
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.mft
File: vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.mft (raw, json)
Hash identifier: w5oTq6kGV3dtDsN27jfp7gNCSNK/37uL43lL71Otyew=
Subject key identifier: 0B:10:E0:7E:9B:84:18:54:7A:1F:F6:68:2C:A9:D2:AC:3C:C9:B7:EE
Authority key identifier: BC:12:78:64:CD:43:04:85:50:ED:16:99:C5:84:B5:C1:4D:80:E0:98
Certificate issuer: /CN=bc127864cd43048550ed1699c584b5c14d80e098
Certificate serial: 0198D69858ECA47885F91914DC0023856642
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.mft
Manifest number: 06C5
Signing time: Sat 23 Aug 2025 11:02:45 +0000
Manifest this update: Sat 23 Aug 2025 11:02:45 +0000
Manifest next update: Sun 24 Aug 2025 11:02:45 +0000
Files and hashes: 1: DmspTgBWfwCRXv4YidxL9MxMuLs.roa (hash: 1HDwuoapwdXHm8uFL7aQ8AiJfzmdU8tLWRG1TVtsgIw=)
2: P4H-USxdX8paqqc5vUCjCPteQ10.roa (hash: RUKC58n+H3u6CbZuKe7grfw3EeWvKz+vXEAG57qC5LQ=)
3: vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.crl (hash: b+Uzht3xuAwivd585v3BcYMyEnpVIlAvbWH/NUOqtug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:58:ec:a4:78:85:f9:19:14:dc:00:23:85:66:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc127864cd43048550ed1699c584b5c14d80e098
Validity
Not Before: Aug 23 11:02:45 2025 GMT
Not After : Aug 24 11:02:45 2025 GMT
Subject: CN=0b10e07e9b8418547a1ff6682ca9d2ac3cc9b7ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c6:d3:b0:59:2c:99:eb:ec:24:b4:76:ea:b5:
8e:fa:8a:36:d1:f5:61:c2:45:5d:a4:54:08:34:dd:
dd:34:82:7a:26:14:3e:ea:f9:0b:35:e5:df:52:09:
c4:c9:88:95:29:77:21:e2:50:95:38:48:ee:f1:99:
6f:3b:54:bf:fc:b7:ff:c7:3b:67:ed:e0:97:88:26:
e2:70:6a:97:d8:8a:ec:18:a7:3f:b5:9a:bb:8a:e3:
5f:0e:04:f4:fe:16:50:83:1f:eb:51:aa:69:53:e9:
c0:9a:d7:47:22:50:3e:a0:94:0a:06:21:d2:96:d2:
98:b0:6d:10:1a:09:02:67:da:dc:6a:aa:01:09:78:
77:a7:e8:fd:7c:67:2b:c6:e1:f1:a8:7c:c2:47:f1:
47:95:c9:3f:7b:da:95:82:07:0a:6a:8f:2c:f1:0a:
e0:9c:0d:ed:b6:e0:20:b6:0f:59:94:93:5c:1e:d4:
76:fd:b3:04:b4:ee:90:a0:f9:6e:2d:2b:9a:09:65:
35:b2:7a:0b:b0:bc:7c:90:e0:87:cb:a8:06:8d:aa:
19:bb:ac:48:1b:c6:89:d1:ed:7a:02:db:ae:9b:ed:
98:aa:a8:32:4c:4d:1e:a3:18:14:16:b9:ac:4d:79:
4a:63:a4:14:ed:dc:46:90:74:70:4d:9c:dc:fa:75:
ff:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:10:E0:7E:9B:84:18:54:7A:1F:F6:68:2C:A9:D2:AC:3C:C9:B7:EE
X509v3 Authority Key Identifier:
keyid:BC:12:78:64:CD:43:04:85:50:ED:16:99:C5:84:B5:C1:4D:80:E0:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:43:40:2e:e4:34:4b:8e:15:02:86:43:47:f5:5e:c7:5d:91:
f5:b0:1b:2d:c0:97:38:52:61:33:e3:33:78:20:07:f5:2b:58:
e5:2a:00:2c:3f:6f:23:26:e7:5a:92:ad:fe:d8:54:da:a4:52:
cc:96:aa:24:25:75:f6:6f:a1:c7:ac:2d:29:bf:24:40:e1:71:
de:8b:ef:f0:4a:18:59:c6:78:97:8a:c4:c0:18:6f:23:b9:79:
63:2c:2f:99:88:bc:e4:f1:aa:f5:5b:26:3e:e4:68:bc:92:5c:
28:72:e4:2c:ec:9e:3c:f7:a0:e1:ed:6b:98:0b:c8:9a:3d:1e:
13:ce:c7:75:d1:e9:d4:ba:91:57:04:56:6c:66:cc:03:84:8d:
93:61:98:ee:da:1b:18:e7:8b:48:e1:be:22:04:c5:d4:1c:19:
1c:2e:70:b7:e5:f7:dd:14:23:61:77:19:5d:10:92:a5:73:a8:
83:27:8f:f5:63:b6:9f:af:32:69:51:06:a4:95:a7:f8:33:b4:
c8:50:06:84:3f:a4:fb:20:5f:ca:c3:00:c4:f6:0d:30:63:d3:
cd:98:3a:d1:d5:5c:c8:4d:5d:11:5a:d1:5c:98:c5:65:e1:c6:
27:ea:f7:34:15:2a:be:1d:ff:4c:14:9c:9b:5b:b5:9d:ba:ea:
fb:4f:75:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:23:44 2025 by rpki-client