Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/29aea2-b6c8-4af9-ad84-03fb54187ee2/1/vJ18QukXhEy8LeSpHGwXAd5ZcbU.mft
File: vJ18QukXhEy8LeSpHGwXAd5ZcbU.mft (raw, json)
Hash identifier: AXRNKV0d6steXxaXePZv1HMRLw3A/r8+Sc4UQZwuwbo=
Subject key identifier: 45:CF:98:B0:F6:E0:00:B1:0D:88:E3:49:F0:EE:8B:02:49:C7:C6:E4
Authority key identifier: BC:9D:7C:42:E9:17:84:4C:BC:2D:E4:A9:1C:6C:17:01:DE:59:71:B5
Certificate issuer: /CN=bc9d7c42e917844cbc2de4a91c6c1701de5971b5
Certificate serial: 019844087C57F917755DA2CA5BC47B3DBCD1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJ18QukXhEy8LeSpHGwXAd5ZcbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/29aea2-b6c8-4af9-ad84-03fb54187ee2/1/vJ18QukXhEy8LeSpHGwXAd5ZcbU.mft
Manifest number: 1601
Signing time: Sat 26 Jul 2025 00:01:03 +0000
Manifest this update: Sat 26 Jul 2025 00:01:03 +0000
Manifest next update: Sun 27 Jul 2025 00:01:03 +0000
Files and hashes: 1: PtAXY24lYtkFRHade4pTjXormLM.roa (hash: 1elZ7b8fLDvNPO81SeVzVwIAYPfLoIwWb4acP64QkQU=)
2: vJ18QukXhEy8LeSpHGwXAd5ZcbU.crl (hash: mTCbp0Z3mGWjYeT1kjfgLnzBwbPPXuKdUC1Pe5OvEXw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/29aea2-b6c8-4af9-ad84-03fb54187ee2/1/vJ18QukXhEy8LeSpHGwXAd5ZcbU.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/29aea2-b6c8-4af9-ad84-03fb54187ee2/1/vJ18QukXhEy8LeSpHGwXAd5ZcbU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vJ18QukXhEy8LeSpHGwXAd5ZcbU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Jul 2025 17:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:08:7c:57:f9:17:75:5d:a2:ca:5b:c4:7b:3d:bc:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc9d7c42e917844cbc2de4a91c6c1701de5971b5
Validity
Not Before: Jul 26 00:01:03 2025 GMT
Not After : Jul 27 00:01:03 2025 GMT
Subject: CN=45cf98b0f6e000b10d88e349f0ee8b0249c7c6e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:0e:a0:b1:96:7a:a8:e6:0d:0e:c9:63:23:01:
6f:12:dd:03:b8:0c:0f:eb:08:b9:2a:86:1d:9d:a6:
3c:f9:42:d7:d9:a9:e0:d5:d8:a3:8f:c5:3f:83:e5:
6c:c4:a7:61:0f:c8:72:8b:37:f8:d8:4b:68:c5:6e:
89:bc:a1:06:55:97:5e:a2:92:fe:66:ff:de:bf:12:
d0:a6:98:45:f4:55:55:5a:d1:46:ec:28:3a:59:94:
c2:4d:d7:56:97:1d:28:6e:0e:be:7a:1b:18:7c:7a:
24:d5:ef:ce:46:17:9e:7b:8e:40:22:75:a4:b8:75:
12:cf:f1:93:ba:ef:a6:5c:f0:92:83:e5:f8:d2:e0:
a0:99:11:2c:c4:84:8f:03:2d:7b:59:c8:0f:0a:a3:
b3:c4:df:2e:33:57:cd:6d:1c:7c:1b:17:93:b9:28:
62:6e:65:42:28:97:32:2e:15:54:20:51:b8:6b:94:
fb:a9:97:f4:77:d3:74:ae:78:5d:40:11:ca:6c:4d:
2b:44:92:5d:19:14:04:a8:89:85:db:3d:90:3e:3d:
3b:6c:cc:49:12:3a:41:d5:f0:77:75:da:8f:57:2f:
16:77:aa:6a:f0:c4:49:20:c4:94:30:bd:3e:c9:cb:
fa:08:87:bf:51:d8:31:a8:62:98:c3:59:2b:a9:44:
15:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:CF:98:B0:F6:E0:00:B1:0D:88:E3:49:F0:EE:8B:02:49:C7:C6:E4
X509v3 Authority Key Identifier:
keyid:BC:9D:7C:42:E9:17:84:4C:BC:2D:E4:A9:1C:6C:17:01:DE:59:71:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJ18QukXhEy8LeSpHGwXAd5ZcbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/29aea2-b6c8-4af9-ad84-03fb54187ee2/1/vJ18QukXhEy8LeSpHGwXAd5ZcbU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/29aea2-b6c8-4af9-ad84-03fb54187ee2/1/vJ18QukXhEy8LeSpHGwXAd5ZcbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:29:73:da:f9:97:35:ee:89:6f:5a:55:91:d5:78:93:93:5e:
b8:de:cd:e8:71:74:60:72:90:d8:25:8b:f8:0f:e8:03:96:b0:
db:60:03:11:33:3f:bc:5c:8c:a2:cc:88:2f:a5:bf:ef:7b:39:
f7:ab:83:88:c2:bd:a7:03:2c:83:fb:39:dd:1d:10:ac:c2:74:
7c:b1:93:28:0a:d7:bd:a3:ad:82:d4:74:5f:27:2c:9f:d1:c7:
a0:91:82:34:53:c7:bb:36:89:a6:db:1c:50:ca:48:ff:02:dc:
9d:ca:c8:27:63:75:13:ec:af:52:79:39:df:da:88:1e:17:8a:
80:20:67:e5:eb:b2:c7:b8:83:fa:c8:e0:9a:a7:f8:66:bd:de:
04:5a:60:27:6a:e7:81:ec:b3:ed:65:8e:77:82:b6:73:a8:d3:
84:07:c3:6b:bf:2f:90:4d:9f:5a:f3:ef:09:2f:24:bf:f5:42:
df:e4:65:47:9e:1e:1a:55:d9:5c:13:04:be:16:74:04:09:2f:
6f:36:ee:eb:11:6c:30:07:b1:87:11:55:02:7f:52:82:2e:1e:
0d:cb:57:f5:04:e3:63:a8:29:0e:e2:84:54:fa:08:83:4b:76:
73:e3:ec:1f:49:77:1f:a2:2a:4d:7e:14:17:0a:aa:1f:b3:9a:
5f:5b:87:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 01:14:07 2025 by rpki-client