Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/d5e5cb-5b27-47f6-8acb-0350787225c8/1/vJA0A8IKbNsiNmzHrPSOn5m-NP8.mft
File: vJA0A8IKbNsiNmzHrPSOn5m-NP8.mft (raw, json)
Hash identifier: FTWTvehRyi60pqOzO77IPSJIBbXKdgC2ldXXlYp+9BY=
Subject key identifier: EF:D0:F9:BB:BA:73:3A:46:0B:42:B8:8B:29:92:ED:96:90:DD:25:E6
Authority key identifier: BC:90:34:03:C2:0A:6C:DB:22:36:6C:C7:AC:F4:8E:9F:99:BE:34:FF
Certificate issuer: /CN=bc903403c20a6cdb22366cc7acf48e9f99be34ff
Certificate serial: 019849D310D2F57AD95E7D14D7FC79CE1493
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJA0A8IKbNsiNmzHrPSOn5m-NP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/d5e5cb-5b27-47f6-8acb-0350787225c8/1/vJA0A8IKbNsiNmzHrPSOn5m-NP8.mft
Manifest number: 0CC9
Signing time: Sun 27 Jul 2025 03:00:25 +0000
Manifest this update: Sun 27 Jul 2025 03:00:25 +0000
Manifest next update: Mon 28 Jul 2025 03:00:25 +0000
Files and hashes: 1: AFiiX1ExBRX0sjF1OFaXff5vX-o.roa (hash: s6dqOT6FYSZSQT8asyjr/q9SCL3Hless8wyrxiVHEwU=)
2: vJA0A8IKbNsiNmzHrPSOn5m-NP8.crl (hash: 5DlImjQEeyNVlNirrmBNUr2Nqmr1dDSl4TzqtkpG9fg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/d5e5cb-5b27-47f6-8acb-0350787225c8/1/vJA0A8IKbNsiNmzHrPSOn5m-NP8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/d5e5cb-5b27-47f6-8acb-0350787225c8/1/vJA0A8IKbNsiNmzHrPSOn5m-NP8.mft
rsync://rpki.ripe.net/repository/DEFAULT/vJA0A8IKbNsiNmzHrPSOn5m-NP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:10:d2:f5:7a:d9:5e:7d:14:d7:fc:79:ce:14:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc903403c20a6cdb22366cc7acf48e9f99be34ff
Validity
Not Before: Jul 27 03:00:25 2025 GMT
Not After : Jul 28 03:00:25 2025 GMT
Subject: CN=efd0f9bbba733a460b42b88b2992ed9690dd25e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:26:8d:f1:4a:25:f2:b8:d8:99:a7:72:7f:17:
d8:13:0d:2a:7a:bd:29:21:01:71:53:d1:ca:60:a6:
33:cc:c9:7d:22:42:b6:89:9a:ea:71:c6:fd:a8:f1:
a2:71:0a:d2:2c:02:a9:59:84:98:bb:3a:06:8a:87:
14:23:04:bf:af:82:54:1b:de:56:fe:8d:b0:da:15:
5f:c9:f4:6f:cb:59:52:ff:4f:c5:20:79:74:52:f1:
74:5f:10:64:b2:51:f8:17:1f:04:81:8b:8f:6a:65:
eb:a0:50:43:64:74:ab:81:ac:e8:8c:cc:48:56:ad:
ac:23:8a:03:05:6d:b9:ff:ce:5e:61:65:41:1f:f9:
ca:64:43:98:81:62:87:52:b8:f3:9c:d9:31:a5:98:
fb:00:40:18:54:58:43:af:74:04:08:9f:46:76:76:
11:74:70:8c:86:e2:c8:29:4e:69:f6:c4:f5:ab:96:
e6:d0:e4:6b:92:18:f9:58:e7:80:f4:d5:a4:9c:c6:
50:80:b1:82:c7:f6:3b:30:2e:72:bb:90:81:f0:96:
96:da:1d:7c:85:5f:cf:fc:94:20:91:9b:a8:28:34:
13:bb:26:58:73:94:d5:cc:3b:54:89:1a:5a:61:92:
92:14:ff:25:01:37:67:d6:f5:90:6a:55:5e:99:fa:
48:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:D0:F9:BB:BA:73:3A:46:0B:42:B8:8B:29:92:ED:96:90:DD:25:E6
X509v3 Authority Key Identifier:
keyid:BC:90:34:03:C2:0A:6C:DB:22:36:6C:C7:AC:F4:8E:9F:99:BE:34:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJA0A8IKbNsiNmzHrPSOn5m-NP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/d5e5cb-5b27-47f6-8acb-0350787225c8/1/vJA0A8IKbNsiNmzHrPSOn5m-NP8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/d5e5cb-5b27-47f6-8acb-0350787225c8/1/vJA0A8IKbNsiNmzHrPSOn5m-NP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:86:7a:07:00:d5:c2:b6:06:fc:ae:82:ce:68:b6:e5:ff:99:
80:76:29:9f:6c:1e:0e:81:ef:70:5f:74:db:c8:7c:0c:2a:65:
bc:cc:6c:fe:20:8d:87:c5:ab:02:d6:97:74:7b:88:3c:b7:64:
71:53:9a:a9:4c:b7:55:14:68:8e:cb:4e:1a:3b:4a:6e:7e:dc:
d5:ff:88:9f:07:3b:6d:da:5f:d0:3e:cf:ec:f5:a8:51:bd:0c:
f2:97:6f:55:e5:67:9c:e2:d1:c8:f4:58:42:70:25:21:e0:29:
f6:1e:09:88:81:14:94:db:eb:10:09:ec:aa:4b:38:e9:a8:4e:
9a:ad:86:44:c8:6b:4f:d7:44:11:20:78:42:15:b9:51:cf:eb:
e5:60:c3:15:b3:d0:94:b6:b8:ba:2a:bc:5b:6e:c5:28:4b:29:
09:75:77:6c:43:9b:df:19:0b:5b:38:a0:43:48:96:24:29:74:
31:ee:04:ce:b7:b4:63:3f:72:a6:3a:2a:f3:07:d0:57:d1:d1:
55:55:ef:e2:ad:e3:d2:71:5b:78:b0:2b:01:75:93:03:a8:ec:
2b:7c:e2:9f:88:3a:25:b2:5a:2d:43:5e:88:d1:4e:90:b8:81:
58:e4:6d:c7:51:34:68:04:bc:ec:7f:8e:11:be:64:10:6e:6c:
13:58:13:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:13:43 2025 by rpki-client