Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.mft
File: 2vtkXxNPT9raRecLz82TuJfb1yU.mft (raw, json)
Hash identifier: x2D99SdpfqAxKQt5SHFAiE4LyXCy2ivMbR1syjy9OtE=
Subject key identifier: DA:BD:41:FF:FA:E7:ED:7C:00:B0:31:79:16:4D:CE:DF:7A:92:7C:ED
Authority key identifier: DA:FB:64:5F:13:4F:4F:DA:DA:45:E7:0B:CF:CD:93:B8:97:DB:D7:25
Certificate issuer: /CN=dafb645f134f4fdada45e70bcfcd93b897dbd725
Certificate serial: 0198D583BFECB20ED322905DEEC669026816
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2vtkXxNPT9raRecLz82TuJfb1yU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.mft
Manifest number: 165A
Signing time: Sat 23 Aug 2025 06:00:37 +0000
Manifest this update: Sat 23 Aug 2025 06:00:37 +0000
Manifest next update: Sun 24 Aug 2025 06:00:37 +0000
Files and hashes: 1: 1-ANTwxkMiMKQB8xGwWXlceOK28w.roa (hash: CGGHdGVU7wSNMOEYT0PFZuvvNwO+aPmiIHIahEg7OsM=)
2: 2vtkXxNPT9raRecLz82TuJfb1yU.crl (hash: oHC9DsZMh26SaMVY+wrlRiqdXlFENVHoCVN+eRFC5eI=)
3: OVvSE0umfCafdF8GBhnUzkw6GgQ.roa (hash: uBO3ZxlAsPptAYBmUB8o0+apZBCG8SM73O12SZ0wtoI=)
4: PB7iIGKrDK97LW2R8MB2s86RYac.roa (hash: WmZvf5hoyroankBIMBpV0PHxkWR9+aExsWVo3nYOgg0=)
5: S7t59LlNCvxgMI7DsGNSR4qMw34.roa (hash: 4sO8Qj6ryDL8EQZQIGGVCpEKJDIwq55BmcA8TSzv0hc=)
6: bPTKlYF7fifjOqSTQNeQoeP_kuk.roa (hash: Ig5CuSUtEUSpLkPiPPlcB0rfKh8VZMxcp4q355338uk=)
7: k2MwpYy3078S260mykYqGyjDM9M.roa (hash: B5YQnM96hhYb/liddrILOeInZbquc/XQMtKwLnspcOk=)
8: tDMe4xxusG4_nRn5fi_c_u7WdKk.roa (hash: mHno5k7JcmFvfoqPEzv0djEKAYVxO3uLY89gsIjau0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2vtkXxNPT9raRecLz82TuJfb1yU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:bf:ec:b2:0e:d3:22:90:5d:ee:c6:69:02:68:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dafb645f134f4fdada45e70bcfcd93b897dbd725
Validity
Not Before: Aug 23 06:00:37 2025 GMT
Not After : Aug 24 06:00:37 2025 GMT
Subject: CN=dabd41fffae7ed7c00b03179164dcedf7a927ced
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:da:ec:7e:45:30:0a:0a:a8:1d:41:b7:52:98:
f5:93:66:6e:b5:29:9b:e6:f4:d9:9e:c5:4c:ea:70:
96:5e:a4:26:15:46:52:f7:29:3e:0f:bb:38:1a:5e:
27:5a:42:37:0e:de:49:2d:a8:32:0d:f3:38:33:f1:
87:9a:96:ec:bd:74:e6:87:41:95:91:c7:67:e9:fc:
fc:71:ec:63:7b:d9:8e:4e:59:c0:26:c0:6f:ab:ed:
8f:d0:75:82:2a:de:bc:12:78:e4:d4:8a:62:8d:1a:
e9:00:7f:ee:27:df:51:28:af:d7:17:87:b8:8c:cf:
4b:af:07:41:e7:0d:71:2d:74:28:43:66:35:20:34:
43:9b:c1:7a:c2:1b:b9:96:f0:04:3f:bc:21:44:94:
51:91:be:80:67:4f:69:b2:9d:cd:34:10:1a:f3:69:
f3:91:b0:87:2e:5c:22:33:8e:d2:85:c2:35:fc:ae:
b3:43:92:46:a3:82:ba:c1:55:00:50:d4:2d:cd:f8:
76:25:59:ee:b1:fe:e1:1a:db:37:0c:60:5b:44:f9:
eb:ee:57:71:95:da:ff:f2:cb:c5:ec:d4:a9:64:d2:
ea:27:37:ba:86:75:9f:27:16:c9:78:09:03:5e:54:
02:49:ea:ba:e4:93:65:f6:f0:55:99:c7:0d:13:bf:
43:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:BD:41:FF:FA:E7:ED:7C:00:B0:31:79:16:4D:CE:DF:7A:92:7C:ED
X509v3 Authority Key Identifier:
keyid:DA:FB:64:5F:13:4F:4F:DA:DA:45:E7:0B:CF:CD:93:B8:97:DB:D7:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2vtkXxNPT9raRecLz82TuJfb1yU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:c3:b2:89:31:7f:b7:36:76:e7:c3:33:42:be:71:a6:b0:98:
1a:88:e8:40:bc:53:0b:54:a3:51:79:19:d6:9b:dc:53:b6:38:
ae:38:7f:cc:81:70:de:16:79:9c:70:93:e7:11:f9:0b:45:42:
be:4c:6b:17:29:07:cf:99:5b:4a:47:b5:b6:55:27:21:72:7f:
60:39:05:41:f7:51:f6:69:02:16:f9:c0:17:eb:ce:5c:61:4e:
58:49:54:0f:b4:84:a6:27:2b:28:01:e3:49:40:b8:4c:7e:04:
b1:08:5e:78:95:0d:e1:33:d9:0a:ad:18:8f:04:5e:65:29:0c:
05:52:9f:d3:6b:36:c2:09:4e:e6:7a:56:23:93:0e:48:ce:00:
17:f3:fb:d5:97:94:f2:24:67:60:bf:d6:e2:dd:4a:a3:ff:e0:
c8:2f:f7:7d:11:b1:8a:4d:7c:03:14:a0:bb:b5:e1:b4:4e:99:
8f:c5:9f:8c:ef:6b:51:b1:b4:d0:83:5e:bb:a0:c0:1c:ee:93:
82:d0:4b:80:8f:ce:fa:a6:91:4c:fc:74:44:02:94:44:38:09:
e9:d5:50:5e:d1:f6:7b:5c:0c:ab:c6:de:fb:f1:bf:4f:85:4e:
4c:b1:0f:8d:26:b1:a4:45:c6:66:71:2e:95:07:19:f0:bd:19:
9e:7e:aa:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:15:15 2025 by rpki-client