Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.mft
File: v0tRsLrEX6ImvS3P8Rcw7UDsIUk.mft (raw, json)
Hash identifier: ly3TP1/l914SGUPC8HYFCk0yyR36QN24r/fKrOqdoWw=
Subject key identifier: 60:43:A2:57:5B:06:5A:72:82:C0:6B:9F:05:F0:97:5C:32:50:D5:5B
Authority key identifier: BF:4B:51:B0:BA:C4:5F:A2:26:BD:2D:CF:F1:17:30:ED:40:EC:21:49
Certificate issuer: /CN=bf4b51b0bac45fa226bd2dcff11730ed40ec2149
Certificate serial: 0198D5F1783E4ABA9A31B027E42860B8DF1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 08:00:28 +0000
Manifest this update: Sat 23 Aug 2025 08:00:28 +0000
Manifest next update: Sun 24 Aug 2025 08:00:28 +0000
Files and hashes: 1: 1-MOd61mqzzUd3k7RQR0FdOI1Nn0.roa (hash: Ney+qmboFEb3EnQIoVOu45+2AwAnlZ+xcFMz6UpUYIw=)
2: v0tRsLrEX6ImvS3P8Rcw7UDsIUk.crl (hash: BnfeiFXE98V6AuVB4ZKteT9Qt9wsDT51RNKyaCP2zAA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:78:3e:4a:ba:9a:31:b0:27:e4:28:60:b8:df:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf4b51b0bac45fa226bd2dcff11730ed40ec2149
Validity
Not Before: Aug 23 08:00:28 2025 GMT
Not After : Aug 24 08:00:28 2025 GMT
Subject: CN=6043a2575b065a7282c06b9f05f0975c3250d55b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:15:84:af:e0:2b:d7:5b:ca:c3:13:29:3f:22:
bc:d2:ce:54:9f:2e:a4:79:87:95:fa:7c:93:09:14:
0c:c1:58:87:57:d2:b4:55:a9:3e:78:ce:a6:18:c2:
9e:3d:8c:6d:52:86:a1:2c:09:cf:66:df:e5:47:6b:
fe:b5:54:53:30:54:0d:c7:c8:42:81:b5:9a:61:f7:
cf:59:70:d5:1a:48:0f:57:60:5a:3b:ab:81:64:cf:
29:97:4e:c5:f2:88:9f:26:1e:31:ee:3a:68:73:da:
4d:6a:f6:f8:e1:e6:3c:7d:a2:de:54:5b:fc:ed:f9:
81:f2:6d:77:60:3d:cd:03:2a:28:d1:20:fa:4b:53:
73:47:35:e5:2d:c8:38:59:81:3d:b9:f9:c8:4d:4a:
0f:4b:56:f9:82:9d:c6:28:22:75:04:86:32:c4:0a:
37:51:80:3c:90:49:44:b5:c7:2e:5a:7f:1d:a1:36:
39:0e:f2:e2:83:ad:c3:f8:57:f8:d5:b5:36:df:40:
b3:98:00:4c:09:29:58:43:a1:9d:ac:ce:d5:57:6c:
f3:f8:56:62:ce:0d:23:49:80:26:7b:33:98:93:29:
cf:7d:fe:2b:dd:25:a5:2f:4c:ad:f7:dd:c2:75:d7:
2c:04:f4:9b:71:c3:36:a5:f1:af:6f:2e:40:6d:2b:
17:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:43:A2:57:5B:06:5A:72:82:C0:6B:9F:05:F0:97:5C:32:50:D5:5B
X509v3 Authority Key Identifier:
keyid:BF:4B:51:B0:BA:C4:5F:A2:26:BD:2D:CF:F1:17:30:ED:40:EC:21:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:a2:e3:65:f0:38:c8:43:14:cb:89:22:ef:0d:7f:c5:42:eb:
79:5b:18:a8:8c:dc:0f:32:f7:be:b6:3f:61:37:9c:ab:ce:41:
c0:8a:bf:eb:ef:a9:5f:68:c0:5b:5c:e9:a1:24:f7:cd:bb:a0:
9b:28:87:3b:bf:57:6b:cb:f0:67:a3:74:d4:b6:e6:1d:ec:9d:
82:7c:58:cc:7e:42:90:46:ce:da:c7:70:99:03:4f:dd:ac:ec:
df:0a:05:d3:cb:88:6a:33:f7:4c:8b:b8:11:62:4a:9c:01:8d:
01:39:41:e0:5b:99:64:72:f5:cf:0c:06:ab:5f:25:67:76:cf:
dc:a8:40:82:8f:71:99:30:85:02:49:8e:df:0d:b4:5a:22:db:
81:13:69:80:49:2c:b1:be:33:9f:36:1e:7d:50:08:7c:5c:e3:
b9:4f:21:5a:6c:56:4f:8c:16:21:86:26:58:2a:f4:4f:72:71:
9a:b9:1a:9e:b3:58:1a:6f:6d:77:6c:2e:92:f5:53:ff:b5:20:
c1:6b:d7:c4:db:6a:28:d9:61:a6:aa:51:a4:22:6d:e3:3b:79:
a6:20:4e:ae:e2:1c:3a:4f:fa:8a:d5:70:0d:50:25:48:2e:ac:
9d:36:28:cc:12:cb:9f:3b:86:dc:58:7d:fa:96:74:94:84:35:
90:01:14:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:22:51 2025 by rpki-client