Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/97744d-5988-46ae-82f1-64187e30435b/1/vi8szxuqOQM-x2pYb4RqNiGPIJ0.mft
File: vi8szxuqOQM-x2pYb4RqNiGPIJ0.mft (raw, json)
Hash identifier: OvmRWAvqnKpXmTC+Aa9FdcfzZDA1Ksm+zDdExHIwViI=
Subject key identifier: E0:D2:96:13:49:67:37:FD:F7:BB:90:B7:A4:75:AB:EE:BB:18:EF:94
Authority key identifier: BE:2F:2C:CF:1B:AA:39:03:3E:C7:6A:58:6F:84:6A:36:21:8F:20:9D
Certificate issuer: /CN=be2f2ccf1baa39033ec76a586f846a36218f209d
Certificate serial: 0199239F839B2D2CD58D076847BCF96B88C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vi8szxuqOQM-x2pYb4RqNiGPIJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/97744d-5988-46ae-82f1-64187e30435b/1/vi8szxuqOQM-x2pYb4RqNiGPIJ0.mft
Manifest number: 11B4
Signing time: Sun 07 Sep 2025 10:01:20 +0000
Manifest this update: Sun 07 Sep 2025 10:01:20 +0000
Manifest next update: Mon 08 Sep 2025 10:01:20 +0000
Files and hashes: 1: JAdnsONCtTfLbO2OfLFXkq3UEe0.roa (hash: uH25J1sXmVYdKjAjZcQtubKyV6gnVwOjCbWyLNaZ4r4=)
2: vi8szxuqOQM-x2pYb4RqNiGPIJ0.crl (hash: Mwh0nETvh4U5oZoxDJ/kfDS7GKECK/3mDr/u982Zk84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/97744d-5988-46ae-82f1-64187e30435b/1/vi8szxuqOQM-x2pYb4RqNiGPIJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/97744d-5988-46ae-82f1-64187e30435b/1/vi8szxuqOQM-x2pYb4RqNiGPIJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/vi8szxuqOQM-x2pYb4RqNiGPIJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:83:9b:2d:2c:d5:8d:07:68:47:bc:f9:6b:88:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be2f2ccf1baa39033ec76a586f846a36218f209d
Validity
Not Before: Sep 7 10:01:20 2025 GMT
Not After : Sep 8 10:01:20 2025 GMT
Subject: CN=e0d29613496737fdf7bb90b7a475abeebb18ef94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a7:96:c4:3e:17:45:71:83:fb:7c:9e:39:a2:
41:6e:f6:3b:1f:92:46:93:1f:df:0c:e8:ac:60:64:
2f:de:ab:d4:a6:45:3b:7c:5a:b4:bd:c6:a7:08:f3:
ee:3f:9a:39:d5:0f:97:b6:68:4c:08:8e:25:0d:ee:
b0:8e:20:da:4f:e5:36:a4:02:e0:8c:69:2e:be:f3:
6d:03:1f:37:f3:5b:86:73:69:54:ad:95:1f:b0:05:
9b:86:dd:62:63:e5:4c:6e:9a:38:9f:9c:f5:f6:32:
96:04:72:ad:ed:48:d8:03:c9:b4:36:82:52:70:eb:
6a:18:42:ba:37:ba:48:ce:49:af:bb:89:13:09:cd:
48:c2:7e:d4:4d:0a:2e:73:13:c6:18:b0:c1:db:f5:
42:76:f8:fd:67:90:e4:45:0a:a0:8a:eb:4a:09:d3:
e7:9a:d4:bc:4e:71:3a:c8:63:bd:95:4c:42:87:ec:
78:c0:63:c3:69:d1:ae:fc:12:4c:8a:fb:ef:91:c6:
80:93:9b:14:0b:c4:54:b8:37:75:28:78:46:c2:a6:
e8:83:79:d6:9d:b1:7b:b0:3c:33:1b:11:d8:e0:69:
0a:e4:69:48:42:3f:9c:f2:4e:42:81:73:f1:3e:50:
09:f6:c8:43:a7:1b:7f:fc:90:16:2a:da:61:0d:19:
57:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:D2:96:13:49:67:37:FD:F7:BB:90:B7:A4:75:AB:EE:BB:18:EF:94
X509v3 Authority Key Identifier:
keyid:BE:2F:2C:CF:1B:AA:39:03:3E:C7:6A:58:6F:84:6A:36:21:8F:20:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vi8szxuqOQM-x2pYb4RqNiGPIJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/97744d-5988-46ae-82f1-64187e30435b/1/vi8szxuqOQM-x2pYb4RqNiGPIJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/97744d-5988-46ae-82f1-64187e30435b/1/vi8szxuqOQM-x2pYb4RqNiGPIJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:72:60:6b:04:10:82:19:6e:d5:20:41:50:8d:79:64:6e:c6:
4e:39:53:55:17:71:b4:aa:77:f8:93:19:fc:34:4d:9c:ea:9d:
b4:22:29:63:8f:05:e8:a8:7c:33:ea:c1:9c:e4:ad:10:cd:4c:
5f:38:b4:45:61:67:a1:88:20:95:ab:b8:c3:35:22:ef:4f:31:
de:ed:0c:07:08:b2:0c:b5:f4:7a:f2:7b:2e:32:fe:62:f3:7f:
af:61:43:28:bc:c5:47:05:a2:db:4e:56:1e:b8:12:c1:d1:94:
d7:d4:45:52:53:a5:8b:77:c2:b2:3d:ea:ac:ee:10:f8:b9:8c:
e2:e6:4d:fe:91:cb:45:d7:70:1b:05:41:35:4d:e1:31:f1:2b:
3e:78:6e:74:b9:02:73:0f:62:f7:9b:a8:0b:c6:76:71:8e:d4:
b8:14:02:b8:a1:bd:d9:5a:9c:59:7c:e7:a6:ec:50:30:ae:bf:
f3:7c:13:ee:66:9a:1c:95:d8:24:a3:4f:fa:7e:92:f1:e4:7e:
ef:5b:8d:2b:79:4d:98:ad:2a:61:67:cc:7e:60:c3:c3:66:1e:
20:43:7a:1a:54:ea:91:94:20:b8:2a:0c:14:12:90:d9:b3:2b:
38:dc:5c:2b:83:9a:00:9b:51:be:0c:97:63:87:ff:1a:c4:77:
b1:92:a7:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:51:00 2025 by rpki-client