Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.mft
File: _RVIKmVgCaobyAUUg2jR69-PYsg.mft (raw, json)
Hash identifier: 6X9LQd08YQP9J6gd7iHSpc0nZAOOIm6gq4UtSUCUG6w=
Subject key identifier: 63:87:EF:51:0C:C6:EE:9A:8D:46:77:C9:5A:F6:00:20:65:C4:58:52
Authority key identifier: FD:15:48:2A:65:60:09:AA:1B:C8:05:14:83:68:D1:EB:DF:8F:62:C8
Certificate issuer: /CN=fd15482a656009aa1bc805148368d1ebdf8f62c8
Certificate serial: 0198D47457DE84D737344DA206CFA4333DBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_RVIKmVgCaobyAUUg2jR69-PYsg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.mft
Manifest number: 106A
Signing time: Sat 23 Aug 2025 01:04:10 +0000
Manifest this update: Sat 23 Aug 2025 01:04:10 +0000
Manifest next update: Sun 24 Aug 2025 01:04:10 +0000
Files and hashes: 1: JlnlHDByaNUy0-f6Bk6pC1lv0dA.roa (hash: 3ZWBVVVlMIE03x5aR9QcVmTZqjLrQw0dyYbjGkJTjWk=)
2: _RVIKmVgCaobyAUUg2jR69-PYsg.crl (hash: go7ZXpNUWjtp/tgNuzdhIZFJpFYUs0BzTsWQlI96r1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_RVIKmVgCaobyAUUg2jR69-PYsg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:04:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:57:de:84:d7:37:34:4d:a2:06:cf:a4:33:3d:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd15482a656009aa1bc805148368d1ebdf8f62c8
Validity
Not Before: Aug 23 01:04:10 2025 GMT
Not After : Aug 24 01:04:10 2025 GMT
Subject: CN=6387ef510cc6ee9a8d4677c95af6002065c45852
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b3:2a:08:92:64:a3:af:db:f0:f6:0d:64:4c:
95:a5:6f:bf:40:cc:51:da:56:43:a4:e1:c2:0a:1a:
6c:9e:70:2d:f4:3b:03:a7:06:c8:2a:41:41:da:28:
d6:fc:cd:bf:85:d4:20:e7:71:d8:11:ce:d4:78:3f:
e9:d2:78:b2:af:1a:6d:32:e3:de:d3:dc:b1:e6:e0:
50:2c:fa:32:b0:a1:ae:fa:ad:92:f1:73:77:4d:22:
aa:38:da:10:7e:68:bc:03:9c:1d:97:73:3c:71:9b:
82:23:9a:b7:99:77:87:a3:d5:f4:b2:bc:bf:ce:d5:
75:21:26:ea:b4:cf:07:75:62:d2:5a:ec:4b:19:53:
af:d3:5f:0a:62:28:8f:99:e0:7b:cf:b6:b2:a0:30:
fc:b8:5b:62:25:78:ce:32:57:21:82:52:f3:12:35:
a9:e6:02:64:1c:0d:5b:22:3b:86:ba:1b:79:5f:94:
3a:13:14:68:50:1d:1c:71:db:e3:6c:b8:c3:c6:d8:
bf:2f:61:aa:de:26:6a:ea:ac:9f:7b:e8:c7:31:3c:
6b:46:01:c4:d3:2b:9f:a2:b6:9e:45:1b:bd:63:7c:
03:b7:c0:4f:98:a3:00:09:ad:1e:97:e6:18:30:a4:
8f:4d:a1:9b:82:b8:55:25:46:39:82:3a:25:72:cb:
1f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:87:EF:51:0C:C6:EE:9A:8D:46:77:C9:5A:F6:00:20:65:C4:58:52
X509v3 Authority Key Identifier:
keyid:FD:15:48:2A:65:60:09:AA:1B:C8:05:14:83:68:D1:EB:DF:8F:62:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_RVIKmVgCaobyAUUg2jR69-PYsg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/cee9db-6401-4497-85d1-917c80b14862/1/_RVIKmVgCaobyAUUg2jR69-PYsg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:d0:d7:66:b3:28:80:a9:5a:ca:32:d6:62:03:35:24:13:cb:
18:48:4b:a8:9d:ac:05:89:68:74:e2:7b:2d:d6:d7:9b:68:f8:
bb:5b:be:c4:bb:62:27:01:ec:d4:da:97:88:27:70:50:40:0f:
14:23:7d:6c:e3:df:d8:6d:c2:1f:4e:f9:ed:52:bb:46:47:95:
95:97:c8:9b:d2:ff:f0:2a:2f:32:fc:60:e6:74:6b:e5:88:a9:
30:35:2d:50:3b:af:34:1f:8f:bd:e6:4f:39:2d:af:73:6d:15:
7e:0f:f4:80:77:7c:b0:56:f7:76:8e:de:65:31:f0:29:0b:0e:
ad:4d:a1:cb:6f:49:ec:4b:31:7e:69:ef:ac:e7:16:54:1f:36:
a3:a1:5c:25:e1:e1:c2:43:45:26:43:48:b4:56:45:bd:e0:4d:
5a:cb:21:19:06:3b:37:cf:4c:0e:92:60:e2:83:fb:7c:8b:f7:
43:42:51:46:bc:a7:91:cf:ef:ea:59:38:3a:9c:2c:fb:50:3b:
f7:16:9e:fe:65:07:e2:35:a0:bc:ac:17:7f:b4:3e:05:62:d8:
92:d4:f0:4a:af:48:e9:0b:ed:e7:bc:6e:c2:13:7d:d9:3d:fe:
6b:09:db:b2:62:dd:2d:f6:ca:5e:d8:cc:ac:fb:5c:4c:cd:f8:
38:80:4f:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:27:12 2025 by rpki-client