Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/c9f33b-2f1b-4a11-a21d-9a6bd011f8f6/1/rvHu-qdX046xBPpMuk2WK3LlK1I.mft
File: rvHu-qdX046xBPpMuk2WK3LlK1I.mft (raw, json)
Hash identifier: KTxYGeTPKoSfJ1ApVkTJQNPVs4+aCYnSDOcSRL8mMIo=
Subject key identifier: 86:1C:FF:E2:96:40:14:EA:9D:C8:29:7F:9D:2E:F7:72:F1:95:6B:9D
Authority key identifier: AE:F1:EE:FA:A7:57:D3:8E:B1:04:FA:4C:BA:4D:96:2B:72:E5:2B:52
Certificate issuer: /CN=aef1eefaa757d38eb104fa4cba4d962b72e52b52
Certificate serial: 0198D6612E8A577B73D3A6E6D1EB6BCFA45D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rvHu-qdX046xBPpMuk2WK3LlK1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/c9f33b-2f1b-4a11-a21d-9a6bd011f8f6/1/rvHu-qdX046xBPpMuk2WK3LlK1I.mft
Manifest number: 1650
Signing time: Sat 23 Aug 2025 10:02:29 +0000
Manifest this update: Sat 23 Aug 2025 10:02:29 +0000
Manifest next update: Sun 24 Aug 2025 10:02:29 +0000
Files and hashes: 1: jtrE-ZquFgpFsUyQd2ruDZJ4V1Y.roa (hash: DLSZmdArA6I562nrgAPaSvfYMqezrmvR6p+K4KjZ8d8=)
2: rvHu-qdX046xBPpMuk2WK3LlK1I.crl (hash: kl6YNUg8UFmmQkFsZQRcuLhUofheDw473IIO0s2Mv10=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/c9f33b-2f1b-4a11-a21d-9a6bd011f8f6/1/rvHu-qdX046xBPpMuk2WK3LlK1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/c9f33b-2f1b-4a11-a21d-9a6bd011f8f6/1/rvHu-qdX046xBPpMuk2WK3LlK1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/rvHu-qdX046xBPpMuk2WK3LlK1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:2e:8a:57:7b:73:d3:a6:e6:d1:eb:6b:cf:a4:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aef1eefaa757d38eb104fa4cba4d962b72e52b52
Validity
Not Before: Aug 23 10:02:29 2025 GMT
Not After : Aug 24 10:02:29 2025 GMT
Subject: CN=861cffe2964014ea9dc8297f9d2ef772f1956b9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f3:a1:f1:28:49:17:4a:df:3d:76:6d:00:33:
6d:c0:09:e4:73:5d:93:b2:f4:59:13:1a:ee:ee:fc:
6b:5f:81:4f:3c:9f:54:8e:d6:31:63:40:23:23:e0:
14:88:df:d4:46:ce:a5:20:49:45:ce:10:cb:00:c7:
2b:57:39:4d:d6:94:08:61:d1:18:0c:0f:ac:f3:cf:
c8:8d:4e:8b:96:49:c2:9c:7d:0e:49:ec:26:cf:7e:
4f:f2:8e:83:3b:a8:64:17:23:91:b7:b2:0b:46:d4:
c0:44:65:64:4d:2c:2f:d1:6d:e7:4e:d2:30:76:f9:
b4:dc:9e:36:95:95:8f:cb:92:a6:e8:1b:db:42:d9:
ea:11:f0:dc:17:33:1a:72:e9:4c:12:77:95:06:38:
11:7e:07:cb:ec:2b:95:90:ad:71:cb:13:07:04:15:
bf:ed:98:64:d7:af:e7:1a:60:8f:9d:8a:d1:1b:e5:
33:1e:3f:ea:df:53:88:94:33:0d:c7:b5:61:2f:2c:
fe:62:3c:08:ef:2d:7c:7e:0e:d8:ca:42:1b:36:35:
42:7f:5a:7f:06:12:bb:82:43:b8:a5:dd:d5:45:a3:
db:33:82:c8:39:07:b1:52:77:8a:80:70:bc:50:db:
21:12:09:fb:24:66:d1:4c:d3:77:a5:d3:67:54:ee:
35:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:1C:FF:E2:96:40:14:EA:9D:C8:29:7F:9D:2E:F7:72:F1:95:6B:9D
X509v3 Authority Key Identifier:
keyid:AE:F1:EE:FA:A7:57:D3:8E:B1:04:FA:4C:BA:4D:96:2B:72:E5:2B:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rvHu-qdX046xBPpMuk2WK3LlK1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c9f33b-2f1b-4a11-a21d-9a6bd011f8f6/1/rvHu-qdX046xBPpMuk2WK3LlK1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/c9f33b-2f1b-4a11-a21d-9a6bd011f8f6/1/rvHu-qdX046xBPpMuk2WK3LlK1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:6d:19:ba:08:e5:7c:29:90:f4:7a:65:df:03:8c:43:9c:0c:
ea:48:cd:5e:de:cd:8d:3d:84:a3:07:fe:16:e6:09:59:fd:6e:
0e:8a:1d:7e:30:df:4d:38:09:b5:3b:dd:5d:6b:6b:85:c2:22:
7e:51:02:9b:da:95:b9:ef:ce:9b:94:fc:44:a7:74:39:a1:a9:
9d:49:1e:4a:cc:d2:0e:b3:2b:40:34:4d:35:60:5e:49:fb:bf:
fe:24:68:e5:aa:2d:6f:6d:2b:5b:ec:11:e8:4f:cc:e5:22:73:
03:a2:3f:0a:39:31:9a:a9:45:36:57:db:23:75:4b:f8:78:b5:
45:f4:8e:92:a9:d2:25:d9:c1:eb:1f:70:1e:e0:e8:b3:8e:46:
4d:40:4b:f6:f4:a1:d8:63:09:ab:4b:a2:02:44:1a:f1:b1:88:
2c:03:63:86:03:6f:cd:56:a8:59:62:72:6a:fc:a8:95:d2:4f:
e5:da:da:e8:f8:58:8a:ec:56:97:52:cf:19:2c:16:ab:c1:f7:
da:e7:ad:f4:97:65:d4:c3:12:42:df:69:cc:3e:82:7a:30:fd:
6c:d9:ad:59:a9:6c:59:5a:01:b6:86:8c:4d:07:69:8a:b5:9a:
4d:b4:d7:1c:54:12:9a:c8:e3:41:db:cc:1b:0e:39:33:8d:22:
1b:a0:68:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:09:00 2025 by rpki-client