5:
f8:db:86:c2:9f:64:c3:07:37:8a:54:8c:cb:97:54:26:64:4c:
0f:1b:4e:7d:3e:87:62:32:06:ef:0c:75:d6:e5:38:ac:68:91:
47:d8:22:2e:d1:5e:1c:d1:7b:e4:13:11:d0:ed:ec:9e:de:56:
4c:60:22:6b:fe:b6:ab:45:bf:56:ba:9b:8a:c0:6d:f8:20:c9:
0c:b7:4a:66:86:39:67:9c:2b:ee:33:ca:ff:8d:5b:1d:e4:43:
c9:1b:f0:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:25:34 2025 by rpki-client