Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/vCDUGtNXDtiIw7mjlYQ9KMS95w4.mft
File: vCDUGtNXDtiIw7mjlYQ9KMS95w4.mft (raw, json)
Hash identifier: dhG9PQ9cMB1ccRkZuCWLkVR5BqRG0Mqkuhhg9e6rmwI=
Subject key identifier: 22:37:A0:40:20:64:50:96:EC:90:C6:2E:C3:A0:7E:CC:C7:D0:FD:8F
Authority key identifier: BC:20:D4:1A:D3:57:0E:D8:88:C3:B9:A3:95:84:3D:28:C4:BD:E7:0E
Certificate issuer: /CN=bc20d41ad3570ed888c3b9a395843d28c4bde70e
Certificate serial: 019849D32819D988847BAEE927A4D738369F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vCDUGtNXDtiIw7mjlYQ9KMS95w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/vCDUGtNXDtiIw7mjlYQ9KMS95w4.mft
Manifest number: 1606
Signing time: Sun 27 Jul 2025 03:00:31 +0000
Manifest this update: Sun 27 Jul 2025 03:00:31 +0000
Manifest next update: Mon 28 Jul 2025 03:00:31 +0000
Files and hashes: 1: 2_V6lJnSbHp-dXL7YMoo09f6snw.roa (hash: OhjwpaD5BnWeaMwPzsn2/JlXIUwI6tpxdz7vTY63lGM=)
2: vCDUGtNXDtiIw7mjlYQ9KMS95w4.crl (hash: hqM3IrctDQ3lnFjDk8GA++7k3DTr8t5mtDJx9feaAok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/vCDUGtNXDtiIw7mjlYQ9KMS95w4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/vCDUGtNXDtiIw7mjlYQ9KMS95w4.mft
rsync://rpki.ripe.net/repository/DEFAULT/vCDUGtNXDtiIw7mjlYQ9KMS95w4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:28:19:d9:88:84:7b:ae:e9:27:a4:d7:38:36:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc20d41ad3570ed888c3b9a395843d28c4bde70e
Validity
Not Before: Jul 27 03:00:31 2025 GMT
Not After : Jul 28 03:00:31 2025 GMT
Subject: CN=2237a04020645096ec90c62ec3a07eccc7d0fd8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b3:21:96:5d:23:13:ed:f7:1a:7d:13:dd:65:
82:da:ad:66:97:43:8b:23:9a:f7:27:39:cd:4c:44:
2e:70:c4:56:26:15:43:75:4d:f9:dd:46:41:1d:78:
db:b4:5b:ad:68:5f:0e:70:10:f1:cf:5f:49:f5:7a:
19:64:45:a6:fb:a4:6a:5c:5a:94:8c:eb:f7:97:3f:
05:8c:34:33:c0:cc:72:cd:d8:fe:ce:80:16:63:5c:
13:8b:07:a8:58:07:ae:a4:7a:e0:93:cd:bc:bb:eb:
c5:f2:da:99:5b:e0:37:af:48:42:18:78:78:aa:f9:
4a:15:ed:fa:47:de:08:6a:6e:a4:25:fd:a2:3f:06:
8f:a5:57:4e:d5:74:e6:8e:e5:a3:50:f3:8f:c3:29:
17:84:ec:d6:33:7c:7e:40:6f:92:3a:23:37:00:c7:
47:a0:43:39:ff:3f:d2:84:d1:12:56:cd:da:3a:cf:
a1:d0:46:2f:3e:74:5f:af:1d:61:99:f2:e6:6b:8d:
88:39:aa:2a:a8:96:12:f4:88:4a:cc:c7:e0:4f:3c:
2d:6f:fc:a5:5e:88:f5:57:2f:bb:2c:b1:21:45:3b:
27:79:14:09:c4:73:60:df:1d:17:68:43:ae:70:57:
e9:7d:99:c1:de:ff:64:76:1e:7f:7d:2a:2b:33:ca:
66:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:37:A0:40:20:64:50:96:EC:90:C6:2E:C3:A0:7E:CC:C7:D0:FD:8F
X509v3 Authority Key Identifier:
keyid:BC:20:D4:1A:D3:57:0E:D8:88:C3:B9:A3:95:84:3D:28:C4:BD:E7:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vCDUGtNXDtiIw7mjlYQ9KMS95w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/vCDUGtNXDtiIw7mjlYQ9KMS95w4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/vCDUGtNXDtiIw7mjlYQ9KMS95w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:7f:91:3e:97:e2:40:84:b4:6b:b7:cc:74:cf:56:da:28:ee:
47:60:52:81:d9:c1:6b:4c:af:2d:c6:b8:a9:d5:5b:b0:f2:40:
d5:5c:5c:3c:af:04:41:c6:08:aa:b2:ce:47:d6:67:6a:f7:81:
af:76:8f:e8:77:2d:8a:2e:a0:f5:c1:00:69:78:f1:0c:9f:ee:
92:f5:0b:8a:0c:f8:8d:9f:d2:1d:12:34:09:39:31:2e:bb:fa:
76:1e:c9:55:d6:3f:19:66:6d:db:85:fd:4d:20:dc:1c:06:82:
8e:b6:e6:11:da:66:c5:80:28:18:de:4f:8b:43:a5:c0:35:89:
c1:01:2e:d1:ef:7d:f7:b8:07:92:bd:13:c1:dc:d4:fb:6a:10:
f1:8b:fb:90:9b:c0:59:e1:a3:4b:d1:c7:cb:0d:70:2c:29:d5:
92:16:38:3e:d3:6e:54:da:cf:c8:9d:27:c1:21:98:53:19:17:
0b:18:34:b6:1a:84:61:9c:27:98:03:4a:7f:f8:c1:e9:7a:40:
78:af:17:ab:73:3d:eb:24:b4:f2:82:5f:66:67:48:54:70:78:
07:b0:e4:23:cb:a6:bf:8c:78:c5:7f:67:21:6b:9a:3c:20:45:
7e:92:e3:5e:ca:8a:06:6d:8a:93:a5:a2:cf:15:b6:20:ff:9e:
36:87:80:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:27:02 2025 by rpki-client