Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.mft
File: fVAuLSSx8haRMIggeiaOZiawzjk.mft (raw, json)
Hash identifier: byHoQHNqG1uR5tSJ2awickzBJhTPy9MFRyZCu56L8qk=
Subject key identifier: 12:5F:D2:23:2F:52:74:8B:5A:14:B2:46:6E:3A:C9:86:39:92:FD:6C
Authority key identifier: 7D:50:2E:2D:24:B1:F2:16:91:30:88:20:7A:26:8E:66:26:B0:CE:39
Certificate issuer: /CN=7d502e2d24b1f216913088207a268e6626b0ce39
Certificate serial: 0198D4E02CBC8004B4006E1305778DC5A37C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVAuLSSx8haRMIggeiaOZiawzjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 03:01:57 +0000
Manifest this update: Sat 23 Aug 2025 03:01:57 +0000
Manifest next update: Sun 24 Aug 2025 03:01:57 +0000
Files and hashes: 1: 4xfLpgjd4Enxc-qc8nof3OkbJKI.roa (hash: qMoNzrHzj4dbd+webpPz0KwxOvGmhXmFlkGqK08FyRc=)
2: 7JwTekQ2tjFEdZLkqTIWTWDl694.roa (hash: vwEa+p0/d9QBYzjnHEhK+7G2R/Qxw/NinB7TZ/V7TxA=)
3: fVAuLSSx8haRMIggeiaOZiawzjk.crl (hash: edQCV+gIuVbRPWeAeD6Z0yCrm4FCIUrrNiggwEsCVDE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVAuLSSx8haRMIggeiaOZiawzjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:2c:bc:80:04:b4:00:6e:13:05:77:8d:c5:a3:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d502e2d24b1f216913088207a268e6626b0ce39
Validity
Not Before: Aug 23 03:01:57 2025 GMT
Not After : Aug 24 03:01:57 2025 GMT
Subject: CN=125fd2232f52748b5a14b2466e3ac9863992fd6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:8f:ba:3e:00:83:8f:3c:44:20:7d:4a:b0:fc:
ec:04:d4:c1:58:e9:f9:20:7a:4f:3c:9b:e2:46:eb:
6d:f7:85:46:4f:8d:8f:84:ae:f8:07:b6:07:9f:9d:
b7:92:ec:cd:f3:89:df:42:5d:a0:03:e9:b7:c1:c4:
dd:6e:02:4e:de:6b:38:69:6e:16:65:ab:20:5f:01:
a2:ca:67:f2:4d:f8:b6:37:44:f3:83:c0:46:45:85:
83:2e:68:9b:22:57:07:2d:5b:77:82:fe:b7:65:52:
1f:58:f4:50:d5:56:77:71:a4:5a:ad:c6:b8:3c:b2:
89:b7:9e:65:b5:60:88:99:6b:c1:36:9c:c9:57:8c:
78:bd:36:b1:b3:d1:46:3c:ac:be:f7:02:65:20:fd:
1e:15:70:0b:0b:e0:70:42:f0:e9:0f:c3:92:8d:bb:
95:b8:56:93:3d:ce:0e:5c:59:ea:72:a5:84:8b:a4:
c8:a6:b5:46:96:60:82:c0:f1:3c:84:f0:f0:44:21:
1a:18:cd:00:a2:5b:86:b9:1d:37:53:e7:6e:72:cb:
1a:8a:f0:cc:54:e5:29:87:67:d3:d2:11:69:86:6f:
fa:93:a2:6d:51:3b:f5:9d:37:f4:35:c6:1f:ec:df:
a6:f4:36:63:22:e3:bf:bb:63:1a:94:35:47:c4:88:
33:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:5F:D2:23:2F:52:74:8B:5A:14:B2:46:6E:3A:C9:86:39:92:FD:6C
X509v3 Authority Key Identifier:
keyid:7D:50:2E:2D:24:B1:F2:16:91:30:88:20:7A:26:8E:66:26:B0:CE:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVAuLSSx8haRMIggeiaOZiawzjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:de:b9:bd:bd:6d:88:51:3f:d6:8f:2b:02:06:53:bd:6b:fd:
85:a7:36:73:60:4f:24:aa:bb:51:9f:17:c4:12:d7:3f:80:c0:
fe:60:3e:66:5c:43:52:c3:2b:b0:2f:42:37:4b:fc:4b:c9:1e:
3e:0e:9b:21:d1:27:ef:fe:79:d2:a6:e3:16:d2:48:3a:ee:db:
46:64:2c:41:75:7b:88:84:f8:14:17:92:c6:02:26:ff:b5:25:
d4:81:e2:12:14:c5:ed:e0:7b:8c:b2:4e:a3:31:de:9f:72:8c:
d2:80:4c:54:d8:e9:ae:5d:02:85:5e:b2:36:31:5d:71:d6:2a:
ac:38:42:38:81:ce:a4:2b:47:f6:4d:31:e0:7e:4a:ed:0e:75:
a8:79:7b:28:fa:85:4e:50:4d:be:ea:e7:94:8c:3f:fc:d3:ea:
60:87:aa:26:c1:2d:84:a9:3a:9f:10:42:45:ab:85:82:53:92:
84:a2:b2:9a:34:02:65:99:46:81:3e:ea:66:cd:21:31:62:db:
51:ad:25:e1:b9:90:36:4e:ce:fa:e8:74:50:8e:46:a4:dc:22:
d9:8f:65:de:b6:c0:ec:4e:f9:f0:7a:8f:0b:63:1a:63:1e:a9:
d5:f9:67:8a:eb:3c:0f:fb:2e:94:c7:22:1b:50:51:00:f5:a5:
a4:c7:30:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:27:42 2025 by rpki-client