Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/0ee921-a721-4f09-80f2-7113fc1b865b/1/vIo7xH0TyD99HPcqE34AZvg9Bgg.mft
File: vIo7xH0TyD99HPcqE34AZvg9Bgg.mft (raw, json)
Hash identifier: iOcj40lS8fK/7+O6gG2h3qI/Ga0dOprx0Qpjh8yxY8Q=
Subject key identifier: F6:0A:6D:DB:D4:25:B6:0A:E0:CE:8D:BF:36:64:C5:FF:67:59:BE:88
Authority key identifier: BC:8A:3B:C4:7D:13:C8:3F:7D:1C:F7:2A:13:7E:00:66:F8:3D:06:08
Certificate issuer: /CN=bc8a3bc47d13c83f7d1cf72a137e0066f83d0608
Certificate serial: 01992EFE0DD3C8AD1BB4ADE030944E785DE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vIo7xH0TyD99HPcqE34AZvg9Bgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/0ee921-a721-4f09-80f2-7113fc1b865b/1/vIo7xH0TyD99HPcqE34AZvg9Bgg.mft
Manifest number: 168F
Signing time: Tue 09 Sep 2025 15:00:25 +0000
Manifest this update: Tue 09 Sep 2025 15:00:25 +0000
Manifest next update: Wed 10 Sep 2025 15:00:25 +0000
Files and hashes: 1: gphbKzpx6tWGj_zsNbx2el-xjBw.roa (hash: EGV6JtWjWAcUe3P+wNKh2PddbSFnyVdKJ948XnlhOEI=)
2: vIo7xH0TyD99HPcqE34AZvg9Bgg.crl (hash: rfnweIZphifvfwnYI4opBLAbhvdyOj1BQSRgGLPj/3U=)
3: zC1Sn658_TpTHaiHtbRsJ5ASeUg.roa (hash: p+xEHDv2mI7HSN0Md1NF4A8uiIrqEQrPGZAyc5GO4iE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/0ee921-a721-4f09-80f2-7113fc1b865b/1/vIo7xH0TyD99HPcqE34AZvg9Bgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/0ee921-a721-4f09-80f2-7113fc1b865b/1/vIo7xH0TyD99HPcqE34AZvg9Bgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vIo7xH0TyD99HPcqE34AZvg9Bgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 10 Sep 2025 15:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:2e:fe:0d:d3:c8:ad:1b:b4:ad:e0:30:94:4e:78:5d:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc8a3bc47d13c83f7d1cf72a137e0066f83d0608
Validity
Not Before: Sep 9 15:00:25 2025 GMT
Not After : Sep 10 15:00:25 2025 GMT
Subject: CN=f60a6ddbd425b60ae0ce8dbf3664c5ff6759be88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:a8:73:cf:66:8f:50:f3:8f:72:c7:c3:b0:4d:
37:98:f5:69:0e:08:15:b6:4f:1c:0d:1a:a5:34:c2:
53:7e:b5:7f:fe:7c:e3:94:0e:95:90:8f:54:8b:9b:
97:16:ed:32:ee:67:4a:21:c0:12:33:19:f0:d3:1d:
e1:32:00:b9:c9:1f:08:4c:01:6e:40:57:66:54:33:
48:80:e2:0e:62:d3:b8:27:a4:57:bb:ab:f0:aa:97:
9e:10:37:d4:84:47:cd:da:ae:21:32:8d:22:5b:50:
99:df:0c:bf:c3:a6:d8:ec:b5:80:8a:63:35:58:09:
41:4d:04:d5:c3:bc:3d:1e:07:7b:0f:8d:1a:7f:bb:
a1:44:6f:b6:2c:9b:e1:49:53:fd:bb:6f:03:f4:2d:
df:1b:e9:91:6e:c5:57:ed:d7:86:56:86:a5:94:26:
e8:a9:a5:66:01:12:bc:f5:5e:12:0b:b8:35:64:8a:
7f:fe:73:6a:06:6a:a8:e4:b6:77:46:ea:6b:a7:8b:
f1:1d:7a:85:44:b0:6c:e0:35:86:de:33:2d:86:e9:
cb:54:90:c5:3b:ae:0c:7e:c2:bb:28:77:13:46:3e:
ea:a3:af:e1:86:75:99:ac:52:1e:fb:87:8a:47:a2:
d5:30:e7:f1:0b:91:91:f2:6a:da:e8:e8:ec:b3:55:
79:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:0A:6D:DB:D4:25:B6:0A:E0:CE:8D:BF:36:64:C5:FF:67:59:BE:88
X509v3 Authority Key Identifier:
keyid:BC:8A:3B:C4:7D:13:C8:3F:7D:1C:F7:2A:13:7E:00:66:F8:3D:06:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vIo7xH0TyD99HPcqE34AZvg9Bgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/0ee921-a721-4f09-80f2-7113fc1b865b/1/vIo7xH0TyD99HPcqE34AZvg9Bgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/0ee921-a721-4f09-80f2-7113fc1b865b/1/vIo7xH0TyD99HPcqE34AZvg9Bgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:6b:cb:c8:14:c0:b5:06:5c:0e:b9:fb:51:af:07:2a:5b:91:
dd:06:a0:35:4e:3f:ee:32:41:73:82:0f:09:3b:61:b2:a3:a5:
24:aa:4e:04:fd:e9:a0:44:ba:9b:2c:cc:25:5f:03:66:48:85:
40:e6:ee:46:68:c1:e4:db:89:36:dd:f6:e4:96:bc:00:f6:87:
1f:29:04:66:39:a8:1f:76:41:47:1e:c0:cb:5f:68:d3:bf:f5:
51:80:de:d7:d5:3c:d4:4a:5a:c5:af:82:4c:f4:d0:f0:a8:95:
dd:b7:97:3c:4e:f0:f5:43:ea:2b:99:a1:40:68:85:e6:40:64:
e8:2a:46:d7:d9:e5:b7:bc:85:b1:3f:9a:ab:17:20:a3:1a:0a:
c2:f3:4a:b6:5f:2a:13:e5:60:e2:8f:42:ca:7a:c3:5e:73:a7:
81:8a:d5:8d:d7:3d:1a:27:8e:ef:37:07:44:f5:0b:98:62:64:
60:8e:7d:ff:ff:74:e4:0b:07:44:45:1b:81:a1:dc:84:e3:31:
2f:ae:45:ca:b2:53:80:2e:4d:88:9c:b0:4e:c5:f4:c7:d7:07:
85:5e:52:18:0b:d0:3c:34:af:ea:4e:13:0f:e5:7d:99:37:ea:
5a:35:ac:6d:f7:e1:ea:c0:63:a4:4e:7e:a1:5c:33:ea:e0:44:
51:33:eb:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 9 17:58:32 2025 by rpki-client