Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/vdJEIU12Ro0_tyq60Yku8j3t6Xg.mft
File: vdJEIU12Ro0_tyq60Yku8j3t6Xg.mft (raw, json)
Hash identifier: rUaYDoqpltzN9b19SCflW239c64pVo5PKQajMns7QyM=
Subject key identifier: DB:48:CC:2B:95:04:CB:4D:7A:94:F7:73:09:CC:61:82:4F:2A:81:E4
Authority key identifier: BD:D2:44:21:4D:76:46:8D:3F:B7:2A:BA:D1:89:2E:F2:3D:ED:E9:78
Certificate issuer: /CN=bdd244214d76468d3fb72abad1892ef23dede978
Certificate serial: 0198469AF9E1C044FFBC718B11F795F97EAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vdJEIU12Ro0_tyq60Yku8j3t6Xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/vdJEIU12Ro0_tyq60Yku8j3t6Xg.mft
Manifest number: 1658
Signing time: Sat 26 Jul 2025 12:00:18 +0000
Manifest this update: Sat 26 Jul 2025 12:00:18 +0000
Manifest next update: Sun 27 Jul 2025 12:00:18 +0000
Files and hashes: 1: MpUBZneqVecXcQlX3BSOAck4dLY.roa (hash: ENeJkPrdxxjivDiJnHpO/+CgDbk8hQrCxtDjeE3d5+0=)
2: vdJEIU12Ro0_tyq60Yku8j3t6Xg.crl (hash: IbBppKLxKJZ3j/dqV/gCnibgJytZQ+0G/l/G08C8arg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/vdJEIU12Ro0_tyq60Yku8j3t6Xg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/vdJEIU12Ro0_tyq60Yku8j3t6Xg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vdJEIU12Ro0_tyq60Yku8j3t6Xg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:9a:f9:e1:c0:44:ff:bc:71:8b:11:f7:95:f9:7e:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdd244214d76468d3fb72abad1892ef23dede978
Validity
Not Before: Jul 26 12:00:18 2025 GMT
Not After : Jul 27 12:00:18 2025 GMT
Subject: CN=db48cc2b9504cb4d7a94f77309cc61824f2a81e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:01:18:1a:e9:14:fc:93:e3:15:16:de:72:21:
92:8d:f7:9b:41:5e:dd:12:06:00:54:af:86:00:b2:
b8:90:d9:2c:23:52:c4:e0:e5:f0:98:7e:77:53:a0:
41:03:f1:d6:85:5c:a5:0d:17:38:b6:2a:34:80:f2:
0b:64:36:62:91:14:a5:3d:6c:3b:a2:19:cc:f8:2e:
ba:58:a8:e8:1c:f8:f2:29:5c:23:1b:d2:91:1f:93:
fe:18:00:60:a8:0f:d6:9d:76:a5:6e:12:15:23:10:
55:8b:73:0d:34:32:70:62:71:12:6f:01:b0:99:dc:
97:e3:2f:97:47:d9:7a:b0:0c:00:c1:b7:79:8f:76:
56:3f:be:78:d2:9e:91:ce:b3:d2:59:24:43:2c:e7:
8e:8d:1f:e7:04:b7:8c:f5:a3:3f:82:32:5f:77:d0:
32:c1:ab:b2:c3:b2:04:5a:0b:d0:38:9d:66:e8:20:
d1:31:af:4f:c3:3a:98:b8:52:25:ef:92:c3:d4:27:
3b:0a:2c:32:4a:9a:27:c7:1b:70:b9:b3:57:df:1d:
98:e0:72:34:90:6d:ea:a5:3a:95:51:8c:34:d9:70:
2e:ef:32:b8:2e:20:a6:21:c6:c3:a6:e6:cb:b1:1c:
42:ac:f4:69:27:b8:92:e7:54:c4:88:de:fc:3e:23:
4a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:48:CC:2B:95:04:CB:4D:7A:94:F7:73:09:CC:61:82:4F:2A:81:E4
X509v3 Authority Key Identifier:
keyid:BD:D2:44:21:4D:76:46:8D:3F:B7:2A:BA:D1:89:2E:F2:3D:ED:E9:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vdJEIU12Ro0_tyq60Yku8j3t6Xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/vdJEIU12Ro0_tyq60Yku8j3t6Xg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/vdJEIU12Ro0_tyq60Yku8j3t6Xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:1e:10:1a:ec:9d:5f:bc:f2:af:f7:ce:29:8d:e8:5e:f3:69:
dd:4b:1a:8a:5d:eb:3a:2e:07:df:80:14:d4:d2:ae:88:49:9e:
ac:65:99:5d:0b:e8:34:53:12:60:23:fb:d5:e3:6e:7a:09:ae:
81:17:e3:04:96:de:be:ca:fc:57:50:c8:f4:2f:88:c6:73:89:
fc:64:05:d5:b5:fe:91:ea:4f:16:b1:8a:d9:c5:96:fd:58:71:
8e:9a:56:21:cf:9f:b5:b0:12:ab:ac:9e:b6:65:ca:a0:38:32:
20:49:3d:d7:de:ac:fd:7e:40:6d:0b:68:72:98:eb:03:f3:01:
94:98:e6:65:40:f4:df:62:3d:17:6c:11:48:85:dd:72:62:2a:
25:33:46:21:57:e9:78:85:7c:8a:66:71:0e:52:db:dd:5a:86:
72:85:c9:89:00:2c:5e:b8:0d:ed:e8:da:b1:ab:2e:4c:09:6e:
9d:aa:3f:e8:aa:b1:24:0e:3c:6a:64:8e:81:dc:86:db:02:3f:
92:72:ad:26:a9:6a:97:b8:9b:f0:b8:94:a3:21:07:57:ba:f5:
cf:db:84:32:01:18:bb:fe:69:cd:14:61:12:0c:33:15:a9:0e:
79:35:2c:71:f8:00:81:6c:87:94:97:36:5b:95:6b:07:0a:22:
ba:4a:cd:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 15:58:16 2025 by rpki-client