Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.mft
File: i542u2_vkyj1GOSxBfwhLBUqjGg.mft (raw, json)
Hash identifier: V/qc8drYR7IhvZg2aHnTLmta6amVLtM834+gVIaTchk=
Subject key identifier: F2:A0:66:97:24:5B:A7:65:60:39:F7:21:0D:02:4A:BE:28:8A:7C:AE
Authority key identifier: 8B:9E:36:BB:6F:EF:93:28:F5:18:E4:B1:05:FC:21:2C:15:2A:8C:68
Certificate issuer: /CN=8b9e36bb6fef9328f518e4b105fc212c152a8c68
Certificate serial: 019847769E0022282EB217B9C917046F4F45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i542u2_vkyj1GOSxBfwhLBUqjGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.mft
Manifest number: 1602
Signing time: Sat 26 Jul 2025 16:00:12 +0000
Manifest this update: Sat 26 Jul 2025 16:00:12 +0000
Manifest next update: Sun 27 Jul 2025 16:00:12 +0000
Files and hashes: 1: I1KraudGgIPbGqrokKSi33-L_jY.roa (hash: L9033CVRp8ri3N0mtJw6UMfr2TqSPrf8oAPr6Y4O13o=)
2: i542u2_vkyj1GOSxBfwhLBUqjGg.crl (hash: 2s5mi4wTPZ+oPv/SbdTOnO6qxca2LhIAYW4Qe5Si4UA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/i542u2_vkyj1GOSxBfwhLBUqjGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:76:9e:00:22:28:2e:b2:17:b9:c9:17:04:6f:4f:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b9e36bb6fef9328f518e4b105fc212c152a8c68
Validity
Not Before: Jul 26 16:00:12 2025 GMT
Not After : Jul 27 16:00:12 2025 GMT
Subject: CN=f2a06697245ba7656039f7210d024abe288a7cae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:02:a5:88:3a:8e:f1:cf:84:5a:bf:98:31:29:
76:3b:4a:95:9b:49:cf:8e:9f:30:ab:41:8a:e8:55:
75:91:11:8f:64:91:be:0d:05:45:85:43:9a:fc:06:
24:c7:42:ba:f3:5b:c1:d5:15:9b:11:95:59:89:4b:
a4:03:fb:41:57:76:1b:ed:72:1f:32:3f:1d:8c:4e:
4c:0c:89:dc:5a:b7:e0:e9:fa:a6:2e:a5:66:05:a3:
e8:ab:94:8c:58:64:be:d7:5a:45:28:22:ba:e8:aa:
dd:a8:09:c3:8a:2a:7e:5a:66:4e:24:02:0a:3d:a3:
bd:18:6d:0f:ef:66:6b:53:47:5f:44:50:0a:d1:6a:
a0:b4:3c:53:84:ad:4b:54:dc:2c:5e:ba:94:b1:c5:
e1:b0:0d:3a:bc:d5:73:0f:4d:1f:6f:2b:7a:38:ea:
12:a9:27:5b:75:bd:fb:16:c9:8e:c4:8e:ed:37:e2:
6c:77:68:42:ce:d0:c4:cb:64:89:c9:c0:bf:76:4b:
a8:13:5c:d7:06:71:4d:c5:64:82:b8:fa:fd:d1:48:
f5:df:73:72:d5:60:81:74:b0:61:b1:a7:22:e7:e2:
09:12:e0:7f:77:01:87:8e:44:2f:e3:aa:9c:e5:64:
60:3e:13:48:5e:0d:ea:88:ef:9e:45:14:a3:df:c3:
62:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:A0:66:97:24:5B:A7:65:60:39:F7:21:0D:02:4A:BE:28:8A:7C:AE
X509v3 Authority Key Identifier:
keyid:8B:9E:36:BB:6F:EF:93:28:F5:18:E4:B1:05:FC:21:2C:15:2A:8C:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i542u2_vkyj1GOSxBfwhLBUqjGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/4a0e8d-0bbe-4213-98b1-1a116a534483/1/i542u2_vkyj1GOSxBfwhLBUqjGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:0d:a2:3c:4f:a7:1b:86:a2:ce:9d:cd:46:ef:7d:7a:1e:d3:
00:bb:62:0b:c3:71:fa:e3:8f:32:dd:43:71:68:bd:b6:5a:9a:
01:03:fa:6c:b8:0a:60:b9:41:6d:a2:46:7a:81:1e:b9:ae:90:
ee:cf:f5:66:8d:e0:80:51:dc:73:7d:0c:8b:f9:46:13:29:16:
09:ee:54:e6:aa:cb:ff:d3:a5:a3:b3:e5:e8:25:7c:9e:b1:11:
b8:7e:be:19:a2:36:41:2e:2e:2d:94:fa:d7:09:a9:4f:e0:1c:
25:85:fc:28:20:32:3f:ed:94:e0:7a:aa:67:54:c1:f3:be:a1:
ff:f0:02:80:28:a8:f4:ca:81:60:ed:93:8a:9c:cd:ac:98:d8:
eb:b3:ac:51:0c:ab:1f:8d:f7:13:e6:23:ef:42:43:da:13:0d:
33:58:8f:b1:4f:90:be:bc:27:f8:ca:35:59:d2:4b:cf:e8:6d:
0c:b3:83:b9:32:08:90:38:b7:d1:21:07:1f:be:da:79:4a:8d:
8c:52:0e:ae:cc:6c:68:8b:5c:59:68:d9:94:a0:9b:05:f7:d9:
02:a5:da:cf:e4:79:bf:92:11:ca:63:bf:42:b3:44:78:05:50:
a6:c4:c3:8f:15:4c:da:51:7a:db:c6:85:63:2f:63:48:f9:e1:
eb:b8:9e:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:30:37 2025 by rpki-client