Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/239c74-3c43-4251-9a85-9be869a9c60c/1/vRFtNbEck4IzrLrfXXwtWyxtAVQ.mft
File: vRFtNbEck4IzrLrfXXwtWyxtAVQ.mft (raw, json)
Hash identifier: aUxAWJIdL/I8UU+q48kJrl6/Qjudye5JO0CloAh6ZKs=
Subject key identifier: C7:D9:A8:2E:47:F3:D8:0B:0F:87:7A:3C:A8:6D:72:73:5F:BF:96:8E
Authority key identifier: BD:11:6D:35:B1:1C:93:82:33:AC:BA:DF:5D:7C:2D:5B:2C:6D:01:54
Certificate issuer: /CN=bd116d35b11c938233acbadf5d7c2d5b2c6d0154
Certificate serial: 0198488940093C85A7A55AE4263339A9193C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vRFtNbEck4IzrLrfXXwtWyxtAVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/239c74-3c43-4251-9a85-9be869a9c60c/1/vRFtNbEck4IzrLrfXXwtWyxtAVQ.mft
Manifest number: 0C06
Signing time: Sat 26 Jul 2025 21:00:10 +0000
Manifest this update: Sat 26 Jul 2025 21:00:10 +0000
Manifest next update: Sun 27 Jul 2025 21:00:10 +0000
Files and hashes: 1: Z6Q9yfl3feHtt8qjeJosNh_6sQk.roa (hash: GwOmbcb5vlCx0Hzj3NGEHPu2R7jhNAhkCt0fTS4A/18=)
2: vRFtNbEck4IzrLrfXXwtWyxtAVQ.crl (hash: q46kbcBczqJJ9h3BGVQD43P9b06/m91JRtSdbLg/KOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/239c74-3c43-4251-9a85-9be869a9c60c/1/vRFtNbEck4IzrLrfXXwtWyxtAVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/239c74-3c43-4251-9a85-9be869a9c60c/1/vRFtNbEck4IzrLrfXXwtWyxtAVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/vRFtNbEck4IzrLrfXXwtWyxtAVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:89:40:09:3c:85:a7:a5:5a:e4:26:33:39:a9:19:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd116d35b11c938233acbadf5d7c2d5b2c6d0154
Validity
Not Before: Jul 26 21:00:10 2025 GMT
Not After : Jul 27 21:00:10 2025 GMT
Subject: CN=c7d9a82e47f3d80b0f877a3ca86d72735fbf968e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f7:ac:e1:d7:2e:8c:62:54:7d:fe:b0:b7:e7:
42:df:3c:ef:98:ea:f9:d2:05:c7:1b:37:f6:f1:95:
59:54:4d:c1:72:d8:f5:7c:12:39:eb:63:2b:ca:e2:
3a:6f:37:8e:8e:72:ac:7e:58:78:1c:d5:a7:70:10:
6f:89:1a:38:da:3b:96:a4:aa:1c:7e:eb:45:3e:f1:
18:f0:ae:93:bc:ac:98:e9:52:52:1b:0a:cb:1b:34:
58:00:1c:9c:e6:0c:a3:59:56:11:ef:6a:84:ce:19:
cc:88:03:3e:4f:c9:c6:e9:ed:72:8c:d8:b5:91:d2:
34:a3:b8:5f:77:0e:e0:7b:07:9b:d3:c4:b9:e3:5c:
ba:c8:df:78:f5:1c:f2:0e:6f:bb:c3:8a:48:b7:de:
86:76:47:80:be:5b:cd:dd:58:03:85:65:87:9d:dd:
af:9d:39:7b:8a:d5:a6:f4:07:31:87:93:12:11:a2:
7f:a9:64:47:1b:08:16:7b:49:f7:25:11:ed:c9:4a:
a4:17:b6:66:cf:0d:fd:58:c4:58:b1:95:67:e4:40:
b3:b8:15:9b:99:db:b9:9b:48:3d:10:1a:7e:8d:c9:
5b:02:38:92:2a:0f:4d:9f:2f:82:3f:58:4f:a4:c7:
ab:df:c4:ac:d4:b7:8e:cf:6c:e2:b9:fc:54:29:73:
f0:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:D9:A8:2E:47:F3:D8:0B:0F:87:7A:3C:A8:6D:72:73:5F:BF:96:8E
X509v3 Authority Key Identifier:
keyid:BD:11:6D:35:B1:1C:93:82:33:AC:BA:DF:5D:7C:2D:5B:2C:6D:01:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vRFtNbEck4IzrLrfXXwtWyxtAVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/239c74-3c43-4251-9a85-9be869a9c60c/1/vRFtNbEck4IzrLrfXXwtWyxtAVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/239c74-3c43-4251-9a85-9be869a9c60c/1/vRFtNbEck4IzrLrfXXwtWyxtAVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:be:71:51:69:2a:bf:98:58:ac:54:ab:58:e8:8b:27:7b:a3:
2a:d9:99:65:3c:68:da:d5:db:28:38:05:1c:ed:5f:1a:3e:80:
c4:d7:94:80:c6:db:0e:1b:7a:3c:7b:44:9c:2c:54:d5:2e:01:
a5:d2:4c:1c:f6:9e:4d:db:74:2d:34:57:43:cb:bd:9c:62:61:
cf:ea:79:fc:25:cb:2d:85:14:c2:25:29:60:2b:81:ad:5a:0b:
bc:e0:e2:bb:03:6e:e1:93:3a:1e:64:1f:92:e4:e9:cc:cb:c4:
02:fd:20:61:52:7f:6f:d8:d2:98:f1:e2:e0:02:c9:e2:c2:b7:
12:5e:ad:14:0d:91:6f:7d:18:4c:2c:05:d6:ab:db:f4:bf:14:
7a:e2:69:e6:c6:6e:2a:cd:ec:60:06:ef:08:d7:9b:09:c8:42:
6e:f7:79:03:a5:49:22:e1:dd:ee:cc:bb:69:ab:e8:57:0f:ec:
ef:e0:6c:fa:d7:91:e5:47:a4:b3:da:94:4f:25:39:93:ea:f6:
38:37:75:81:1f:fa:28:6e:13:68:3c:c6:37:13:85:9b:a1:d7:
4a:43:02:1a:f5:9e:b2:99:93:ce:f8:49:8b:3c:65:36:8b:de:
67:f7:61:16:a8:c0:9b:f3:f4:fa:8f:4b:51:0a:a6:ae:29:f8:
a6:23:3e:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 04:45:30 2025 by rpki-client