Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.mft
File: vf89luiqFB0ixCQq7_eK9x74skQ.mft (raw, json)
Hash identifier: 0IIXtbi4XazuCLsdIh9B/SiKGRAezESi42QncLiIAN8=
Subject key identifier: E4:87:79:24:42:F8:EB:94:28:D8:DC:35:1A:BE:21:A0:EA:B7:1C:56
Authority key identifier: BD:FF:3D:96:E8:AA:14:1D:22:C4:24:2A:EF:F7:8A:F7:1E:F8:B2:44
Certificate issuer: /CN=bdff3d96e8aa141d22c4242aeff78af71ef8b244
Certificate serial: 0198537AB6CB6A405F4A828DC16AFFA98DA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vf89luiqFB0ixCQq7_eK9x74skQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.mft
Manifest number: 159A
Signing time: Tue 29 Jul 2025 00:00:07 +0000
Manifest this update: Tue 29 Jul 2025 00:00:07 +0000
Manifest next update: Wed 30 Jul 2025 00:00:07 +0000
Files and hashes: 1: 41AytB41hodYM5wYhqpxuiF8N9s.roa (hash: OnxInRURjXFa44Bu3c4RrKsYyRXWI0CzeYkFHBMxcR8=)
2: vf89luiqFB0ixCQq7_eK9x74skQ.crl (hash: knghbD8zq68mq/O4fwA/w+dYdbzvDmWYKurZe0JsNXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/vf89luiqFB0ixCQq7_eK9x74skQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:7a:b6:cb:6a:40:5f:4a:82:8d:c1:6a:ff:a9:8d:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdff3d96e8aa141d22c4242aeff78af71ef8b244
Validity
Not Before: Jul 29 00:00:07 2025 GMT
Not After : Jul 30 00:00:07 2025 GMT
Subject: CN=e487792442f8eb9428d8dc351abe21a0eab71c56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:55:45:f5:5e:c7:5d:ca:13:d4:48:51:22:06:
75:83:4d:6d:53:53:fc:ef:b6:92:2d:7c:eb:d5:8c:
1b:ba:0d:a4:ee:8e:8c:8e:6e:fe:c5:21:f3:5a:f0:
ae:25:27:8e:98:03:12:08:23:45:93:ab:f6:6d:3b:
a0:51:cf:72:3a:af:ab:df:c3:12:2f:fd:eb:7d:b6:
82:75:a4:92:e0:34:54:54:11:b6:37:9c:d6:46:42:
b0:23:63:6b:0f:c7:ab:59:2b:79:31:04:1c:f7:5a:
25:10:4d:6e:ad:bc:ec:bc:92:8d:81:00:0f:5b:2a:
07:38:be:2f:91:58:c1:df:3d:f2:de:7c:1e:1a:f0:
25:4d:8e:bc:1e:20:55:63:57:16:e5:bc:da:55:a6:
bf:5a:75:34:5b:42:60:e9:85:2b:f6:7b:6b:68:91:
b2:20:9e:64:9c:c5:26:40:43:c2:80:c3:6e:b3:c9:
bf:15:50:bb:30:86:0c:f2:aa:e8:f5:f5:dd:43:63:
e4:b5:77:58:a4:1c:75:ab:25:f1:76:8b:07:93:cd:
e2:3f:0c:58:ca:f1:7a:38:99:6f:cd:78:2c:54:39:
18:c5:0c:9b:46:58:1a:33:56:02:c5:17:60:13:b0:
05:b4:33:5a:bd:49:b7:92:87:ae:7a:1f:f9:96:8e:
ee:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:87:79:24:42:F8:EB:94:28:D8:DC:35:1A:BE:21:A0:EA:B7:1C:56
X509v3 Authority Key Identifier:
keyid:BD:FF:3D:96:E8:AA:14:1D:22:C4:24:2A:EF:F7:8A:F7:1E:F8:B2:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vf89luiqFB0ixCQq7_eK9x74skQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:31:6e:02:7b:ee:64:33:6a:a3:df:6f:6f:e1:fa:45:69:ed:
8e:e3:5a:d0:68:71:da:ff:2f:be:6b:5f:9b:17:2e:4c:00:90:
cb:cc:d9:6f:a4:87:b7:a6:be:b1:99:81:ba:76:03:0d:3a:6b:
09:ec:fa:49:14:f6:62:e4:94:6b:c0:42:79:40:87:c3:de:a2:
2f:e0:7f:51:89:53:28:76:b9:ba:7f:f9:37:0a:61:e9:38:35:
17:eb:72:9a:72:aa:91:ed:b3:43:00:54:14:21:4a:5a:f4:a8:
3b:36:1e:79:68:42:48:ff:1c:67:e4:00:b6:b6:97:08:f2:71:
f1:56:aa:74:25:83:0e:84:36:e9:e7:d8:38:a4:53:70:ac:d9:
c9:e8:46:08:79:ed:11:56:90:b1:3d:04:ad:df:8d:9b:a8:0b:
36:1a:83:2e:68:0c:d3:4d:69:92:b9:1c:c6:af:77:93:a1:e6:
8e:97:c7:46:3b:48:f6:e1:51:d2:5b:ca:15:a0:fa:67:42:82:
eb:c1:79:b5:3f:33:84:73:92:39:9a:94:c3:67:56:2b:18:0a:
71:47:ee:50:14:69:1c:ec:db:e1:45:7c:fb:aa:2f:a4:ca:99:
80:00:96:a8:44:da:94:eb:5c:54:a9:c9:1e:19:53:4e:68:d4:
e2:e3:ee:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:13:39 2025 by rpki-client