Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/vvUlLMrD9twUJrVT8sHHIzrMiUs.mft
File: vvUlLMrD9twUJrVT8sHHIzrMiUs.mft (raw, json)
Hash identifier: Ib2A+x8dvyuaWYE8eSPHoPKmu4vE70+Mu+O95GHONvA=
Subject key identifier: 9F:7A:A8:83:72:1E:10:7B:1B:72:78:8F:F4:F4:B3:56:9F:51:B1:87
Authority key identifier: BE:F5:25:2C:CA:C3:F6:DC:14:26:B5:53:F2:C1:C7:23:3A:CC:89:4B
Certificate issuer: /CN=bef5252ccac3f6dc1426b553f2c1c7233acc894b
Certificate serial: 0198D884A5AC89F46E1B8595420558A6BCE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vvUlLMrD9twUJrVT8sHHIzrMiUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/vvUlLMrD9twUJrVT8sHHIzrMiUs.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 20:00:28 +0000
Manifest this update: Sat 23 Aug 2025 20:00:28 +0000
Manifest next update: Sun 24 Aug 2025 20:00:28 +0000
Files and hashes: 1: cztKiFowQoK_UYPJ2AEdLhmfdJY.roa (hash: zSStQQUNC6z+zgYsdleYs1GIe5kvbt6u6C94AWl4nn0=)
2: vvUlLMrD9twUJrVT8sHHIzrMiUs.crl (hash: UJ7bfAInVgO2lZl4XpfAYaQ+SdZ98BQaJCUfVKWdJWU=)
3: xlHcoYULH7mPEmpcqtscwUSRg-k.roa (hash: A4kztX9ZPQEUnGsY/7aFwo4jdiC6qf6Ig/R2vXwJcNU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/vvUlLMrD9twUJrVT8sHHIzrMiUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/vvUlLMrD9twUJrVT8sHHIzrMiUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/vvUlLMrD9twUJrVT8sHHIzrMiUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 20:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:84:a5:ac:89:f4:6e:1b:85:95:42:05:58:a6:bc:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bef5252ccac3f6dc1426b553f2c1c7233acc894b
Validity
Not Before: Aug 23 20:00:28 2025 GMT
Not After : Aug 24 20:00:28 2025 GMT
Subject: CN=9f7aa883721e107b1b72788ff4f4b3569f51b187
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:21:07:ee:3e:39:94:69:90:bd:6f:06:91:39:
2b:91:8c:14:92:23:7b:a1:3c:61:dc:cb:16:93:a1:
ff:09:e8:ce:b7:b7:d5:21:f3:24:2c:5c:00:9b:97:
7c:0a:56:9d:5d:b4:dc:71:65:8e:1c:7c:61:2d:8e:
e4:2a:3a:e5:a3:22:f5:2d:1c:d1:04:3f:d3:c2:d5:
a6:60:18:d7:4b:0c:af:b5:3c:8c:db:9f:82:f2:27:
1d:1c:3f:8f:c5:86:b6:99:dc:56:73:66:12:b1:c9:
cc:d3:bb:e6:c0:f0:bc:df:57:02:7b:70:0b:99:85:
9e:a2:8c:37:04:1a:dc:5d:2c:0a:c0:f2:6c:9c:d3:
df:37:8a:d0:f9:da:5c:26:d5:a1:68:ca:50:68:2f:
62:a5:60:07:42:6a:4c:32:a9:fa:5c:f9:35:62:3d:
bf:59:c5:c9:4e:ed:68:98:3d:47:d3:c0:8a:e5:2e:
80:ea:f8:a3:10:5e:da:cf:9f:ea:d5:46:c3:5c:ad:
a7:49:86:fb:f6:4e:f2:dc:cb:84:1e:94:61:09:c4:
4d:20:8b:77:91:c3:b1:a7:1c:4e:62:76:8e:ed:d0:
1e:28:09:54:f9:56:9d:35:b1:48:2a:ca:37:9a:c2:
df:3f:e2:62:4a:e0:d3:95:ae:34:3d:95:1f:4b:08:
f6:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:7A:A8:83:72:1E:10:7B:1B:72:78:8F:F4:F4:B3:56:9F:51:B1:87
X509v3 Authority Key Identifier:
keyid:BE:F5:25:2C:CA:C3:F6:DC:14:26:B5:53:F2:C1:C7:23:3A:CC:89:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vvUlLMrD9twUJrVT8sHHIzrMiUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/vvUlLMrD9twUJrVT8sHHIzrMiUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/e7fc98-128a-453d-bdfb-11e5f6d12ef1/1/vvUlLMrD9twUJrVT8sHHIzrMiUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:01:53:44:d4:5b:8e:21:d6:fd:6a:b0:52:3d:38:16:10:22:
c0:05:47:e8:61:90:b0:9b:09:bb:cd:94:9b:ce:86:4a:55:d7:
7a:09:42:31:06:90:14:6c:a3:80:e8:96:3a:f6:f5:21:d2:75:
07:12:4e:ec:76:5d:7f:dc:e6:2e:67:68:96:ab:43:75:88:6b:
57:12:56:f6:1c:3f:30:74:b0:b0:02:47:44:0c:2c:fa:88:1e:
7f:0d:eb:a6:37:88:04:80:59:b9:23:e5:b9:3f:34:93:a4:db:
ce:74:66:4d:c4:a1:91:6d:a6:94:7b:29:ab:de:7f:a6:e7:da:
5c:0c:b4:2b:fa:8d:ab:da:b0:10:6a:f7:34:09:a1:3e:65:cc:
3f:80:5a:84:46:0d:b1:d2:95:ef:b4:1d:d2:af:65:59:db:b8:
54:c0:e2:fd:d8:d4:ae:49:88:3d:17:83:c4:a2:c6:aa:86:a3:
90:40:83:44:45:a1:ef:d8:5f:3e:99:e3:57:cd:f6:e9:38:8b:
55:f1:3f:ca:dc:1e:1a:64:7c:21:7b:98:dd:35:c7:ec:22:c1:
5e:4a:36:30:30:58:18:a6:43:84:51:fd:a6:e0:34:11:65:8a:
00:b3:9d:3d:e8:f2:8d:28:1e:71:ce:bf:ba:4a:f2:13:64:02:
4f:b3:78:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 03:45:48 2025 by rpki-client