Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/c6b65c-2fc3-4196-af30-3940d135b28b/1/v3DW_GPRd37tzY9GpVk2F8YxneY.mft
File: v3DW_GPRd37tzY9GpVk2F8YxneY.mft (raw, json)
Hash identifier: 5R4DmOHbNx7R8d2M1dsvcJBtapIiyklvmw8HA2aAIgE=
Subject key identifier: 2D:49:E2:C5:B0:E5:8A:FB:9C:8C:68:D3:DF:76:2E:CB:31:CB:2D:07
Authority key identifier: BF:70:D6:FC:63:D1:77:7E:ED:CD:8F:46:A5:59:36:17:C6:31:9D:E6
Certificate issuer: /CN=bf70d6fc63d1777eedcd8f46a5593617c6319de6
Certificate serial: 0198D5BC4CF6FF6525666180269AE30B0C24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v3DW_GPRd37tzY9GpVk2F8YxneY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/c6b65c-2fc3-4196-af30-3940d135b28b/1/v3DW_GPRd37tzY9GpVk2F8YxneY.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 07:02:24 +0000
Manifest this update: Sat 23 Aug 2025 07:02:24 +0000
Manifest next update: Sun 24 Aug 2025 07:02:24 +0000
Files and hashes: 1: uCVmenLcASyNoh4ZOZE-C9n4LLY.roa (hash: d6oXAE1yERYBjWPnG7isycEkaI7F0yqfWlZw0H+T+Mo=)
2: v3DW_GPRd37tzY9GpVk2F8YxneY.crl (hash: CWFlhVr9AZ7mNOFzWeu7MDEPfQdWgQ2cWQyW1vWd/go=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/c6b65c-2fc3-4196-af30-3940d135b28b/1/v3DW_GPRd37tzY9GpVk2F8YxneY.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/c6b65c-2fc3-4196-af30-3940d135b28b/1/v3DW_GPRd37tzY9GpVk2F8YxneY.mft
rsync://rpki.ripe.net/repository/DEFAULT/v3DW_GPRd37tzY9GpVk2F8YxneY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:4c:f6:ff:65:25:66:61:80:26:9a:e3:0b:0c:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf70d6fc63d1777eedcd8f46a5593617c6319de6
Validity
Not Before: Aug 23 07:02:24 2025 GMT
Not After : Aug 24 07:02:24 2025 GMT
Subject: CN=2d49e2c5b0e58afb9c8c68d3df762ecb31cb2d07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:17:76:ad:87:49:8b:7b:29:09:99:12:b7:b5:
7c:c4:91:d9:60:44:b2:31:5a:4a:ad:a2:30:78:44:
e3:50:51:fa:68:7d:12:8c:89:cd:6e:5d:85:f8:c7:
f6:20:0d:bc:35:55:f8:ed:a6:d7:3e:dd:37:b6:71:
d7:ab:e5:92:4a:cc:27:69:f5:c0:8a:d6:b6:09:9f:
fc:af:f2:76:d5:ee:87:12:73:40:54:06:f5:fc:9b:
4d:dd:d9:dc:5a:a1:d1:ed:27:b0:b5:1c:70:7d:f8:
e7:5f:41:6a:0c:db:56:4d:8e:f7:a2:d2:2d:db:b8:
3f:56:35:31:24:5d:15:b9:72:d3:a2:51:e5:44:81:
0c:62:58:e1:9c:93:a3:3d:90:09:2b:8f:57:8e:91:
9c:70:82:e2:a7:2c:1c:da:46:6d:02:2e:65:b1:5d:
97:d4:8f:be:cb:fc:ce:24:d0:8a:41:b1:72:14:33:
36:17:c7:2e:f5:7a:91:3a:33:44:fe:fa:96:47:bc:
50:b9:1d:42:61:9f:e7:e7:ba:8a:7f:df:fe:cb:7b:
d3:be:9d:3b:88:94:87:c0:15:ab:d6:89:ab:b1:af:
82:39:08:fa:b6:97:ad:7a:8c:e2:62:be:b1:42:7a:
28:0d:5a:b2:64:05:7e:51:69:c6:27:d8:46:69:70:
b9:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:49:E2:C5:B0:E5:8A:FB:9C:8C:68:D3:DF:76:2E:CB:31:CB:2D:07
X509v3 Authority Key Identifier:
keyid:BF:70:D6:FC:63:D1:77:7E:ED:CD:8F:46:A5:59:36:17:C6:31:9D:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v3DW_GPRd37tzY9GpVk2F8YxneY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c6b65c-2fc3-4196-af30-3940d135b28b/1/v3DW_GPRd37tzY9GpVk2F8YxneY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/c6b65c-2fc3-4196-af30-3940d135b28b/1/v3DW_GPRd37tzY9GpVk2F8YxneY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:f7:18:a8:89:1e:f2:b8:c0:be:39:4d:e4:10:f7:8b:a9:d1:
e2:db:08:ca:99:d6:2d:fb:e9:b3:57:3b:47:4e:85:fb:00:71:
23:af:c2:1b:6b:36:0d:f1:76:46:72:4e:0e:a1:9c:22:97:8b:
40:8a:91:ed:4f:79:72:a4:60:0b:64:fc:09:e0:98:35:7d:18:
e0:96:bf:13:f3:a3:a4:03:ed:c5:3b:74:f0:f9:60:7f:81:f9:
fd:c8:84:36:7a:4d:0e:a0:a3:a6:46:b4:c8:71:d6:b5:13:90:
d5:ad:bd:61:ee:42:59:84:28:63:93:f1:3f:af:4c:00:64:2c:
89:fa:80:42:cf:c2:dc:b6:d0:cd:b1:65:c5:e5:5d:95:32:37:
cf:7b:26:c2:6d:9e:5b:21:be:62:e1:2d:29:e5:65:81:41:2d:
71:4f:7e:30:d8:e2:95:2c:32:a8:26:7a:8a:c8:23:f7:86:fc:
90:e8:81:a8:4e:f6:89:83:dd:0f:e0:79:98:f6:2a:a8:1d:4b:
bd:af:c6:18:ce:76:04:ca:7a:ff:5d:b5:cc:d2:f9:d1:e4:41:
5b:bd:44:5d:7d:97:a2:6d:b5:7d:b9:94:2b:0e:07:f1:53:a2:
6c:8f:f7:8f:83:e9:3e:55:e8:ad:27:88:c6:a9:5a:58:cb:11:
1f:74:63:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:23:55 2025 by rpki-client