Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/439878-4a95-4478-8163-f370f04265a5/1/vMhg2VSXTcqR1bNHtjsiZTZn2m0.mft
File: vMhg2VSXTcqR1bNHtjsiZTZn2m0.mft (raw, json)
Hash identifier: 5taTyYKUvf9OlYRXgsTzVl+1+FQdDA4hVbR8AHznbak=
Subject key identifier: AD:7C:3C:FE:B0:EA:D2:A1:0C:C9:60:21:6D:EE:2F:F2:04:A9:66:41
Authority key identifier: BC:C8:60:D9:54:97:4D:CA:91:D5:B3:47:B6:3B:22:65:36:67:DA:6D
Certificate issuer: /CN=bcc860d954974dca91d5b347b63b22653667da6d
Certificate serial: 019923D6153C4B3A90C6801BEDEA0D3F9DB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vMhg2VSXTcqR1bNHtjsiZTZn2m0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/439878-4a95-4478-8163-f370f04265a5/1/vMhg2VSXTcqR1bNHtjsiZTZn2m0.mft
Manifest number: 47
Signing time: Sun 07 Sep 2025 11:00:56 +0000
Manifest this update: Sun 07 Sep 2025 11:00:56 +0000
Manifest next update: Mon 08 Sep 2025 11:00:56 +0000
Files and hashes: 1: jytXleuPSXKJn3uQWWaoGaj4Xmc.roa (hash: cKu9EW77Y32V8IP1VFJqq3q2CTjtGGwu/+qIVswSU0A=)
2: vMhg2VSXTcqR1bNHtjsiZTZn2m0.crl (hash: 63p6UcuF67W9Y0Fx9Q56Q1QPqC6XI0CN4HRzfNtFCa0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/439878-4a95-4478-8163-f370f04265a5/1/vMhg2VSXTcqR1bNHtjsiZTZn2m0.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/439878-4a95-4478-8163-f370f04265a5/1/vMhg2VSXTcqR1bNHtjsiZTZn2m0.mft
rsync://rpki.ripe.net/repository/DEFAULT/vMhg2VSXTcqR1bNHtjsiZTZn2m0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:d6:15:3c:4b:3a:90:c6:80:1b:ed:ea:0d:3f:9d:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcc860d954974dca91d5b347b63b22653667da6d
Validity
Not Before: Sep 7 11:00:56 2025 GMT
Not After : Sep 8 11:00:56 2025 GMT
Subject: CN=ad7c3cfeb0ead2a10cc960216dee2ff204a96641
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:73:59:9a:8a:ae:2f:0b:c0:68:a0:27:50:2f:
77:39:2a:35:35:f6:cd:de:8b:21:f5:f1:35:10:90:
15:e6:cc:2f:13:a4:21:6b:31:0f:c9:02:6c:fa:20:
0f:1d:22:b5:3a:d1:a2:32:10:02:b4:1f:b6:7d:c0:
63:d5:ce:5a:99:01:91:0b:66:3d:e0:15:d2:58:6c:
96:7f:e8:12:cb:86:1e:5e:5a:ea:82:08:c8:45:42:
15:e8:68:f5:93:11:6e:d9:89:be:5c:27:4f:68:a3:
0d:17:53:e8:e0:40:8d:db:54:ee:9a:42:c8:8d:02:
ca:b7:cc:9e:d7:66:a2:bb:59:25:84:4f:87:f4:4f:
ac:23:22:2a:31:12:5f:46:4e:58:cc:0f:a9:a6:16:
71:97:e9:0e:14:20:57:54:af:54:4f:7a:99:b8:15:
34:ee:b9:22:66:fa:05:71:88:1a:00:2b:fd:fe:5d:
11:c2:34:42:61:e9:80:be:f8:da:43:1f:2c:a3:01:
02:f7:36:7e:a2:bc:b9:01:b3:ac:e0:26:40:3f:13:
ce:22:2b:37:69:c1:63:c6:41:fb:fc:2c:68:5a:86:
a3:df:58:c7:42:82:90:71:22:c2:d6:ab:a9:11:3d:
3c:46:54:5a:a5:64:0c:8c:16:8a:a9:c2:9e:5e:22:
e7:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:7C:3C:FE:B0:EA:D2:A1:0C:C9:60:21:6D:EE:2F:F2:04:A9:66:41
X509v3 Authority Key Identifier:
keyid:BC:C8:60:D9:54:97:4D:CA:91:D5:B3:47:B6:3B:22:65:36:67:DA:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vMhg2VSXTcqR1bNHtjsiZTZn2m0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/439878-4a95-4478-8163-f370f04265a5/1/vMhg2VSXTcqR1bNHtjsiZTZn2m0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/439878-4a95-4478-8163-f370f04265a5/1/vMhg2VSXTcqR1bNHtjsiZTZn2m0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:24:14:89:04:fa:e2:70:fa:bf:42:a5:bc:c1:ba:95:21:95:
7b:de:a1:f7:3d:ef:20:ec:cc:29:de:d9:c4:d2:a5:d3:af:83:
63:70:5d:02:f4:a0:01:52:ea:ed:0b:d2:8c:62:03:de:26:b4:
63:f1:34:c5:46:5d:69:10:5b:96:11:23:54:d8:58:60:25:2a:
f8:e1:c2:62:50:77:8a:64:9e:a1:34:14:5a:e7:b4:78:28:b6:
15:2f:d3:6e:03:fc:43:18:88:20:db:9d:34:b3:a3:b0:49:ae:
e2:27:4b:40:05:dc:8a:f8:74:a7:54:50:d6:67:df:71:2a:35:
bf:62:7d:8b:a9:5f:47:70:1a:38:47:54:39:9e:23:8f:7a:d1:
00:9d:0d:3d:3f:03:a7:c8:04:13:e7:2b:e3:2d:37:8d:3e:74:
bb:77:82:6d:1f:87:f4:eb:cc:ca:60:17:ab:c9:ee:ef:72:4f:
e8:6b:d6:9e:ef:64:d5:ac:d8:99:dd:bd:d6:f9:35:f4:4a:fe:
97:d1:81:42:12:5b:f0:35:09:a4:aa:1a:cb:af:be:ea:83:55:
83:14:4d:5a:68:13:a1:20:43:15:17:94:be:75:d0:63:1b:ae:
64:cc:06:5c:94:f8:7e:ba:7a:da:0b:f6:fe:c2:91:64:89:a4:
b8:a7:d7:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:25:02 2025 by rpki-client