Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/b41866-0578-4557-978a-76c2920ec333/1/vOLbTWWaY-QstUTFf5mjNvfZjtA.mft
File: vOLbTWWaY-QstUTFf5mjNvfZjtA.mft (raw, json)
Hash identifier: GyVxDRUB39b4/XFzQbwtBweLXSQOBqOjGI4MvXwkUuY=
Subject key identifier: 47:E0:B2:37:66:8C:37:16:8F:2C:05:EA:2C:68:06:79:4E:54:87:EF
Authority key identifier: BC:E2:DB:4D:65:9A:63:E4:2C:B5:44:C5:7F:99:A3:36:F7:D9:8E:D0
Certificate issuer: /CN=bce2db4d659a63e42cb544c57f99a336f7d98ed0
Certificate serial: 019845BF5A6A5840F07024EA4614B264E785
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vOLbTWWaY-QstUTFf5mjNvfZjtA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/b41866-0578-4557-978a-76c2920ec333/1/vOLbTWWaY-QstUTFf5mjNvfZjtA.mft
Manifest number: 0142
Signing time: Sat 26 Jul 2025 08:00:25 +0000
Manifest this update: Sat 26 Jul 2025 08:00:25 +0000
Manifest next update: Sun 27 Jul 2025 08:00:25 +0000
Files and hashes: 1: Kyy8GZTzk5jbpc-sQWZN_GCAwek.roa (hash: 0Z7eyKyncAl0NjLC6raqvRk4YOeLcpvsAk5XysLATes=)
2: vOLbTWWaY-QstUTFf5mjNvfZjtA.crl (hash: YtsD3jbsL5fejAMO55E18faPN8a0WSvauW6mAsnVU2c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/b41866-0578-4557-978a-76c2920ec333/1/vOLbTWWaY-QstUTFf5mjNvfZjtA.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/b41866-0578-4557-978a-76c2920ec333/1/vOLbTWWaY-QstUTFf5mjNvfZjtA.mft
rsync://rpki.ripe.net/repository/DEFAULT/vOLbTWWaY-QstUTFf5mjNvfZjtA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:bf:5a:6a:58:40:f0:70:24:ea:46:14:b2:64:e7:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bce2db4d659a63e42cb544c57f99a336f7d98ed0
Validity
Not Before: Jul 26 08:00:25 2025 GMT
Not After : Jul 27 08:00:25 2025 GMT
Subject: CN=47e0b237668c37168f2c05ea2c6806794e5487ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:23:f4:51:de:41:0c:8e:6c:14:25:47:79:6f:
a6:ac:b7:51:3a:7c:bf:2a:62:0f:a7:44:d4:18:49:
1b:d2:54:9f:95:cc:cf:95:27:65:b5:8d:cf:3f:76:
d7:4d:7e:cf:b2:69:9f:ec:af:35:98:b3:d7:94:2d:
6d:23:52:26:f5:8b:f8:2b:26:5c:5b:b8:f3:0d:32:
08:05:83:2b:d9:3e:3f:79:23:49:d0:71:47:8c:36:
a9:0c:dc:1f:06:6a:67:6b:73:43:7b:6a:77:63:75:
74:b5:f4:3e:d4:39:34:25:80:5e:db:4f:55:fe:d3:
38:e7:7a:57:a7:f0:33:13:0b:21:f8:7b:1a:d1:0d:
46:4e:4a:57:74:3f:db:ba:ae:c7:2b:46:e4:9d:b6:
19:65:77:7a:2e:bf:1f:63:37:46:1c:34:8e:5b:c0:
fa:4f:ee:75:2a:a1:ee:e5:0b:d9:9c:0d:12:8a:79:
64:74:7e:e2:15:b6:22:c3:6f:97:3a:c1:f1:99:e2:
42:40:d3:08:1d:a3:85:8d:85:dd:37:9e:b6:81:d7:
e7:35:85:a7:8d:4b:37:aa:d4:db:18:99:d4:2b:e9:
1b:4d:af:63:55:5e:50:a1:3c:98:f9:e8:52:bc:08:
93:da:d8:bc:e8:07:95:d4:cf:38:aa:58:f5:67:8a:
a9:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:E0:B2:37:66:8C:37:16:8F:2C:05:EA:2C:68:06:79:4E:54:87:EF
X509v3 Authority Key Identifier:
keyid:BC:E2:DB:4D:65:9A:63:E4:2C:B5:44:C5:7F:99:A3:36:F7:D9:8E:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vOLbTWWaY-QstUTFf5mjNvfZjtA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b41866-0578-4557-978a-76c2920ec333/1/vOLbTWWaY-QstUTFf5mjNvfZjtA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/b41866-0578-4557-978a-76c2920ec333/1/vOLbTWWaY-QstUTFf5mjNvfZjtA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:19:ed:b1:eb:4c:a6:55:f9:6e:8b:07:ec:87:3d:98:bc:43:
22:51:cb:f5:0e:8e:ec:b9:c6:29:a5:a2:36:4b:9c:8b:ea:8f:
ac:90:06:0d:6c:be:65:bc:bc:f4:2d:c9:a9:b0:6c:cd:be:d3:
e0:2e:1d:86:67:99:8b:4e:6b:0a:c1:26:71:72:ff:b4:9a:93:
26:be:8d:1b:3e:a5:c3:69:d5:a3:cd:51:ef:47:dc:c6:47:08:
ee:a0:cd:c1:f7:f4:a2:c2:3f:ac:27:56:a3:18:4f:32:9e:a1:
89:5f:12:9e:66:b9:42:72:fa:96:f2:03:66:0f:6f:ad:52:e4:
f2:7a:e8:89:97:64:72:1a:ef:2c:13:50:ba:53:45:11:d3:4a:
dc:03:7f:d1:c9:c6:45:60:47:85:0d:b5:75:76:13:26:0f:b0:
6d:a9:9b:64:c7:45:b0:a7:f0:99:a9:10:b9:04:7e:a2:c5:32:
f5:fa:35:8f:c8:58:85:d5:6e:2f:f4:4e:84:06:28:d8:c7:be:
9c:60:b8:ba:4e:f5:af:d1:57:5f:fe:0f:6e:13:23:ee:42:52:
73:34:31:b4:91:ef:fc:a8:c5:cd:df:c4:2f:14:bb:31:2f:c4:
11:1d:53:1e:6e:e0:95:71:bc:d3:a5:e4:ef:67:00:6a:8b:51:
d6:99:82:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:52:20 2025 by rpki-client