Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/ca31df-7c9c-44ef-9ddc-776915488225/1/vR211yi9J2tMdS4SWlCP-HhK0oU.mft
File: vR211yi9J2tMdS4SWlCP-HhK0oU.mft (raw, json)
Hash identifier: fHqyWEzNUTE9kvYx159i4zjOV2hrWCZY+sbxpZVZUsw=
Subject key identifier: D6:E7:73:1C:D4:D9:95:FF:F6:42:0A:F3:0E:5E:24:9D:7E:33:6C:D8
Authority key identifier: BD:1D:B5:D7:28:BD:27:6B:4C:75:2E:12:5A:50:8F:F8:78:4A:D2:85
Certificate issuer: /CN=bd1db5d728bd276b4c752e125a508ff8784ad285
Certificate serial: 0199239ED3674FE9B42AFF538FDB7E521FCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vR211yi9J2tMdS4SWlCP-HhK0oU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/ca31df-7c9c-44ef-9ddc-776915488225/1/vR211yi9J2tMdS4SWlCP-HhK0oU.mft
Manifest number: 1218
Signing time: Sun 07 Sep 2025 10:00:35 +0000
Manifest this update: Sun 07 Sep 2025 10:00:35 +0000
Manifest next update: Mon 08 Sep 2025 10:00:35 +0000
Files and hashes: 1: 7IfWcJSratNnlfLMrnbIuQWgR8I.roa (hash: S2czlmmJLkq2AObWA1vCv3NtLmwVMJ2FnTs6ITj1XcQ=)
2: vR211yi9J2tMdS4SWlCP-HhK0oU.crl (hash: F4I01M2+PaqXNrtLd2UBxkM5mLOjQyCGkOoFYFiR2kA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/ca31df-7c9c-44ef-9ddc-776915488225/1/vR211yi9J2tMdS4SWlCP-HhK0oU.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/ca31df-7c9c-44ef-9ddc-776915488225/1/vR211yi9J2tMdS4SWlCP-HhK0oU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vR211yi9J2tMdS4SWlCP-HhK0oU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9e:d3:67:4f:e9:b4:2a:ff:53:8f:db:7e:52:1f:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd1db5d728bd276b4c752e125a508ff8784ad285
Validity
Not Before: Sep 7 10:00:35 2025 GMT
Not After : Sep 8 10:00:35 2025 GMT
Subject: CN=d6e7731cd4d995fff6420af30e5e249d7e336cd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d5:66:be:a7:bd:17:1f:c7:27:53:9f:21:3e:
28:8e:08:db:9c:4e:fb:0e:fb:0a:56:2f:99:0e:38:
d4:06:41:32:0d:a5:58:c3:96:e4:37:66:4c:7a:3c:
62:00:69:a0:3f:a4:48:28:e7:46:8c:72:14:35:c5:
fe:06:7f:ff:37:8e:02:00:c0:a8:aa:62:66:08:c1:
3e:44:7c:19:dc:69:57:ef:50:a8:44:d0:9f:59:e8:
39:c3:28:72:88:9f:66:f7:fb:b6:2a:97:0c:93:0c:
40:4e:97:b2:26:56:a2:07:a5:d1:2e:59:bc:10:68:
2d:85:f1:fd:85:95:03:c7:79:cf:1b:8d:e7:13:f0:
32:4e:54:0d:76:67:d0:0d:f7:7a:ec:88:30:ca:dd:
ee:bc:75:b9:24:82:42:9c:01:25:46:47:c7:0a:79:
20:61:06:6e:8a:59:8c:6f:31:25:5d:c9:16:a6:60:
48:43:98:b9:f5:48:b4:41:9f:9d:a3:3d:14:46:48:
da:99:83:d7:a6:32:64:dd:fa:d5:ba:44:a2:8e:35:
ad:29:5a:5c:21:ce:b9:b0:79:79:4d:7a:94:6d:95:
23:59:52:a9:a6:05:c6:a9:10:cb:67:33:d2:d4:fb:
e8:64:ac:c3:2e:ff:3c:b6:f0:4a:65:6f:5b:c9:5e:
31:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:E7:73:1C:D4:D9:95:FF:F6:42:0A:F3:0E:5E:24:9D:7E:33:6C:D8
X509v3 Authority Key Identifier:
keyid:BD:1D:B5:D7:28:BD:27:6B:4C:75:2E:12:5A:50:8F:F8:78:4A:D2:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vR211yi9J2tMdS4SWlCP-HhK0oU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/ca31df-7c9c-44ef-9ddc-776915488225/1/vR211yi9J2tMdS4SWlCP-HhK0oU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/ca31df-7c9c-44ef-9ddc-776915488225/1/vR211yi9J2tMdS4SWlCP-HhK0oU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:97:6e:c4:29:c8:e1:ee:2d:28:71:fe:30:04:46:4e:be:b8:
d1:f0:d9:a6:b0:e8:6e:00:da:8d:69:ce:59:e0:c3:b6:8d:cf:
35:1f:f1:f2:4d:5d:25:dc:3a:3d:d2:40:c1:24:82:ab:b7:e7:
d8:92:c6:30:0a:f4:f9:d1:11:fe:19:7e:68:ae:0c:3f:a5:0d:
c8:f1:41:80:5e:ca:3f:bf:b0:e3:c7:dc:e2:20:dc:5b:13:11:
ad:cb:36:77:aa:5a:54:f8:ab:9b:60:ca:c9:da:fc:36:22:09:
b3:f2:85:df:37:47:db:fc:77:e0:d7:76:99:52:07:a3:8a:59:
dd:60:53:25:e7:f3:e4:34:5f:d6:f4:65:c5:f6:9c:37:96:0c:
57:5f:09:3e:2c:64:71:7b:a9:41:ca:73:d5:99:72:10:5d:3b:
58:0a:5d:87:04:8f:63:43:f9:e0:d1:e5:46:c6:df:e3:38:4e:
24:36:45:35:d0:87:bf:aa:7e:e0:0a:e4:41:d7:79:c5:ce:da:
8c:a7:21:9e:75:a8:34:9f:0e:0e:3a:e4:7d:13:17:19:7e:f4:
cb:31:c2:0d:59:75:37:0e:a1:fd:39:94:ba:b3:6f:f0:ee:41:
7b:97:6b:fa:64:e5:f8:5c:15:93:e1:75:17:02:99:d4:5b:9d:
2a:70:84:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:48:42 2025 by rpki-client