Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/7d2944-1ed6-4fcd-8c5c-77b4bbe35a9e/1/vG0u13lNMhfPqv4crVP3Vbgs46k.mft
File: vG0u13lNMhfPqv4crVP3Vbgs46k.mft (raw, json)
Hash identifier: F7hnuMwUbxpTLJ15YLFmhZRe+Jia6A5DY+KmolxJ0/A=
Subject key identifier: A9:36:D1:13:69:90:05:61:14:A6:FE:26:09:D2:F2:C7:38:BE:80:1C
Authority key identifier: BC:6D:2E:D7:79:4D:32:17:CF:AA:FE:1C:AD:53:F7:55:B8:2C:E3:A9
Certificate issuer: /CN=bc6d2ed7794d3217cfaafe1cad53f755b82ce3a9
Certificate serial: 019848C0C500E08ABE27CA2A4FF287CB989F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vG0u13lNMhfPqv4crVP3Vbgs46k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/7d2944-1ed6-4fcd-8c5c-77b4bbe35a9e/1/vG0u13lNMhfPqv4crVP3Vbgs46k.mft
Manifest number: 15FF
Signing time: Sat 26 Jul 2025 22:00:49 +0000
Manifest this update: Sat 26 Jul 2025 22:00:49 +0000
Manifest next update: Sun 27 Jul 2025 22:00:49 +0000
Files and hashes: 1: Rfx73to5lynfa5P988aJIcpZHW0.roa (hash: fb46D6K33gqqGx/M4AgtMP1UJSgJ24dkYkKRuFAfTRM=)
2: vG0u13lNMhfPqv4crVP3Vbgs46k.crl (hash: cUYnAnsRosuQQQt5PZencwl3EsGG42uuTOGNuF5x7y0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/7d2944-1ed6-4fcd-8c5c-77b4bbe35a9e/1/vG0u13lNMhfPqv4crVP3Vbgs46k.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/7d2944-1ed6-4fcd-8c5c-77b4bbe35a9e/1/vG0u13lNMhfPqv4crVP3Vbgs46k.mft
rsync://rpki.ripe.net/repository/DEFAULT/vG0u13lNMhfPqv4crVP3Vbgs46k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:c0:c5:00:e0:8a:be:27:ca:2a:4f:f2:87:cb:98:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc6d2ed7794d3217cfaafe1cad53f755b82ce3a9
Validity
Not Before: Jul 26 22:00:49 2025 GMT
Not After : Jul 27 22:00:49 2025 GMT
Subject: CN=a936d1136990056114a6fe2609d2f2c738be801c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:28:5b:15:b5:d6:cb:20:60:c1:bc:95:10:f9:
ce:f9:bf:cd:13:23:97:b4:3e:7f:57:a6:83:d6:4a:
26:2b:96:9c:f7:a3:4e:af:cb:f7:df:44:6b:33:fb:
ec:9b:bc:dd:f2:a9:61:1b:dc:7e:29:6c:6b:f4:e7:
a3:b2:e9:a6:a2:b1:a3:09:48:61:06:03:13:b6:c7:
cd:0d:7e:55:80:f8:71:22:ee:7d:53:32:98:7c:c7:
fa:2b:15:ab:a5:c3:f0:a4:bf:d0:21:00:2d:e3:dd:
b2:5b:86:42:e2:84:26:3e:fc:9f:36:f7:7e:28:ea:
9d:18:78:7a:88:d9:a0:f3:c4:a2:76:b6:f9:ee:28:
eb:41:d5:37:72:01:a7:48:07:ed:af:14:4e:90:97:
c2:61:2d:1e:ff:3d:56:a9:50:2f:a2:7f:c9:54:4b:
85:18:b9:8e:24:c0:8b:63:9e:39:f8:b6:50:62:0a:
2c:fa:56:f6:ff:e0:a6:a5:bb:de:3d:c1:50:66:16:
3d:c8:f6:a3:c4:20:f6:7b:80:c4:df:18:df:5f:87:
af:48:d6:ac:6f:72:db:79:97:8d:55:e3:5d:b1:50:
88:16:df:b8:06:53:12:6b:09:c9:fe:85:f0:15:4c:
d0:8c:65:10:fc:ff:23:04:53:87:fc:e9:6f:74:93:
4c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:36:D1:13:69:90:05:61:14:A6:FE:26:09:D2:F2:C7:38:BE:80:1C
X509v3 Authority Key Identifier:
keyid:BC:6D:2E:D7:79:4D:32:17:CF:AA:FE:1C:AD:53:F7:55:B8:2C:E3:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vG0u13lNMhfPqv4crVP3Vbgs46k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7d2944-1ed6-4fcd-8c5c-77b4bbe35a9e/1/vG0u13lNMhfPqv4crVP3Vbgs46k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7d2944-1ed6-4fcd-8c5c-77b4bbe35a9e/1/vG0u13lNMhfPqv4crVP3Vbgs46k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:c4:78:76:95:bf:f8:d3:14:3f:44:c6:d0:40:37:03:23:6e:
b3:78:de:6c:a0:f9:87:e9:65:d1:70:e8:9e:fc:88:5b:16:24:
96:c0:f1:42:06:dc:c7:f9:9b:df:b8:48:5c:52:c9:10:1c:4e:
ac:f7:d3:5a:d2:53:a6:5b:82:75:28:1a:21:7e:87:22:42:7b:
f5:96:79:cc:0f:c1:64:f1:c8:61:2e:b4:dd:b1:70:67:24:6a:
13:72:ad:44:cb:7e:71:01:af:e6:74:75:dc:f8:78:25:8d:66:
e4:66:8e:47:e5:08:71:94:91:1e:d8:f1:a7:3d:22:dd:c4:84:
bb:50:e3:d6:92:76:53:8f:c1:d5:81:92:82:03:a6:56:b1:98:
42:4c:fd:eb:d9:fa:02:2b:c6:db:18:ce:dc:c6:4e:e3:82:32:
5e:f0:f8:ae:76:a3:14:27:92:42:17:d4:0c:41:4b:a8:ca:65:
ee:cb:45:17:d8:11:2b:b6:6a:15:95:9c:06:0d:27:28:19:f6:
86:21:1f:b5:0e:8d:8d:2c:59:c4:57:d3:be:d3:a7:f1:d3:d6:
43:70:cd:3d:a2:53:d3:e2:e2:0c:9c:12:3e:a4:6e:7f:f3:ad:
f7:36:89:58:12:c4:9b:00:3e:2d:e3:1e:a8:f9:83:15:6f:18:
6e:e7:f4:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:20:09 2025 by rpki-client