Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/vVwIMjrCerZVOlpppzpY-AJCPWg.mft
File: vVwIMjrCerZVOlpppzpY-AJCPWg.mft (raw, json)
Hash identifier: mVkeCDjiM2vn+euSSdwv4ce725n/gYdyc+K2bv11Bu0=
Subject key identifier: 7F:8E:A7:62:BD:98:7A:3A:9C:8F:8A:AD:FE:FE:E4:12:2F:8F:34:96
Authority key identifier: BD:5C:08:32:3A:C2:7A:B6:55:3A:5A:69:A7:3A:58:F8:02:42:3D:68
Certificate issuer: /CN=bd5c08323ac27ab6553a5a69a73a58f802423d68
Certificate serial: 0198D54E2400AB64B483BA32CE289B288063
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vVwIMjrCerZVOlpppzpY-AJCPWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/vVwIMjrCerZVOlpppzpY-AJCPWg.mft
Manifest number: 0516
Signing time: Sat 23 Aug 2025 05:02:04 +0000
Manifest this update: Sat 23 Aug 2025 05:02:04 +0000
Manifest next update: Sun 24 Aug 2025 05:02:04 +0000
Files and hashes: 1: G_IYoZfZUxFUxoKj63LyULDLjWc.roa (hash: p32xiHa5RLyOZriAfbie5PUear7BZRAYgBWelDYnr3o=)
2: pBa3ZIYcjmcqVmvAHshpeA-YNy8.roa (hash: 4EmI7PijPu9Hj8achdjNLKa6nAug9jEr6AHyyJ1Ale0=)
3: vVwIMjrCerZVOlpppzpY-AJCPWg.crl (hash: MoHWexBSe9cDV2DIpeRVAW1rE/dueSFKPVo0szZp5e0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/vVwIMjrCerZVOlpppzpY-AJCPWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/vVwIMjrCerZVOlpppzpY-AJCPWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vVwIMjrCerZVOlpppzpY-AJCPWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:24:00:ab:64:b4:83:ba:32:ce:28:9b:28:80:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd5c08323ac27ab6553a5a69a73a58f802423d68
Validity
Not Before: Aug 23 05:02:04 2025 GMT
Not After : Aug 24 05:02:04 2025 GMT
Subject: CN=7f8ea762bd987a3a9c8f8aadfefee4122f8f3496
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:ed:2f:62:20:db:ec:b1:b8:e4:66:4d:8f:8c:
63:c3:cc:8e:42:59:a4:69:5b:a7:b5:40:35:6a:70:
e4:b2:e8:05:08:b0:67:cf:98:21:bb:34:7e:b1:be:
f6:dc:bc:4b:23:80:aa:ff:2c:f8:96:d1:ab:ca:3f:
05:c4:17:bf:00:76:c8:8b:4d:bd:b7:fb:aa:20:86:
c7:ef:0a:92:fb:fb:f0:dd:7e:b7:b2:48:3c:31:bb:
72:59:fb:6e:84:b1:34:a1:2c:ba:58:a7:27:11:12:
34:17:06:b3:37:1a:0c:01:07:bf:ec:d2:95:77:ee:
6a:ca:cc:2a:4b:0e:5e:bb:0b:f4:c8:e2:71:15:5a:
b9:cc:46:0b:be:ab:6c:64:01:39:a4:7b:5d:d0:c8:
05:2e:97:fb:91:38:02:f4:74:af:9c:8c:77:8b:81:
d2:fa:78:8a:a6:e0:1e:ef:f0:8f:90:7c:4a:9a:46:
2c:52:c0:e5:b5:93:a6:a5:a5:42:49:61:20:75:85:
89:21:10:19:69:a1:4f:f6:30:34:3e:26:7e:e8:a5:
c0:4e:0a:90:c5:2a:b7:d6:30:e0:c6:a7:57:bb:71:
a6:7d:54:93:93:52:33:4d:77:5e:e7:fd:0b:79:6f:
be:16:a5:ff:86:c7:70:7a:fa:95:6a:87:53:52:38:
c6:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:8E:A7:62:BD:98:7A:3A:9C:8F:8A:AD:FE:FE:E4:12:2F:8F:34:96
X509v3 Authority Key Identifier:
keyid:BD:5C:08:32:3A:C2:7A:B6:55:3A:5A:69:A7:3A:58:F8:02:42:3D:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vVwIMjrCerZVOlpppzpY-AJCPWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/vVwIMjrCerZVOlpppzpY-AJCPWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/vVwIMjrCerZVOlpppzpY-AJCPWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:5d:dc:fe:0f:02:4d:14:9b:d5:4f:35:11:06:97:d5:d0:2f:
38:44:33:ad:15:84:59:25:9b:03:8d:d4:68:1e:fa:6a:d3:55:
0c:81:bc:8b:be:5c:eb:7e:cd:b1:c3:c6:25:22:87:44:11:3d:
29:9f:f3:32:37:bb:6e:99:42:19:c7:02:9c:2b:d9:3f:54:1f:
d8:88:04:98:a6:7c:32:79:97:4a:0d:c9:55:9b:cb:49:d1:f3:
b8:96:8b:51:a4:f6:d2:52:ae:ef:ba:2e:59:53:23:ee:8b:07:
3d:9e:11:89:77:8c:77:1a:88:e5:dd:77:18:ea:d7:25:80:ad:
4b:a6:f2:e7:c3:37:46:be:c6:eb:0d:9b:0a:0e:35:1d:b3:9d:
12:96:20:b1:05:4e:04:7b:e1:0b:d6:49:c0:a5:8a:19:d9:4c:
e2:0e:0f:41:f4:0c:78:71:82:89:43:a5:0d:d8:d4:60:5b:75:
e4:2f:d1:65:cb:2f:a9:88:34:62:1c:8b:3a:16:c8:dd:71:b6:
2c:e3:8d:b8:69:dd:74:a1:09:9a:ad:52:8e:b0:79:85:8b:7d:
7e:88:b2:d8:e9:43:6b:2a:ed:f4:fa:65:66:1c:b0:3b:1e:75:
12:74:e4:81:39:9e:52:c7:b3:a9:6c:96:dc:95:ef:e1:32:09:
06:f0:49:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:16:21 2025 by rpki-client