Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/4f4eff-af54-4db0-91cd-1369cef7a4ca/1/vWjB2tkaQQHHFTwPbQFWI4rXRrs.mft
File: vWjB2tkaQQHHFTwPbQFWI4rXRrs.mft (raw, json)
Hash identifier: RFlASAVwfOALa6tbqnR6n5BC4Io5HuKVmuKKUU4f0kk=
Subject key identifier: DD:33:59:A5:55:20:DA:78:9F:DA:C1:C9:A1:42:AD:8E:DA:30:CB:3E
Authority key identifier: BD:68:C1:DA:D9:1A:41:01:C7:15:3C:0F:6D:01:56:23:8A:D7:46:BB
Certificate issuer: /CN=bd68c1dad91a4101c7153c0f6d0156238ad746bb
Certificate serial: 019922FAD88E6D23FB3E0BCBBCAD88D327BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vWjB2tkaQQHHFTwPbQFWI4rXRrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/4f4eff-af54-4db0-91cd-1369cef7a4ca/1/vWjB2tkaQQHHFTwPbQFWI4rXRrs.mft
Manifest number: 1602
Signing time: Sun 07 Sep 2025 07:01:28 +0000
Manifest this update: Sun 07 Sep 2025 07:01:28 +0000
Manifest next update: Mon 08 Sep 2025 07:01:28 +0000
Files and hashes: 1: T6mhvGgjsjqSjSFXAxAChHn88ic.roa (hash: FPbExUKvK5N7b1i2EWlflqO6OJIjL5/osRySrLfPqFk=)
2: vWjB2tkaQQHHFTwPbQFWI4rXRrs.crl (hash: NmqJ5b+0/qzxNoxbe0piQlWIuyEGJL/la6k4huKvIBA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/4f4eff-af54-4db0-91cd-1369cef7a4ca/1/vWjB2tkaQQHHFTwPbQFWI4rXRrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/4f4eff-af54-4db0-91cd-1369cef7a4ca/1/vWjB2tkaQQHHFTwPbQFWI4rXRrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/vWjB2tkaQQHHFTwPbQFWI4rXRrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:fa:d8:8e:6d:23:fb:3e:0b:cb:bc:ad:88:d3:27:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd68c1dad91a4101c7153c0f6d0156238ad746bb
Validity
Not Before: Sep 7 07:01:28 2025 GMT
Not After : Sep 8 07:01:28 2025 GMT
Subject: CN=dd3359a55520da789fdac1c9a142ad8eda30cb3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:fb:38:1b:f6:4f:5f:90:7c:62:fc:63:1e:8d:
a4:00:c3:5b:51:4a:79:5f:ad:69:e2:68:bb:bf:1b:
2a:c8:7b:dd:37:dd:79:a9:66:c8:56:20:a4:14:70:
4d:50:aa:23:d0:50:7a:82:3d:9a:4e:f0:ee:85:22:
89:f2:bc:37:ad:17:91:b2:52:5d:f1:f7:0d:bd:28:
bd:2a:03:2e:05:5c:33:03:67:b7:18:51:8d:00:6a:
26:1d:37:56:04:b7:7b:3b:5e:c1:1b:96:1a:fe:2d:
a7:6d:17:30:5f:2e:b4:db:bb:39:62:fc:bd:c6:77:
ca:8d:4e:f8:82:bb:f0:b9:3c:c7:de:63:09:4d:6a:
8a:7b:d6:a5:d0:6b:d9:64:bd:7b:03:23:34:10:48:
04:1f:da:23:3b:9a:6b:ca:a5:75:52:9b:4c:10:36:
04:bf:ff:de:dd:43:97:9b:23:4e:78:c1:a7:ed:9b:
ac:f4:e0:9b:39:7a:e8:ff:65:3d:33:ec:42:df:74:
46:e8:56:e7:0f:dc:cc:f8:54:96:8f:89:ef:0a:55:
db:a1:b5:dc:23:5c:12:46:7c:ec:af:aa:26:9a:6f:
a2:92:41:b6:be:f3:3e:86:64:a0:65:ac:89:81:13:
5e:cc:e9:0e:ae:51:40:c4:1c:bd:2a:08:77:59:a0:
45:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:33:59:A5:55:20:DA:78:9F:DA:C1:C9:A1:42:AD:8E:DA:30:CB:3E
X509v3 Authority Key Identifier:
keyid:BD:68:C1:DA:D9:1A:41:01:C7:15:3C:0F:6D:01:56:23:8A:D7:46:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vWjB2tkaQQHHFTwPbQFWI4rXRrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/4f4eff-af54-4db0-91cd-1369cef7a4ca/1/vWjB2tkaQQHHFTwPbQFWI4rXRrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/4f4eff-af54-4db0-91cd-1369cef7a4ca/1/vWjB2tkaQQHHFTwPbQFWI4rXRrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:15:0b:9b:2e:b1:37:c7:71:72:c0:70:79:b8:9e:d9:47:55:
95:17:58:1b:b4:e1:68:ad:70:47:91:ca:48:8e:25:85:c8:d1:
a9:18:b8:f1:b2:a3:64:24:7b:12:0b:a4:9f:7b:9f:00:25:3f:
27:3a:03:d2:2f:48:5c:61:da:c7:fa:45:b2:89:e5:e6:62:c1:
c7:af:1b:82:03:9b:40:67:48:31:35:da:04:ee:c6:69:fd:b3:
38:f7:5d:87:cc:2f:34:fb:b2:ea:f0:00:e1:4f:bf:b9:8d:6a:
7b:70:5f:8c:28:e6:3e:18:5f:1c:13:fc:c9:a1:65:30:46:01:
df:51:f2:8c:50:d3:fe:8b:13:33:a1:9e:a0:b3:61:69:1c:db:
3b:5b:ef:3e:a4:f4:13:84:cc:0b:42:72:28:45:e3:7c:4d:b1:
62:d9:dd:de:3a:31:e5:8b:23:b2:9d:63:18:df:51:70:d4:c1:
e0:d0:b0:76:a4:5a:83:40:38:d3:b1:ea:2c:66:e6:78:4c:c4:
d8:89:da:b2:21:ee:ba:fc:6c:08:80:58:bb:fc:66:fa:6d:72:
45:2f:d5:25:48:33:fc:21:5c:3f:8e:06:6e:b1:93:0b:7b:d5:
88:82:91:ce:6c:42:9d:86:fb:70:33:75:fc:bb:36:89:90:65:
30:bb:78:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:18:41 2025 by rpki-client