Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/vBWSH1umvRR_9AAReqlzhjPxWH0.mft
File: vBWSH1umvRR_9AAReqlzhjPxWH0.mft (raw, json)
Hash identifier: yj9KKFq96MEK6puiB4Ij/I13niFkVHw+pAn3DXgJl8g=
Subject key identifier: A1:71:E0:83:57:A4:94:23:78:C2:95:B3:8B:89:38:F9:1B:B3:2C:70
Authority key identifier: BC:15:92:1F:5B:A6:BD:14:7F:F4:00:11:7A:A9:73:86:33:F1:58:7D
Certificate issuer: /CN=bc15921f5ba6bd147ff400117aa9738633f1587d
Certificate serial: 01984A09BBEE44C27343F331D3EDC4F835E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vBWSH1umvRR_9AAReqlzhjPxWH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/vBWSH1umvRR_9AAReqlzhjPxWH0.mft
Manifest number: 1607
Signing time: Sun 27 Jul 2025 04:00:08 +0000
Manifest this update: Sun 27 Jul 2025 04:00:08 +0000
Manifest next update: Mon 28 Jul 2025 04:00:08 +0000
Files and hashes: 1: 9cE7vjT6DzlEjW81UqTEgPCC5kk.roa (hash: YeyZuOMLUCYoKrtFyEejrMk173P/JZ9uykjJbI6/Rr0=)
2: U77ECX22fJUQ9Szp6lrBtYkTrQY.roa (hash: jYSTL2r9IXnyVhPYQjdEYfmkmSawy+babAO2lCpGCAs=)
3: vBWSH1umvRR_9AAReqlzhjPxWH0.crl (hash: N6IkvgGMS69scQgrCm66XVTEVRzdH8/qMoA5OaTZVK8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/vBWSH1umvRR_9AAReqlzhjPxWH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/vBWSH1umvRR_9AAReqlzhjPxWH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/vBWSH1umvRR_9AAReqlzhjPxWH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:09:bb:ee:44:c2:73:43:f3:31:d3:ed:c4:f8:35:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc15921f5ba6bd147ff400117aa9738633f1587d
Validity
Not Before: Jul 27 04:00:08 2025 GMT
Not After : Jul 28 04:00:08 2025 GMT
Subject: CN=a171e08357a4942378c295b38b8938f91bb32c70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:45:a5:df:c5:30:0b:36:ac:74:4e:e7:d2:4f:
ce:9f:c4:cc:b0:b3:c3:80:86:f9:fc:85:a0:75:16:
fd:57:2a:3b:b9:26:f8:62:87:5b:88:fa:3e:e2:3d:
bf:9d:da:3f:e6:24:41:df:0e:43:c9:c7:2f:33:ca:
74:8a:36:bb:1c:e5:07:f7:2b:59:fd:e9:6a:85:16:
9d:9c:97:7e:61:33:48:d4:ef:9d:05:b6:d8:f1:70:
d2:fa:8c:f3:4a:34:99:b7:90:67:18:5a:19:95:3d:
56:09:17:78:f2:2e:54:48:fc:69:41:16:3d:4f:06:
db:38:66:c0:4d:13:2a:2b:e1:04:86:6e:0a:6d:75:
42:6b:de:cd:d7:21:a1:c1:1c:de:b9:e9:c8:10:a8:
a8:a3:40:a8:2a:67:50:ce:35:7d:4b:2a:64:82:cf:
f3:c2:19:43:af:2f:c0:6f:c6:01:96:bc:07:b0:0e:
d8:69:72:ae:e6:fe:3a:99:5a:4d:eb:b5:f7:a2:6f:
07:31:b8:68:d2:31:d6:d6:00:9c:a1:74:73:da:26:
4f:ef:6b:6e:60:88:0a:b9:d3:eb:f2:e1:ff:73:f0:
21:ec:e5:67:02:55:fe:c5:b7:2c:fd:ad:58:9f:97:
7d:ff:e5:d1:24:97:e8:55:09:c4:bf:15:fc:77:fe:
5f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:71:E0:83:57:A4:94:23:78:C2:95:B3:8B:89:38:F9:1B:B3:2C:70
X509v3 Authority Key Identifier:
keyid:BC:15:92:1F:5B:A6:BD:14:7F:F4:00:11:7A:A9:73:86:33:F1:58:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vBWSH1umvRR_9AAReqlzhjPxWH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/vBWSH1umvRR_9AAReqlzhjPxWH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/vBWSH1umvRR_9AAReqlzhjPxWH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:74:37:8f:31:3f:25:55:4f:1c:23:a0:88:63:20:5c:3f:49:
66:8c:c6:76:12:1c:66:cc:df:9c:e7:bc:d2:14:8b:6d:22:d4:
95:de:b7:8a:91:63:5c:b8:a9:74:08:a1:a6:5f:9d:8b:3c:0b:
a4:ec:ee:1b:f1:b8:db:f1:fa:68:15:74:d8:06:41:e2:27:8c:
c0:4c:82:f9:ef:7a:cb:88:07:4f:59:ac:50:dc:8b:00:08:5d:
c3:5f:19:5b:35:37:bb:e4:ac:63:0c:13:dd:72:57:9c:53:de:
96:33:99:81:83:ca:36:30:0e:c1:c4:d5:2c:02:e2:d2:f7:e3:
96:45:1e:11:46:4d:f3:0f:45:c5:bc:38:a8:24:d3:61:dc:c2:
cd:0f:a7:38:6a:27:3c:a7:aa:3e:dd:18:ae:c1:81:de:01:8f:
ec:d2:fc:91:9f:c3:bf:28:d2:f2:ec:8c:a3:ce:f7:56:88:cb:
9f:04:5c:a8:34:3b:74:25:26:24:71:31:1a:c3:2e:e7:45:58:
00:97:c2:f0:c2:48:e8:60:cb:0a:53:86:23:ce:ec:72:57:30:
89:23:7c:da:a8:0c:d4:ee:a2:60:a1:b5:43:50:66:dc:ff:7d:
89:b7:16:89:28:0c:6d:a8:a7:e1:85:ce:07:e5:50:bc:55:9a:
2c:91:56:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:52:26 2025 by rpki-client