Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/b15658-10b6-4041-a3da-8d3a6d165da3/1/v-NULdY_7SUN5ctl9uykh-f0eEc.mft
File: v-NULdY_7SUN5ctl9uykh-f0eEc.mft (raw, json)
Hash identifier: ZWLd3czhYl8Rel9+iVqb8oV7AW+r/X7wlBvXoM81YRY=
Subject key identifier: 7C:E1:FE:A7:3F:4E:0D:2A:8E:D1:5E:0C:55:C4:AB:6B:A9:7D:36:E3
Authority key identifier: BF:E3:54:2D:D6:3F:ED:25:0D:E5:CB:65:F6:EC:A4:87:E7:F4:78:47
Certificate issuer: /CN=bfe3542dd63fed250de5cb65f6eca487e7f47847
Certificate serial: 0198D705FF8C0154626E4AC45EB2F6F783DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v-NULdY_7SUN5ctl9uykh-f0eEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/b15658-10b6-4041-a3da-8d3a6d165da3/1/v-NULdY_7SUN5ctl9uykh-f0eEc.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 13:02:31 +0000
Manifest this update: Sat 23 Aug 2025 13:02:31 +0000
Manifest next update: Sun 24 Aug 2025 13:02:31 +0000
Files and hashes: 1: 7_ycmg0-2tzp7CIdo8gplL9a278.roa (hash: XEoDI5Kr97fRLNGyRswSpfdzIPuYNKJgNWwTLw/sOpg=)
2: u42E-rWAmQgBLYpngQke_W6nUiE.roa (hash: skcKb420yoQzvUX8+CNyJl60MwIyb91kXhUGkdXKV9A=)
3: v-NULdY_7SUN5ctl9uykh-f0eEc.crl (hash: FCU/yDMKWlh9uxGd/1yuBZIsAiUCkZ75jEJIM+7UlBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/b15658-10b6-4041-a3da-8d3a6d165da3/1/v-NULdY_7SUN5ctl9uykh-f0eEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/b15658-10b6-4041-a3da-8d3a6d165da3/1/v-NULdY_7SUN5ctl9uykh-f0eEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/v-NULdY_7SUN5ctl9uykh-f0eEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:ff:8c:01:54:62:6e:4a:c4:5e:b2:f6:f7:83:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfe3542dd63fed250de5cb65f6eca487e7f47847
Validity
Not Before: Aug 23 13:02:31 2025 GMT
Not After : Aug 24 13:02:31 2025 GMT
Subject: CN=7ce1fea73f4e0d2a8ed15e0c55c4ab6ba97d36e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:dd:51:e6:67:6b:3b:f6:f4:6c:bd:e9:4f:19:
e5:0f:9c:b1:c9:db:a7:6d:72:ab:c1:e6:a3:4d:dc:
62:69:9d:62:55:e7:5b:39:13:14:be:ce:11:b7:00:
91:31:fa:fc:51:2c:31:aa:d4:bc:ba:d6:03:5f:9f:
ef:de:c8:7a:83:3b:f6:ae:cb:3a:0c:34:bd:2b:0b:
88:ed:8b:73:9a:bb:d5:ba:ad:21:0e:be:4a:07:af:
3a:9e:0f:f9:eb:07:a3:c8:fa:4b:7a:4b:93:cb:34:
10:4e:bc:63:4a:db:f3:bb:0c:37:86:b4:c9:b6:4d:
e4:8f:4c:4f:7c:de:d3:17:5d:93:5b:12:34:52:0c:
d4:35:19:6f:ae:18:ef:df:49:fe:0f:70:74:2d:da:
07:8a:24:11:bd:df:51:7f:07:11:07:38:3b:ef:13:
0b:28:28:bc:ac:8b:33:05:87:3b:7f:fb:22:ed:d3:
a2:73:82:77:54:3b:79:c4:9c:5d:35:ec:a0:54:36:
90:23:85:fe:53:81:9f:5b:a7:77:03:ab:c5:68:59:
b5:1c:13:67:ad:9b:c2:3b:57:be:59:57:cd:bf:9b:
21:50:39:fc:c1:2d:28:8c:59:c1:aa:e3:60:0e:30:
6a:19:11:ea:ed:97:a6:7d:04:8b:54:af:8c:49:9b:
6e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:E1:FE:A7:3F:4E:0D:2A:8E:D1:5E:0C:55:C4:AB:6B:A9:7D:36:E3
X509v3 Authority Key Identifier:
keyid:BF:E3:54:2D:D6:3F:ED:25:0D:E5:CB:65:F6:EC:A4:87:E7:F4:78:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v-NULdY_7SUN5ctl9uykh-f0eEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b15658-10b6-4041-a3da-8d3a6d165da3/1/v-NULdY_7SUN5ctl9uykh-f0eEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b15658-10b6-4041-a3da-8d3a6d165da3/1/v-NULdY_7SUN5ctl9uykh-f0eEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:a3:9f:9d:87:38:5c:e7:2a:e0:7f:8f:e2:ba:03:8b:9f:fa:
db:5f:d2:0e:61:52:13:fb:1a:b3:e7:90:b8:55:87:a1:46:73:
c3:29:8a:19:75:d1:30:32:25:c8:c0:6e:ff:f4:15:ab:ec:1a:
c7:22:17:4f:09:ff:8c:a7:68:d4:02:c3:6c:4a:95:ef:73:f4:
26:1f:d1:22:5f:c4:e0:89:30:74:2b:3d:c6:ea:ba:ce:c1:15:
c2:3f:30:4e:2c:21:ec:bb:8e:39:e6:7f:1b:b8:d8:2c:f1:a6:
7a:87:be:9a:8a:88:47:2d:f1:f6:d1:4e:10:14:44:76:7b:89:
11:2c:ba:52:8a:c3:34:43:78:cd:6a:4b:69:2b:68:91:c8:02:
95:97:6f:05:9c:a5:8b:e7:83:46:92:91:30:ad:7d:51:39:05:
4c:06:fe:2b:91:4a:54:b4:37:7d:08:6f:36:c4:03:28:46:30:
32:d7:91:2f:a3:c0:08:0c:e5:25:d9:fe:ad:9d:e4:5f:0f:86:
3a:ae:21:10:b3:ae:73:5c:82:6c:96:97:2e:e2:df:b2:a7:02:
c2:a5:a1:6b:e1:8d:d2:83:6e:6a:e1:ef:8c:29:14:96:d4:be:
a4:11:9f:b1:af:a6:ad:39:42:cb:97:f7:87:60:27:08:3a:a2:
cb:e5:d7:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:45:26 2025 by rpki-client