Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.mft
File: vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.mft (raw, json)
Hash identifier: BbMaphXZrC9gVUtazEyrNL2sQGbuYFD7ZZCG70KhSv0=
Subject key identifier: 02:C7:B6:47:20:06:A6:3F:8C:14:C4:D8:DE:E0:67:34:29:EA:05:EF
Authority key identifier: BC:12:78:64:CD:43:04:85:50:ED:16:99:C5:84:B5:C1:4D:80:E0:98
Certificate issuer: /CN=bc127864cd43048550ed1699c584b5c14d80e098
Certificate serial: 019921E765FA6446D62FA804E58A426B7C58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.mft
Manifest number: 06EC
Signing time: Sun 07 Sep 2025 02:00:36 +0000
Manifest this update: Sun 07 Sep 2025 02:00:36 +0000
Manifest next update: Mon 08 Sep 2025 02:00:36 +0000
Files and hashes: 1: DmspTgBWfwCRXv4YidxL9MxMuLs.roa (hash: 1HDwuoapwdXHm8uFL7aQ8AiJfzmdU8tLWRG1TVtsgIw=)
2: P4H-USxdX8paqqc5vUCjCPteQ10.roa (hash: RUKC58n+H3u6CbZuKe7grfw3EeWvKz+vXEAG57qC5LQ=)
3: vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.crl (hash: ZvXfDNvatsV2vtEtkGr9oiJDxs+JUVzatDz4T9kINdU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:65:fa:64:46:d6:2f:a8:04:e5:8a:42:6b:7c:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc127864cd43048550ed1699c584b5c14d80e098
Validity
Not Before: Sep 7 02:00:36 2025 GMT
Not After : Sep 8 02:00:36 2025 GMT
Subject: CN=02c7b6472006a63f8c14c4d8dee0673429ea05ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b3:e9:1b:c3:c5:67:2e:f5:c2:48:b8:7e:36:
b5:f4:5b:80:7c:f5:b6:6e:7b:ad:77:e3:10:8a:cc:
af:96:ec:e2:99:77:db:a3:aa:ad:09:d9:62:03:0f:
a5:75:03:ca:1f:5b:0d:e2:95:37:7e:08:70:38:fc:
0a:70:b9:b1:9e:e8:48:46:f8:23:1b:72:bf:c1:45:
e1:c8:31:e4:8e:dd:fc:b6:a8:92:b1:fd:2e:50:af:
58:95:07:f1:a9:1f:f8:54:13:22:6e:1d:fd:98:f8:
67:a6:94:f8:55:fa:b0:b5:84:0a:4d:f0:d7:cb:4f:
69:cc:d5:50:f1:0c:c4:93:71:f9:f8:c4:cc:48:c4:
32:95:54:d8:9a:3f:68:6a:ec:cf:de:15:f7:3c:f3:
4d:26:5c:5a:1f:aa:98:ff:4c:a0:3a:90:96:96:1e:
a6:26:59:b5:ee:1a:25:c3:d4:92:49:0a:12:50:fb:
78:ae:1e:9f:1e:18:6f:cc:b2:7e:22:60:9e:be:1d:
2e:18:f6:37:19:c7:90:be:c2:8c:88:35:3d:9e:c8:
c0:47:2b:c6:a3:f9:11:72:02:f3:64:ee:54:7a:ef:
f2:13:e0:8f:22:19:3d:7d:c5:0d:d8:79:20:da:c6:
27:94:ad:62:de:b4:10:c3:61:12:17:82:fd:29:bd:
9f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:C7:B6:47:20:06:A6:3F:8C:14:C4:D8:DE:E0:67:34:29:EA:05:EF
X509v3 Authority Key Identifier:
keyid:BC:12:78:64:CD:43:04:85:50:ED:16:99:C5:84:B5:C1:4D:80:E0:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:09:36:5b:68:1d:4e:ce:58:b6:e9:2e:45:06:ec:60:b9:f4:
2e:6f:3e:ef:c4:0c:74:a2:35:c3:33:1a:5c:9e:dc:02:e5:c3:
3d:d0:6d:1b:65:22:75:11:fb:23:b4:4f:94:d7:7c:d3:11:d3:
ee:7f:1a:1e:00:9f:18:a6:0f:bd:5d:d4:86:dc:94:41:d0:e3:
f0:07:dc:d5:ba:66:37:b1:46:fd:ae:0f:c0:3a:8a:ef:ea:5f:
ce:bb:bc:40:62:2a:07:e3:b2:bf:fb:20:2a:fb:9f:ac:96:bc:
dd:6c:19:62:91:25:e5:68:84:ed:ea:ec:30:98:7c:2d:60:e9:
21:d6:41:7f:64:1d:05:76:2c:68:e1:ec:13:ce:eb:e9:e9:b2:
8d:53:ef:b1:19:db:9f:67:de:53:24:87:be:82:97:85:3c:ef:
b2:f1:fd:80:74:9c:b2:40:31:6e:5f:dc:0e:0b:66:36:46:73:
f0:1a:07:1b:fc:04:97:70:9e:cc:fd:6e:1b:d4:c5:d1:58:da:
5b:67:f5:35:b0:da:a1:51:a6:4a:e0:27:02:e8:e9:74:d9:1a:
0f:f9:f7:7b:2b:85:a2:c5:6b:08:fe:5b:39:ce:11:6c:a7:f9:
52:7a:95:f6:c2:d7:c4:20:ca:73:b0:4a:fb:69:ba:a3:30:a5:
7c:6e:34:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:35:53 2025 by rpki-client