Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/eaea59-919d-4135-9bde-6dcf0c93cbdb/1/v_0PCtnHhAlsWg-56M9cLwRAQTs.mft
File: v_0PCtnHhAlsWg-56M9cLwRAQTs.mft (raw, json)
Hash identifier: fRYQK/Hfq0eVGwJJwfFxdW0oz6NSZ8IpaXKTtiaUK14=
Subject key identifier: A7:A1:17:3D:F2:41:FF:6C:C9:35:AF:34:EF:BF:46:BA:E4:54:C6:F0
Authority key identifier: BF:FD:0F:0A:D9:C7:84:09:6C:5A:0F:B9:E8:CF:5C:2F:04:40:41:3B
Certificate issuer: /CN=bffd0f0ad9c784096c5a0fb9e8cf5c2f0440413b
Certificate serial: 0198D5161F3DBAF7522696B7766C96F4544F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v_0PCtnHhAlsWg-56M9cLwRAQTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/eaea59-919d-4135-9bde-6dcf0c93cbdb/1/v_0PCtnHhAlsWg-56M9cLwRAQTs.mft
Manifest number: 0625
Signing time: Sat 23 Aug 2025 04:00:53 +0000
Manifest this update: Sat 23 Aug 2025 04:00:53 +0000
Manifest next update: Sun 24 Aug 2025 04:00:53 +0000
Files and hashes: 1: Z2OOQN_xvDinvSk0PjmWHnzGsnE.roa (hash: +MwSX4X4GjxkZcy+4f+CH7/gMqlsDpwDxxCncAgans4=)
2: v_0PCtnHhAlsWg-56M9cLwRAQTs.crl (hash: J11U2g6zMTp54kr/iqd2y+0LJvv2adDkqacLIMECiXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/eaea59-919d-4135-9bde-6dcf0c93cbdb/1/v_0PCtnHhAlsWg-56M9cLwRAQTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/eaea59-919d-4135-9bde-6dcf0c93cbdb/1/v_0PCtnHhAlsWg-56M9cLwRAQTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/v_0PCtnHhAlsWg-56M9cLwRAQTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:1f:3d:ba:f7:52:26:96:b7:76:6c:96:f4:54:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bffd0f0ad9c784096c5a0fb9e8cf5c2f0440413b
Validity
Not Before: Aug 23 04:00:53 2025 GMT
Not After : Aug 24 04:00:53 2025 GMT
Subject: CN=a7a1173df241ff6cc935af34efbf46bae454c6f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:d4:02:df:55:d7:00:d9:c4:22:1e:50:5f:2b:
98:bd:3d:3b:fb:58:43:25:91:70:cf:27:16:0d:12:
ce:6e:f6:ae:59:11:1b:72:07:28:98:c2:9b:4a:83:
9a:b7:34:cb:72:3c:37:a3:de:93:e4:38:55:6e:3b:
78:df:38:50:e4:73:56:8e:f6:96:7b:f5:b7:bd:dc:
55:48:df:6e:9c:87:42:c4:fa:45:01:2a:89:41:63:
e1:27:26:74:e4:20:16:4a:d8:71:1e:6e:4a:8f:50:
e5:6c:ff:34:57:9b:37:ef:79:24:8b:e9:ec:c2:89:
91:49:b5:5a:39:ef:ef:67:40:7e:f6:54:95:66:04:
1f:fb:50:36:fd:d3:1a:f0:5a:80:1b:c4:76:b7:ad:
ca:6d:22:eb:02:58:9b:7e:e9:dc:69:60:72:15:d6:
44:1f:da:a6:55:de:b8:e5:f7:bb:26:ac:f8:1c:de:
c6:59:6a:35:2e:3a:69:c5:26:9c:42:23:22:a0:f4:
cc:03:a4:77:6a:15:98:a9:15:60:01:02:c4:b3:f0:
62:24:80:fa:83:03:ed:5d:f6:a0:61:3c:34:0f:45:
62:2e:15:e8:0b:41:77:b4:e0:06:18:df:55:ac:f9:
b6:2f:37:6c:cd:99:65:20:5b:5e:f5:c0:1b:9c:f8:
87:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:A1:17:3D:F2:41:FF:6C:C9:35:AF:34:EF:BF:46:BA:E4:54:C6:F0
X509v3 Authority Key Identifier:
