Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/67e36c-cd55-4b59-aa12-7442f0e2bd17/1/1-vZEdu85RbNE_-442lbKzMXQObA.mft
File: 1-vZEdu85RbNE_-442lbKzMXQObA.mft (raw, json)
Hash identifier: cXB1L7yQOLcsBrhpxNkk+B/oNGWr8+pmsYOqxJKVpgs=
Subject key identifier: CC:FF:72:C2:3D:00:F7:34:19:A5:23:D7:45:49:F7:6C:D0:8E:73:D4
Authority key identifier: FA:F6:44:76:EF:39:45:B3:44:FF:EE:38:DA:56:CA:CC:C5:D0:39:B0
Certificate issuer: /CN=faf64476ef3945b344ffee38da56caccc5d039b0
Certificate serial: 0198D4E024200C39EAE1A5C10014E72D5ECA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-vZEdu85RbNE_-442lbKzMXQObA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/67e36c-cd55-4b59-aa12-7442f0e2bd17/1/1-vZEdu85RbNE_-442lbKzMXQObA.mft
Manifest number: 164E
Signing time: Sat 23 Aug 2025 03:01:55 +0000
Manifest this update: Sat 23 Aug 2025 03:01:55 +0000
Manifest next update: Sun 24 Aug 2025 03:01:55 +0000
Files and hashes: 1: 1-vZEdu85RbNE_-442lbKzMXQObA.crl (hash: y7amPcWn7B0mEAGOiNRI7/peGdDIdBOV9e4dmJPywUM=)
2: SyEVUI3N-GA_i-uzTD16e1zmM2E.roa (hash: LqMTwONwWzte69tiLUqbC66cMzx5aiQvY2EzU+SnCGc=)
3: jnW4jrIpgrgFGee1gUUQCX9nMQM.roa (hash: Pg7xp2U2lzFs5nMdCFW1WCbmFf1TrwqIn5BPDmSukZg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/67e36c-cd55-4b59-aa12-7442f0e2bd17/1/1-vZEdu85RbNE_-442lbKzMXQObA.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/67e36c-cd55-4b59-aa12-7442f0e2bd17/1/1-vZEdu85RbNE_-442lbKzMXQObA.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-vZEdu85RbNE_-442lbKzMXQObA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:24:20:0c:39:ea:e1:a5:c1:00:14:e7:2d:5e:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faf64476ef3945b344ffee38da56caccc5d039b0
Validity
Not Before: Aug 23 03:01:55 2025 GMT
Not After : Aug 24 03:01:55 2025 GMT
Subject: CN=ccff72c23d00f73419a523d74549f76cd08e73d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:cf:79:2e:64:71:cf:2e:b0:2b:3b:31:cf:26:
59:5f:23:f2:f1:2c:92:71:25:39:5c:e7:1f:cf:cc:
c0:97:ed:ff:8c:ae:df:c6:49:c3:47:e6:25:66:16:
bb:f4:5f:98:72:f7:60:d4:8d:5f:c3:2b:80:b8:d3:
b9:47:7b:a0:dc:51:09:88:a2:04:6a:9c:0a:47:d8:
74:1c:f3:c7:fb:02:14:ee:b2:32:ba:a1:80:4a:16:
6f:de:4f:50:36:52:67:a7:f9:cc:33:20:8f:ed:53:
a2:29:ff:a6:20:b4:2a:72:1c:4e:34:8a:bb:ae:45:
41:16:ee:a8:10:df:d8:c4:8a:5a:97:ac:2b:94:9a:
25:ad:81:6a:31:f6:26:e8:d6:98:59:3f:62:7b:94:
55:d7:63:72:ad:65:0a:9d:ad:04:97:50:a0:91:1e:
2c:2d:e5:e5:8f:f6:a1:91:24:5c:55:be:53:a3:d9:
b2:9c:15:ab:44:23:1a:06:ae:34:6b:0a:20:88:b0:
98:fa:87:64:31:09:d4:e2:44:52:aa:27:7e:db:d6:
2f:f8:93:87:d3:fb:8b:a5:b0:e6:80:ad:fd:dc:4f:
d2:a2:5f:9e:21:b0:87:a9:6b:34:b7:a8:ef:b6:a3:
bc:b2:de:aa:8b:90:14:06:5d:7a:a6:80:dc:e8:28:
50:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:FF:72:C2:3D:00:F7:34:19:A5:23:D7:45:49:F7:6C:D0:8E:73:D4
X509v3 Authority Key Identifier:
keyid:FA:F6:44:76:EF:39:45:B3:44:FF:EE:38:DA:56:CA:CC:C5:D0:39:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-vZEdu85RbNE_-442lbKzMXQObA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/67e36c-cd55-4b59-aa12-7442f0e2bd17/1/1-vZEdu85RbNE_-442lbKzMXQObA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/67e36c-cd55-4b59-aa12-7442f0e2bd17/1/1-vZEdu85RbNE_-442lbKzMXQObA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:2f:32:1e:f2:01:f8:80:dc:5e:aa:af:e3:37:ee:29:bf:75:
45:1b:50:79:98:df:53:48:64:14:01:59:63:63:d7:58:bf:76:
30:b2:09:53:34:13:a1:76:2d:45:d9:43:2b:f6:12:c9:61:45:
da:89:28:23:e1:38:24:bb:92:0d:43:c1:6a:28:14:76:52:2b:
0e:c8:f0:6d:ff:ac:85:2b:8c:9d:2e:ac:73:b8:d4:4c:f4:ae:
e4:54:a6:b4:9a:bc:dd:03:31:15:c1:2c:11:b4:67:50:0d:90:
1e:00:fa:4c:e2:46:c8:14:64:f2:18:4d:a2:fc:cd:e5:b4:fb:
e5:f9:e9:4c:e9:18:1d:a8:0a:75:02:e0:7d:c1:70:b7:d1:b0:
6a:ff:f3:c7:3f:df:93:20:b5:b8:8e:07:60:af:41:6d:bc:a9:
c1:7d:33:ae:a3:68:f5:54:8a:04:4f:31:eb:2d:98:a8:16:c9:
7a:9c:63:d3:b3:d8:4e:09:7f:e6:00:07:87:4c:e2:f6:bf:a2:
8f:77:6c:5b:d7:0a:78:92:e4:79:9b:15:22:91:b8:3c:49:f9:
80:75:d4:53:28:83:15:97:54:9c:99:91:1a:da:1b:5e:4d:39:
e2:00:82:f9:c8:de:1c:ec:97:24:08:ca:63:8d:17:b3:fb:d8:
40:ae:64:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:29:14 2025 by rpki-client