Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/1bdbf8-395f-4a85-a44a-b51adffc6eec/1/vh89wilTBsx9-HLO7M1olNDg6uY.mft
File: vh89wilTBsx9-HLO7M1olNDg6uY.mft (raw, json)
Hash identifier: BjxVQTY2IsLVoMQ5dLMA1J7s0bSfudkXH8nxHM5qS4s=
Subject key identifier: 7F:D7:42:D9:4E:D5:D1:27:EA:4A:6F:B6:00:FB:96:85:82:50:91:27
Authority key identifier: BE:1F:3D:C2:29:53:06:CC:7D:F8:72:CE:EC:CD:68:94:D0:E0:EA:E6
Certificate issuer: /CN=be1f3dc2295306cc7df872ceeccd6894d0e0eae6
Certificate serial: 0199221E4F11D52F0ECC50B52A35680AB30D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vh89wilTBsx9-HLO7M1olNDg6uY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/1bdbf8-395f-4a85-a44a-b51adffc6eec/1/vh89wilTBsx9-HLO7M1olNDg6uY.mft
Manifest number: 078F
Signing time: Sun 07 Sep 2025 03:00:35 +0000
Manifest this update: Sun 07 Sep 2025 03:00:35 +0000
Manifest next update: Mon 08 Sep 2025 03:00:35 +0000
Files and hashes: 1: 1DMwz6cy5-zMTggYwJ41QekWZIY.roa (hash: nwmEuQjAVrxnR0Ze+XAFnQ4uH1WM0zEOCcXND1iguH8=)
2: tAG_ogHK36F9dYARrabqMiVm7WI.roa (hash: XyLTR6YvVH7wVie2ZS7kPXzKlWsXCj8THEJuI5lJwIg=)
3: vh89wilTBsx9-HLO7M1olNDg6uY.crl (hash: nPKWtNLL9vFfe4U/GWoyGJHFLOPHvN2DJbdFCc+0KuY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/1bdbf8-395f-4a85-a44a-b51adffc6eec/1/vh89wilTBsx9-HLO7M1olNDg6uY.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/1bdbf8-395f-4a85-a44a-b51adffc6eec/1/vh89wilTBsx9-HLO7M1olNDg6uY.mft
rsync://rpki.ripe.net/repository/DEFAULT/vh89wilTBsx9-HLO7M1olNDg6uY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:4f:11:d5:2f:0e:cc:50:b5:2a:35:68:0a:b3:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be1f3dc2295306cc7df872ceeccd6894d0e0eae6
Validity
Not Before: Sep 7 03:00:35 2025 GMT
Not After : Sep 8 03:00:35 2025 GMT
Subject: CN=7fd742d94ed5d127ea4a6fb600fb968582509127
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:5b:96:bf:34:3c:7e:25:47:e1:d1:a8:d8:6a:
e7:33:6a:02:64:de:00:fd:f1:6e:eb:66:b9:ba:79:
d6:5a:76:91:3f:64:2e:89:8a:7a:8f:56:25:08:d6:
23:0d:f6:83:3e:e5:14:9c:00:34:c8:1c:1b:d9:82:
8f:de:cc:a0:6a:68:b1:10:cd:47:6d:2f:69:62:62:
ab:68:1d:58:72:43:4b:86:40:68:17:0a:7e:75:93:
c7:37:6f:86:c9:cc:82:61:3a:7e:c2:03:97:c9:2a:
f9:8b:62:aa:3d:95:b4:82:97:d3:5d:a6:6a:ca:42:
db:96:7d:69:18:bd:15:11:c3:39:cc:df:f1:78:a7:
cb:a9:fc:56:e1:65:28:2d:fc:8b:83:3a:aa:a5:7d:
fb:1f:e2:86:66:b4:4b:48:21:59:8c:0a:e6:72:e5:
d1:22:25:77:19:fa:c7:8a:7d:2d:d0:76:4a:cd:53:
29:62:cf:87:3c:03:98:ef:52:45:32:56:99:39:46:
02:e6:3b:b1:d2:67:36:19:c4:e1:0d:81:d4:df:b8:
e9:9e:07:a2:ec:dd:fe:b7:12:d1:a3:d6:2b:da:1b:
58:12:9d:db:b9:6c:7f:1c:71:c5:d5:e1:c0:cc:7b:
d3:3f:ef:61:9f:21:a8:8e:c5:6b:3f:4e:b6:5d:f6:
48:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:D7:42:D9:4E:D5:D1:27:EA:4A:6F:B6:00:FB:96:85:82:50:91:27
X509v3 Authority Key Identifier:
keyid:BE:1F:3D:C2:29:53:06:CC:7D:F8:72:CE:EC:CD:68:94:D0:E0:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vh89wilTBsx9-HLO7M1olNDg6uY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1bdbf8-395f-4a85-a44a-b51adffc6eec/1/vh89wilTBsx9-HLO7M1olNDg6uY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/1bdbf8-395f-4a85-a44a-b51adffc6eec/1/vh89wilTBsx9-HLO7M1olNDg6uY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:59:35:56:ad:e6:35:49:d6:02:d6:1c:ef:68:f4:e0:84:b7:
21:06:88:fa:f9:06:18:8c:33:d9:da:bf:20:f1:50:d0:cf:57:
c0:23:22:9d:41:1c:d2:e4:f1:ac:d0:22:2d:80:b9:af:39:f3:
6c:54:9a:64:f5:c5:e7:10:aa:6b:da:de:52:e6:2c:89:2d:78:
c6:d8:2d:1c:21:d8:c6:c6:ec:b7:16:cd:6c:64:40:00:ce:e9:
f1:b3:94:0f:75:50:ef:d3:b4:82:ae:68:94:fc:ac:29:bd:72:
1e:6e:80:ef:5e:b6:50:5a:51:58:47:8a:ec:dd:8f:92:e7:17:
08:7b:d9:1e:1a:d0:14:47:29:1a:4d:4f:b5:0d:8d:40:26:33:
d6:1a:fb:16:83:f6:87:92:6c:11:af:14:92:de:0b:62:44:d9:
08:e0:7c:1d:e2:79:7b:6b:44:a8:d1:6e:7e:55:62:44:80:d9:
6f:3e:5f:1a:50:b5:ca:8a:e3:ff:a9:f4:61:44:25:d6:20:2c:
1c:b6:f2:48:0d:bf:a2:0a:cd:ce:98:16:9a:13:77:2b:73:38:
3d:7e:26:c4:bb:0d:4d:80:0a:42:b0:5f:18:01:50:cb:a2:de:
3b:bf:bc:2a:b1:e5:49:f1:af:9c:91:62:0c:12:83:0c:c0:61:
7c:e3:47:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:26:24 2025 by rpki-client