keyid:BF:FD:0F:0A:D9:C7:84:09:6C:5A:0F:B9:E8:CF:5C:2F:04:40:41:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v_0PCtnHhAlsWg-56M9cLwRAQTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/eaea59-919d-4135-9bde-6dcf0c93cbdb/1/v_0PCtnHhAlsWg-56M9cLwRAQTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/eaea59-919d-4135-9bde-6dcf0c93cbdb/1/v_0PCtnHhAlsWg-56M9cLwRAQTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:4d:6a:9f:33:84:69:93:08:bd:de:e5:90:7a:82:5f:4b:f0:
ae:3b:3b:90:ff:dd:2a:9d:53:80:f0:31:e5:a3:b2:fa:35:84:
1a:b3:b2:51:58:b0:d2:24:ab:72:58:5c:8a:77:67:c4:04:c5:
97:0e:f6:aa:64:50:42:a5:15:4e:4e:84:3f:a4:6b:9a:68:50:
3f:46:aa:10:d5:71:6e:e7:66:72:19:c8:ec:72:5a:e1:3a:16:
1a:05:3a:7a:ad:ac:90:e9:60:75:5d:42:6d:11:0c:1a:2f:7f:
3f:99:1b:83:c5:36:79:bd:61:3e:58:33:c2:12:ac:bc:90:be:
4f:e9:69:c1:55:1b:d2:09:12:9c:1c:97:17:84:63:04:ce:11:
75:f9:d2:3c:78:4a:3b:8b:3d:ff:3a:e7:d1:3f:75:48:28:9b:
66:ba:fa:31:de:ae:54:bd:d6:8b:1c:78:4a:3d:c1:23:72:81:
3a:5c:d5:56:4a:be:60:d0:1c:00:7f:23:29:6a:fb:7b:0d:04:
8c:72:08:09:a0:ce:93:31:01:e1:40:c4:d5:dd:5f:05:55:cb:
39:37:64:b6:59:77:80:4d:14:40:f7:b2:29:34:6a:f9:0d:73:
2e:ed:54:b2:94:ee:da:cf:2b:3f:a1:86:d1:ae:da:a7:62:a1:
60:a5:98:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFh89uvdSJpa3dmyW9FRPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmZmQwZjBhZDljNzg0MDk2YzVhMGZiOWU4Y2Y1YzJmMDQ0
MDQxM2IwHhcNMjUwODIzMDQwMDUzWhcNMjUwODI0MDQwMDUzWjAzMTEwLwYDVQQD
EyhhN2ExMTczZGYyNDFmZjZjYzkzNWFmMzRlZmJmNDZiYWU0NTRjNmYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2tQC31XXANnEIh5QXyuYvT07+1hD
JZFwzycWDRLObvauWREbcgcomMKbSoOatzTLcjw3o96T5DhVbjt43zhQ5HNWjvaW
e/W3vdxVSN9unIdCxPpFASqJQWPhJyZ05CAWSthxHm5Kj1DlbP80V5s373kki+ns
womRSbVaOe/vZ0B+9lSVZgQf+1A2/dMa8FqAG8R2t63KbSLrAlibfuncaWByFdZE
H9qmVd645fe7Jqz4HN7GWWo1LjppxSacQiMioPTMA6R3ahWYqRVgAQLEs/BiJID6
gwPtXfagYTw0D0ViLhXoC0F3tOAGGN9VrPm2LzdszZllIFte9cAbnPiHfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKehFz3yQf9syTWvNO+/RrrkVMbwMB8GA1UdIwQY
MBaAFL/9DwrZx4QJbFoPuejPXC8EQEE7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdl8wUEN0bkhoQWxzV2ctNTZNOWNMd1JBUVRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9lYWVhNTktOTE5ZC00MTM1LTliZGUt
NmRjZjBjOTNjYmRiLzEvdl8wUEN0bkhoQWxzV2ctNTZNOWNMd1JBUVRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC9lYWVhNTktOTE5ZC00MTM1LTliZGUtNmRjZjBjOTNjYmRi
LzEvdl8wUEN0bkhoQWxzV2ctNTZNOWNMd1JBUVRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkE1qnzOE
aZMIvd7lkHqCX0vwrjs7kP/dKp1TgPAx5aOy+jWEGrOyUViw0iSrclhcindnxATF
lw72qmRQQqUVTk6EP6RrmmhQP0aqENVxbudmchnI7HJa4ToWGgU6eq2skOlgdV1C
bREMGi9/P5kbg8U2eb1hPlgzwhKsvJC+T+lpwVUb0gkSnByXF4RjBM4RdfnSPHhK
O4s9/zrn0T91SCibZrr6Md6uVL3Wixx4Sj3BI3KBOlzVVkq+YNAcAH8jKWr7ew0E
jHIICaDOkzEB4UDE1d1fBVXLOTdktll3gE0UQPeyKTRq+Q1zLu1UspTu2s8rP6GG
0a7ap2KhYKWYdg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:04:16 2025 by rpki-client