Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/23fb1a-a791-400c-a41a-48ceed5e438e/1/v5joFwlZteYBj2ArOnSHstgCgQY.mft
File: v5joFwlZteYBj2ArOnSHstgCgQY.mft (raw, json)
Hash identifier: /heCi4+iXpNRgcvcIEHx9Lwxaus2ubg2EBZbha1LjRg=
Subject key identifier: CA:32:05:A8:AF:C0:5E:11:40:4E:1A:4F:E6:5D:7C:1E:99:F6:21:AA
Authority key identifier: BF:98:E8:17:09:59:B5:E6:01:8F:60:2B:3A:74:87:B2:D8:02:81:06
Certificate issuer: /CN=bf98e8170959b5e6018f602b3a7487b2d8028106
Certificate serial: 0198D4A81FBCB99286538D75E59DF2BA8A31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v5joFwlZteYBj2ArOnSHstgCgQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/23fb1a-a791-400c-a41a-48ceed5e438e/1/v5joFwlZteYBj2ArOnSHstgCgQY.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 02:00:44 +0000
Manifest this update: Sat 23 Aug 2025 02:00:44 +0000
Manifest next update: Sun 24 Aug 2025 02:00:44 +0000
Files and hashes: 1: WxyFMVLPaoedm2KunMSjCPtRmII.roa (hash: Ungr4kPsfNHZcdD5CyaeCkdVZRH3x9Cj4Xb6OMIiqY0=)
2: ekd0T-pWjR2fdJhmt79rFrJVVFk.roa (hash: SlYmHx07GpRwdPchZU3v+4uB8eJO2LbmRdoWgdkR9QQ=)
3: v5joFwlZteYBj2ArOnSHstgCgQY.crl (hash: N3IqZEikkdwDmUhSRj++8aipvI27ykdTkJNyMvJxPRY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/23fb1a-a791-400c-a41a-48ceed5e438e/1/v5joFwlZteYBj2ArOnSHstgCgQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/23fb1a-a791-400c-a41a-48ceed5e438e/1/v5joFwlZteYBj2ArOnSHstgCgQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/v5joFwlZteYBj2ArOnSHstgCgQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a8:1f:bc:b9:92:86:53:8d:75:e5:9d:f2:ba:8a:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf98e8170959b5e6018f602b3a7487b2d8028106
Validity
Not Before: Aug 23 02:00:44 2025 GMT
Not After : Aug 24 02:00:44 2025 GMT
Subject: CN=ca3205a8afc05e11404e1a4fe65d7c1e99f621aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b6:8a:e7:a8:70:3d:c7:64:21:02:b5:0c:eb:
e9:57:10:7d:22:a5:72:56:f9:ed:61:fa:1f:c6:56:
78:0b:dc:1f:cd:54:5a:4c:88:af:92:66:6a:10:6e:
26:ed:5f:a3:43:5c:a8:47:82:1b:81:b4:22:28:2b:
8f:f1:49:dd:c2:9b:90:10:86:ed:b2:9f:b3:ed:d5:
36:34:c7:5b:9c:f8:0e:00:37:da:f0:2b:d1:8c:5e:
af:f3:83:03:2d:03:ff:7b:00:81:e3:97:94:4b:4a:
db:a9:d6:a9:d8:99:7b:21:39:2e:50:d1:6a:17:68:
a4:d8:2c:fe:eb:86:2c:73:76:ec:78:b1:0b:d8:19:
a8:57:82:92:86:9a:86:0a:0d:6e:53:89:e0:41:7b:
aa:d3:d0:78:b4:f3:15:36:8b:6b:6e:ae:c9:cb:ea:
ae:72:26:f0:0d:b4:c6:3f:bc:ce:62:c5:6c:49:78:
8c:bf:e2:c6:dd:77:df:e6:c3:79:18:de:0a:b4:4f:
ab:37:80:0c:e0:8f:30:03:48:e8:28:5d:2a:d7:85:
a8:3c:78:34:02:e3:b5:62:dd:82:84:5c:0d:f1:7f:
1b:e6:aa:cd:26:d7:c2:c5:ab:e1:76:df:23:7a:b2:
04:e1:ae:3d:72:27:ef:6d:80:6e:f8:c0:56:66:f0:
c1:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:32:05:A8:AF:C0:5E:11:40:4E:1A:4F:E6:5D:7C:1E:99:F6:21:AA
X509v3 Authority Key Identifier:
keyid:BF:98:E8:17:09:59:B5:E6:01:8F:60:2B:3A:74:87:B2:D8:02:81:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v5joFwlZteYBj2ArOnSHstgCgQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/23fb1a-a791-400c-a41a-48ceed5e438e/1/v5joFwlZteYBj2ArOnSHstgCgQY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/23fb1a-a791-400c-a41a-48ceed5e438e/1/v5joFwlZteYBj2ArOnSHstgCgQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:92:f0:ef:89:23:f0:dc:f5:a7:53:57:dd:3b:19:65:28:e5:
be:2a:5d:be:ab:00:39:44:e5:fb:1c:60:e1:c2:74:bf:b2:73:
69:73:d7:04:cb:0f:f1:97:8a:c5:cd:0a:0f:d3:59:cd:b5:db:
b9:ef:cc:77:e1:71:cc:61:6b:3e:f6:51:55:31:33:0d:b6:e3:
c1:66:a5:4d:14:0a:2a:37:e2:31:7a:1b:c4:47:e0:eb:7a:79:
26:07:7a:56:de:4f:67:89:be:c3:fd:72:03:99:2d:45:20:9b:
27:97:a1:8a:8c:6a:d9:9b:b3:e4:5a:16:4a:61:d5:8e:8b:76:
4f:d3:c0:55:a1:ab:a2:e0:7d:75:df:d6:21:ec:f8:46:3f:20:
9d:a9:98:f8:1c:2b:0d:c8:02:eb:05:9c:80:bd:db:e2:4c:02:
4b:d1:68:2d:00:88:15:8c:19:46:e7:4d:c9:36:c0:fe:a9:b1:
2d:88:e1:ed:9d:af:62:38:7b:77:fb:1e:54:a3:3e:7a:d9:a2:
4b:b3:c0:cc:7f:39:84:9b:c3:2d:3e:16:86:33:76:63:77:41:
18:ec:2c:db:28:92:65:33:07:fb:ae:4f:8f:ea:40:79:88:3b:
30:9f:3f:d2:ce:d4:6f:5d:af:07:ee:69:3f:f3:fd:7b:d2:12:
0a:ba:16:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:46:48 2025 by rpki-client