Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/61158a-7246-4b47-b496-c40c0dbe1de0/1/vOyMcyqkPvCzm9NNFA_dOnOu23k.mft
File: vOyMcyqkPvCzm9NNFA_dOnOu23k.mft (raw, json)
Hash identifier: koZkIRZ1f5CkfX0k8lyvTitxfplziiWRejgR1fjF27Q=
Subject key identifier: 82:4D:FF:39:1C:BC:62:E5:45:37:E3:B9:E1:05:4E:38:1C:D0:6E:8D
Authority key identifier: BC:EC:8C:73:2A:A4:3E:F0:B3:9B:D3:4D:14:0F:DD:3A:73:AE:DB:79
Certificate issuer: /CN=bcec8c732aa43ef0b39bd34d140fdd3a73aedb79
Certificate serial: 01984399FFE7DB6576B46ECFE1B432A7C458
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vOyMcyqkPvCzm9NNFA_dOnOu23k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/61158a-7246-4b47-b496-c40c0dbe1de0/1/vOyMcyqkPvCzm9NNFA_dOnOu23k.mft
Manifest number: 1601
Signing time: Fri 25 Jul 2025 22:00:22 +0000
Manifest this update: Fri 25 Jul 2025 22:00:22 +0000
Manifest next update: Sat 26 Jul 2025 22:00:22 +0000
Files and hashes: 1: MXOFcfnTUbTG0Z0k6jm9OvZjusI.roa (hash: g12bb8NYsiYXoa8eXe67xmpUlRgVE1p14iprEmnae2Y=)
2: vOyMcyqkPvCzm9NNFA_dOnOu23k.crl (hash: QbV39B+VelFXIX3WBtFVomZSXwZp2/vp8c2eFyXoWTg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/61158a-7246-4b47-b496-c40c0dbe1de0/1/vOyMcyqkPvCzm9NNFA_dOnOu23k.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/61158a-7246-4b47-b496-c40c0dbe1de0/1/vOyMcyqkPvCzm9NNFA_dOnOu23k.mft
rsync://rpki.ripe.net/repository/DEFAULT/vOyMcyqkPvCzm9NNFA_dOnOu23k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 21:50:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:43:99:ff:e7:db:65:76:b4:6e:cf:e1:b4:32:a7:c4:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcec8c732aa43ef0b39bd34d140fdd3a73aedb79
Validity
Not Before: Jul 25 22:00:22 2025 GMT
Not After : Jul 26 22:00:22 2025 GMT
Subject: CN=824dff391cbc62e54537e3b9e1054e381cd06e8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:61:c1:1a:b3:83:61:77:1a:ae:57:e6:7e:4a:
3b:76:b4:d7:21:56:6a:8b:d0:3d:8f:e5:c0:1d:8e:
12:8f:f5:4a:8a:69:aa:16:32:d6:61:31:77:d2:8e:
d8:fc:f1:b5:97:71:7b:27:14:50:02:ca:c5:16:8c:
de:97:77:ec:7b:4e:08:d9:4e:d6:64:b1:bd:25:d7:
26:a4:40:a1:ca:57:a8:d0:1e:3c:19:57:52:ff:9e:
19:6b:e7:97:6f:09:fc:22:88:fc:f1:7b:1e:17:7f:
30:e2:f2:44:21:cf:0d:77:18:82:a6:14:ae:20:c7:
7b:0b:0f:48:6b:bd:46:53:6d:56:4d:ce:3d:02:66:
eb:eb:56:80:db:49:69:88:65:48:39:2b:7d:c1:3e:
e8:65:80:bb:fd:7a:ea:b6:bf:5d:f7:5c:59:36:3a:
02:81:9c:fe:97:37:07:fe:b9:d6:7e:fb:16:3f:7f:
51:ed:9d:04:8e:74:08:26:61:92:1e:69:82:df:d5:
d0:ab:40:0d:b8:18:9f:d8:a9:b8:7e:9d:2b:73:b3:
74:34:41:6a:38:b6:21:03:f0:38:f8:b8:78:78:22:
cb:b1:b1:20:1e:f2:4a:b7:e6:d9:f6:2c:d0:1e:d2:
5e:9c:98:72:ab:26:e5:0d:83:9a:a4:62:cc:62:76:
ba:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:4D:FF:39:1C:BC:62:E5:45:37:E3:B9:E1:05:4E:38:1C:D0:6E:8D
X509v3 Authority Key Identifier:
keyid:BC:EC:8C:73:2A:A4:3E:F0:B3:9B:D3:4D:14:0F:DD:3A:73:AE:DB:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vOyMcyqkPvCzm9NNFA_dOnOu23k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/61158a-7246-4b47-b496-c40c0dbe1de0/1/vOyMcyqkPvCzm9NNFA_dOnOu23k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/61158a-7246-4b47-b496-c40c0dbe1de0/1/vOyMcyqkPvCzm9NNFA_dOnOu23k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:c2:96:d0:db:0f:c7:90:fc:28:5b:4d:e5:c9:58:bb:3b:62:
57:ef:e4:7a:92:10:83:f3:53:02:f5:b3:f4:9d:b5:a9:2e:2b:
4f:12:f6:c8:41:f6:81:c7:01:4c:4b:34:cf:53:df:ad:d8:a7:
3f:35:0e:0e:dc:4e:2e:8f:d6:20:46:24:db:13:88:82:44:09:
17:92:02:d9:3f:76:10:10:f1:52:b6:18:80:82:6c:cc:c6:69:
d1:28:0d:fb:04:7a:78:73:e2:ed:28:0d:69:b2:ef:82:4f:32:
cc:d2:ca:3d:f3:2b:9a:6a:03:a9:36:68:b0:98:00:c2:c8:06:
1d:92:5a:12:83:07:ca:a2:32:4f:f8:55:af:bb:1a:80:56:1b:
b2:07:67:78:b1:9f:53:91:1d:91:c1:fc:e5:7e:46:11:a3:05:
8b:24:d2:dc:0c:c5:73:0b:5e:75:b5:24:4b:56:1e:9f:01:ef:
8e:39:03:4c:2d:c2:5d:af:5c:92:3e:6d:fc:1f:49:aa:37:3d:
db:b9:34:56:de:5f:c9:8f:a9:c5:3c:26:a0:65:3a:b2:36:5b:
e2:16:26:7e:44:a6:ea:fb:a7:35:8c:52:52:64:1b:24:90:76:
d6:78:8b:56:3c:a4:6a:bc:c6:25:75:ed:dc:be:43:d1:ca:c8:
66:4a:e5:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 05:42:34 2025 by rpki-client