Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3f19f9-8395-4088-af17-e5ca67c11533/1/vPnwsJRzjFKC-_SzBnDsX9y1id8.mft
File: vPnwsJRzjFKC-_SzBnDsX9y1id8.mft (raw, json)
Hash identifier: 2zQGn4i//JEBD8xhojMlwoR9m4nUtpk2bbxeII0RT18=
Subject key identifier: 0D:C0:33:2E:9C:6E:20:C9:1D:B2:15:7D:DB:85:70:5E:62:C8:42:59
Authority key identifier: BC:F9:F0:B0:94:73:8C:52:82:FB:F4:B3:06:70:EC:5F:DC:B5:89:DF
Certificate issuer: /CN=bcf9f0b094738c5282fbf4b30670ec5fdcb589df
Certificate serial: 0199180AAB9B73BC1DC4CBE0A6E304A8AE70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vPnwsJRzjFKC-_SzBnDsX9y1id8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3f19f9-8395-4088-af17-e5ca67c11533/1/vPnwsJRzjFKC-_SzBnDsX9y1id8.mft
Manifest number: 166A
Signing time: Fri 05 Sep 2025 04:02:56 +0000
Manifest this update: Fri 05 Sep 2025 04:02:56 +0000
Manifest next update: Sat 06 Sep 2025 04:02:56 +0000
Files and hashes: 1: GcXZXurTGrAnFXKjvUHU9XD_YyQ.roa (hash: CVqER74xo0XyQrFlwwf0CdK9BC9SAVXvCBJxlFB4CBw=)
2: vPnwsJRzjFKC-_SzBnDsX9y1id8.crl (hash: JmjlaoQQx+NeBW/1hT9bX/AOEv3J/YTj0qLjXfyHuk0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/3f19f9-8395-4088-af17-e5ca67c11533/1/vPnwsJRzjFKC-_SzBnDsX9y1id8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/3f19f9-8395-4088-af17-e5ca67c11533/1/vPnwsJRzjFKC-_SzBnDsX9y1id8.mft
rsync://rpki.ripe.net/repository/DEFAULT/vPnwsJRzjFKC-_SzBnDsX9y1id8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:18:0a:ab:9b:73:bc:1d:c4:cb:e0:a6:e3:04:a8:ae:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcf9f0b094738c5282fbf4b30670ec5fdcb589df
Validity
Not Before: Sep 5 04:02:56 2025 GMT
Not After : Sep 6 04:02:56 2025 GMT
Subject: CN=0dc0332e9c6e20c91db2157ddb85705e62c84259
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:cc:4b:05:32:e0:c6:6b:04:9b:43:de:8a:fc:
a3:24:db:fb:bd:12:a9:a2:07:3f:d7:29:1f:d7:f5:
21:67:89:4d:3f:40:5f:59:1a:83:c6:d3:b9:fc:a0:
41:43:28:2d:8c:d3:b7:87:e9:d8:26:dc:e3:de:d9:
c8:93:7b:75:1d:8e:be:da:a5:51:6d:a5:bb:7b:36:
c5:18:11:3f:6d:50:e9:d6:f6:e1:08:48:5a:b0:18:
1a:d5:dd:28:68:66:17:b5:14:2e:e1:90:eb:77:36:
3c:68:8b:77:ab:72:81:6a:f3:4c:5c:f5:83:97:32:
68:12:aa:fc:22:71:e0:70:b5:11:68:2e:23:45:96:
f3:94:19:81:76:a3:f7:e4:0c:6e:e9:40:d1:72:81:
8a:0d:0b:f2:f3:8e:ca:a1:49:11:61:f8:d6:69:2f:
ea:0a:72:2d:4b:e0:b7:51:0e:a1:99:b3:d2:4c:a1:
11:9f:89:c3:f6:ee:c0:38:b0:f5:33:8d:1a:61:a3:
02:f4:2f:21:a5:4f:d9:65:0d:34:b4:2f:45:6f:39:
86:f0:ff:92:94:0f:78:3c:24:eb:0d:95:28:41:5b:
85:49:b7:68:0d:e6:77:58:7e:ff:45:f7:fe:5f:73:
2b:5b:98:81:31:31:9f:32:5e:a2:74:55:65:52:26:
38:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:C0:33:2E:9C:6E:20:C9:1D:B2:15:7D:DB:85:70:5E:62:C8:42:59
X509v3 Authority Key Identifier:
keyid:BC:F9:F0:B0:94:73:8C:52:82:FB:F4:B3:06:70:EC:5F:DC:B5:89:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vPnwsJRzjFKC-_SzBnDsX9y1id8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3f19f9-8395-4088-af17-e5ca67c11533/1/vPnwsJRzjFKC-_SzBnDsX9y1id8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3f19f9-8395-4088-af17-e5ca67c11533/1/vPnwsJRzjFKC-_SzBnDsX9y1id8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:46:fc:fc:9e:a3:8d:0b:43:72:29:66:e1:0c:cb:13:4a:9b:
1e:21:5e:da:8c:8e:e3:c6:97:7c:b9:59:ad:cc:99:08:18:1d:
5f:09:36:3a:a6:ba:63:56:e9:cd:4c:ae:0f:97:50:3d:19:b2:
f6:82:be:a2:ff:52:7b:36:f1:52:a0:94:57:34:9a:3f:25:a2:
ec:60:cd:64:58:b5:a8:46:60:7b:5f:1c:39:d5:c4:c4:bc:f3:
f8:bf:e2:f0:51:fd:00:7c:58:9d:f4:e1:c2:67:31:bf:78:53:
20:53:af:c0:5f:e3:1a:d4:e1:77:7c:0d:f3:55:e2:ce:72:4c:
c8:32:ab:56:8a:bc:14:cd:24:98:e5:28:5b:81:9b:2c:c4:08:
d0:b3:12:fe:97:8f:d2:7b:9e:a9:05:5b:62:b4:0b:f0:de:1a:
dd:34:ca:a6:b0:1e:74:48:c6:71:d5:11:d1:91:32:a5:fe:7d:
31:37:e8:96:18:52:cf:e0:a8:d7:63:3e:75:56:54:a9:84:30:
77:ca:10:ec:f0:af:09:a2:e2:fd:51:0b:2f:8e:1f:12:73:c0:
2d:3b:42:75:dd:b4:3f:a2:76:23:8b:4d:f4:fd:d0:bb:66:94:
83:8f:41:a0:3c:fa:84:d2:9d:29:39:c6:86:dc:c1:50:d3:d8:
1c:92:13:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 06:04:32 2025 by rpki-client