Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/fb8edb-e304-4714-952e-c66bea1f1aa2/1/vP76Crl0AEjYO0idnKTgKOD1z-8.mft
File: vP76Crl0AEjYO0idnKTgKOD1z-8.mft (raw, json)
Hash identifier: 9rjAAvWYI3yyUChUlBATJsUKhWTxPpCSEyBmumeZsRg=
Subject key identifier: C2:DB:8D:0E:C2:EE:F4:1C:39:A5:74:15:D4:9F:67:09:8C:38:BF:B6
Authority key identifier: BC:FE:FA:0A:B9:74:00:48:D8:3B:48:9D:9C:A4:E0:28:E0:F5:CF:EF
Certificate issuer: /CN=bcfefa0ab9740048d83b489d9ca4e028e0f5cfef
Certificate serial: 019921E7A235AF30502D8263674FC47D1906
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP76Crl0AEjYO0idnKTgKOD1z-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/fb8edb-e304-4714-952e-c66bea1f1aa2/1/vP76Crl0AEjYO0idnKTgKOD1z-8.mft
Manifest number: 11CE
Signing time: Sun 07 Sep 2025 02:00:52 +0000
Manifest this update: Sun 07 Sep 2025 02:00:52 +0000
Manifest next update: Mon 08 Sep 2025 02:00:52 +0000
Files and hashes: 1: 2TuJ468zw177jpyYFJB20BZ9Xpw.roa (hash: 3VZS4XpdpT/Xy05QO4Zu5eaSIrPsPgN7ySrg2oUytz0=)
2: vP76Crl0AEjYO0idnKTgKOD1z-8.crl (hash: r5JGfKWDiztMpTDBIN+5Gy/BgaLkbuzkFMZzmJLprqU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/fb8edb-e304-4714-952e-c66bea1f1aa2/1/vP76Crl0AEjYO0idnKTgKOD1z-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/fb8edb-e304-4714-952e-c66bea1f1aa2/1/vP76Crl0AEjYO0idnKTgKOD1z-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/vP76Crl0AEjYO0idnKTgKOD1z-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:a2:35:af:30:50:2d:82:63:67:4f:c4:7d:19:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcfefa0ab9740048d83b489d9ca4e028e0f5cfef
Validity
Not Before: Sep 7 02:00:52 2025 GMT
Not After : Sep 8 02:00:52 2025 GMT
Subject: CN=c2db8d0ec2eef41c39a57415d49f67098c38bfb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:b9:93:13:21:4f:eb:53:72:64:ad:16:aa:5c:
45:15:68:e6:6f:b3:ca:fc:51:57:b5:86:ac:0c:5b:
4c:96:a5:08:d2:c0:9b:9f:93:00:24:9e:3c:28:c9:
34:0c:f8:99:1a:e0:de:02:d8:fe:38:aa:f4:c0:02:
f6:0b:36:82:14:0e:9b:96:dc:18:34:72:7d:c8:ba:
69:13:4a:1c:2e:05:48:9a:5a:df:15:01:9d:4d:8d:
b2:3f:c8:df:bd:85:38:04:c9:fa:de:56:b1:d5:34:
6b:e2:f6:ee:c7:55:00:ac:71:44:47:03:c4:62:ee:
e2:f0:b5:0d:a8:98:40:ef:10:fa:51:82:23:96:63:
d1:dd:27:c7:33:1a:1b:e0:e9:4e:aa:74:82:aa:04:
63:6b:3b:2b:53:10:71:2a:86:53:1c:f8:73:78:a2:
76:54:fb:2b:c8:1d:c4:26:fa:2a:2f:09:3c:75:17:
b3:c1:ca:55:9c:02:08:9c:3a:2c:82:b7:f8:60:2f:
8e:74:36:22:c1:6d:c5:7e:a0:f3:83:3d:b0:60:33:
99:b7:d7:63:88:85:2c:aa:0d:ea:f1:a2:cd:b6:2e:
84:3b:23:f1:5f:14:b7:34:6a:a4:db:c1:ef:fc:27:
2b:4d:9a:f7:02:57:f2:ce:ac:bd:bd:ad:3a:50:f9:
3f:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:DB:8D:0E:C2:EE:F4:1C:39:A5:74:15:D4:9F:67:09:8C:38:BF:B6
X509v3 Authority Key Identifier:
keyid:BC:FE:FA:0A:B9:74:00:48:D8:3B:48:9D:9C:A4:E0:28:E0:F5:CF:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP76Crl0AEjYO0idnKTgKOD1z-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/fb8edb-e304-4714-952e-c66bea1f1aa2/1/vP76Crl0AEjYO0idnKTgKOD1z-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/fb8edb-e304-4714-952e-c66bea1f1aa2/1/vP76Crl0AEjYO0idnKTgKOD1z-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:f3:2b:df:a3:e0:f4:9e:d7:dc:13:49:e1:f8:66:fd:3f:8d:
96:3f:67:49:93:db:70:75:30:4e:a9:e5:62:71:75:3a:44:fc:
bd:13:fd:12:52:e8:38:01:58:af:23:41:ab:c1:13:00:8b:b5:
ed:2e:0b:a9:10:83:df:f9:2d:a3:52:38:5d:98:4a:4e:09:97:
58:3e:c2:19:8a:fa:04:70:39:fa:bd:30:ad:b8:17:9d:d9:36:
38:1a:10:2a:90:1d:0e:ee:1f:04:9a:9b:b4:18:b8:b6:56:fc:
bb:68:21:89:83:cc:97:77:c9:12:14:fd:19:78:4e:ca:fc:8f:
c4:64:f5:92:d1:28:f5:f6:c1:7c:72:74:71:86:42:41:3a:fc:
af:9b:8e:70:d4:ac:ae:fb:cf:d1:d5:dd:0b:93:2e:65:9d:da:
9a:01:23:ec:e0:aa:42:c4:e5:23:ff:48:cb:c7:0e:75:50:24:
5f:4a:4f:4f:12:66:8d:b2:da:45:93:8a:68:03:1c:b2:ad:8e:
46:ac:56:f1:54:2b:77:d3:fb:37:be:8b:03:15:7e:74:b0:a4:
da:c8:0e:52:a5:36:ec:9a:ec:8f:8f:ad:bd:c6:f3:eb:89:5e:
cf:e9:ba:69:24:d9:99:cf:60:17:3a:83:f7:93:6a:1e:40:56:
1a:7a:37:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:06:34 2025 by rpki-client