Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/4992b6-fdae-4c9f-bf3e-95c8942df724/1/vJ8LmsHVZS89yh7xYjv5mrKWR98.mft
File: vJ8LmsHVZS89yh7xYjv5mrKWR98.mft (raw, json)
Hash identifier: 7NUp/ZuwTlX9AYg7shTbdueTm603tixRQCBG3g018kg=
Subject key identifier: 87:E4:BF:08:71:89:E8:61:2C:59:0B:4E:46:80:72:BA:64:82:3B:CF
Authority key identifier: BC:9F:0B:9A:C1:D5:65:2F:3D:CA:1E:F1:62:3B:F9:9A:B2:96:47:DF
Certificate issuer: /CN=bc9f0b9ac1d5652f3dca1ef1623bf99ab29647df
Certificate serial: 019922C3B4BE9D8D0C3993F2C6F57848B573
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJ8LmsHVZS89yh7xYjv5mrKWR98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/4992b6-fdae-4c9f-bf3e-95c8942df724/1/vJ8LmsHVZS89yh7xYjv5mrKWR98.mft
Manifest number: 1673
Signing time: Sun 07 Sep 2025 06:01:14 +0000
Manifest this update: Sun 07 Sep 2025 06:01:14 +0000
Manifest next update: Mon 08 Sep 2025 06:01:14 +0000
Files and hashes: 1: FrLoQw9Tk2q53G3qePuE3CPqiJw.roa (hash: w3xxWOqtTqCnhtgzBMiz0Hnx9M0t8vYZOEOxsv+EFns=)
2: XuWyQ_h13oHMYelX1eEehMBE4QM.roa (hash: 55GFOmkogCsmTmcypUyvrH3xFalGu40zdpw3o3u8qPY=)
3: vJ8LmsHVZS89yh7xYjv5mrKWR98.crl (hash: q+5/ZUGU2Tl5Cl4mrJfyGFHLXgLn9pZqElsBTRNggdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/4992b6-fdae-4c9f-bf3e-95c8942df724/1/vJ8LmsHVZS89yh7xYjv5mrKWR98.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/4992b6-fdae-4c9f-bf3e-95c8942df724/1/vJ8LmsHVZS89yh7xYjv5mrKWR98.mft
rsync://rpki.ripe.net/repository/DEFAULT/vJ8LmsHVZS89yh7xYjv5mrKWR98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:b4:be:9d:8d:0c:39:93:f2:c6:f5:78:48:b5:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc9f0b9ac1d5652f3dca1ef1623bf99ab29647df
Validity
Not Before: Sep 7 06:01:14 2025 GMT
Not After : Sep 8 06:01:14 2025 GMT
Subject: CN=87e4bf087189e8612c590b4e468072ba64823bcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:8d:9e:88:3f:6f:e4:7f:f0:02:0f:01:76:34:
55:53:8a:1d:25:30:90:dc:3c:f3:66:a8:a4:10:56:
43:27:32:4f:d8:60:99:29:7e:29:6b:ab:cf:75:8c:
86:03:a6:66:09:61:71:37:80:50:80:4f:4a:40:9e:
a6:38:27:b2:94:cc:cb:01:fe:ed:f1:fe:18:f1:46:
ae:ac:a4:15:92:1d:78:32:a1:7c:f8:9d:2f:c1:89:
5d:f0:b6:bf:ac:93:47:16:6b:3f:81:92:33:11:91:
9c:59:a6:13:93:d3:88:17:87:cd:0f:ef:49:cc:9d:
a1:5a:df:43:46:58:1e:7e:a2:f2:7c:93:e8:a8:50:
5e:d7:32:29:32:67:08:0f:0e:45:7a:71:56:87:fd:
c3:c7:ab:35:aa:fa:01:5f:20:05:8e:01:94:f8:2b:
cd:9a:55:b4:73:f7:bb:98:0c:0a:63:d2:b8:c3:09:
31:34:6f:14:a5:2c:ea:d9:d8:f7:e2:9a:7e:cc:df:
29:69:ca:fd:4c:81:93:44:c0:ad:71:93:fb:43:66:
7f:b7:4a:2c:71:16:45:7a:2e:d9:48:6a:5b:bc:63:
47:ac:a6:d1:e1:56:80:c6:2d:f9:f2:28:8b:da:ad:
7a:31:cc:09:cb:7e:eb:2e:64:a2:64:98:f0:e7:41:
52:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:E4:BF:08:71:89:E8:61:2C:59:0B:4E:46:80:72:BA:64:82:3B:CF
X509v3 Authority Key Identifier:
keyid:BC:9F:0B:9A:C1:D5:65:2F:3D:CA:1E:F1:62:3B:F9:9A:B2:96:47:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJ8LmsHVZS89yh7xYjv5mrKWR98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4992b6-fdae-4c9f-bf3e-95c8942df724/1/vJ8LmsHVZS89yh7xYjv5mrKWR98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4992b6-fdae-4c9f-bf3e-95c8942df724/1/vJ8LmsHVZS89yh7xYjv5mrKWR98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:28:d2:83:49:ef:e1:d7:5f:ed:4b:de:97:ce:2f:4d:53:49:
23:33:af:4c:f6:ec:17:bb:72:9a:f0:2b:8e:61:ee:2e:c0:7a:
ca:48:73:ac:f3:77:7d:05:ed:43:a8:ab:7b:3a:62:e0:e7:0a:
dd:6f:55:42:2f:63:8d:c6:59:a0:e3:9a:33:47:a5:66:d6:f7:
0c:17:88:be:ee:a3:eb:19:f5:54:43:37:74:c5:5d:66:3c:e4:
97:d0:7f:75:8e:06:c6:2a:e3:39:88:fc:f3:19:2e:62:21:f8:
6e:a1:9a:d1:ec:64:7c:bc:52:8c:66:d2:bc:03:59:4b:fb:4f:
26:64:1b:d6:92:47:6b:58:c2:e3:00:3f:df:bb:f8:a2:81:f6:
f6:ee:46:17:d3:07:14:58:6e:f0:5b:56:a0:70:0a:5c:78:75:
6c:88:5a:ea:e5:d6:d7:af:05:35:ce:80:ee:21:73:6b:6c:71:
c8:2e:38:bf:7a:3e:ac:71:34:0f:4e:77:2d:a9:c2:05:87:5a:
63:90:b3:5e:3c:4d:d9:43:0c:40:5f:3e:33:72:a0:3d:d5:b0:
e4:32:7d:ef:d9:3d:f4:6f:80:fb:b0:1e:3a:f5:37:66:81:c1:
4d:02:61:90:55:e8:cd:cd:01:6c:25:03:9d:46:38:fd:ee:5c:
de:f0:04:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:04:33 2025 by rpki-client