Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/442101-780b-47ac-857d-f9e7cb03c527/1/vGW0uk14adXLj5V08PT-7nDrxsU.mft
File: vGW0uk14adXLj5V08PT-7nDrxsU.mft (raw, json)
Hash identifier: 6+hD3498JnYueur3/cY34ioQqm8jjYOMn9fBJ1UNERI=
Subject key identifier: EA:08:C2:58:5C:D5:8B:56:84:80:75:77:52:1B:99:AD:3D:A2:18:7A
Authority key identifier: BC:65:B4:BA:4D:78:69:D5:CB:8F:95:74:F0:F4:FE:EE:70:EB:C6:C5
Certificate issuer: /CN=bc65b4ba4d7869d5cb8f9574f0f4feee70ebc6c5
Certificate serial: 0198D85157D7544C15F9A571CD5FF05706A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vGW0uk14adXLj5V08PT-7nDrxsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/442101-780b-47ac-857d-f9e7cb03c527/1/vGW0uk14adXLj5V08PT-7nDrxsU.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 19:04:26 +0000
Manifest this update: Sat 23 Aug 2025 19:04:26 +0000
Manifest next update: Sun 24 Aug 2025 19:04:26 +0000
Files and hashes: 1: Lyt3wxp7GPsYmae1yjcH7ZriVhY.roa (hash: hPKn4hG6PTy5BGSQf4AvDzlOXQQIjurdWjZynBc0Dss=)
2: tj6K5SjptWHwjdC118oFQLdh9d0.roa (hash: r+olKMGe/rwlvBp2fd9whUIN+tGxqF1STWjeBypW8Gg=)
3: vGW0uk14adXLj5V08PT-7nDrxsU.crl (hash: x3WryvYL/VsTuddd9n2JeCUtOZKDWcDFVDF5CSHDJv0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/442101-780b-47ac-857d-f9e7cb03c527/1/vGW0uk14adXLj5V08PT-7nDrxsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/442101-780b-47ac-857d-f9e7cb03c527/1/vGW0uk14adXLj5V08PT-7nDrxsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vGW0uk14adXLj5V08PT-7nDrxsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:51:57:d7:54:4c:15:f9:a5:71:cd:5f:f0:57:06:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc65b4ba4d7869d5cb8f9574f0f4feee70ebc6c5
Validity
Not Before: Aug 23 19:04:26 2025 GMT
Not After : Aug 24 19:04:26 2025 GMT
Subject: CN=ea08c2585cd58b5684807577521b99ad3da2187a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:aa:5c:9d:30:2e:4c:01:f1:b8:2c:8a:84:61:
46:61:a8:e8:0b:b8:94:08:20:ed:9b:e0:47:55:1a:
69:f9:aa:61:63:9f:fd:6e:d1:e4:f3:40:16:4f:99:
63:02:d5:d3:2c:10:7f:6e:7a:15:f7:83:e4:c4:48:
24:80:7b:d6:04:d3:1c:0f:bf:e1:f6:d0:4f:0c:7b:
b5:19:fb:61:e6:d1:9f:84:93:7a:bd:5f:fd:94:b9:
72:c9:80:68:ff:01:6e:0a:6f:c1:1b:69:ef:3e:9e:
65:a6:f7:fb:5e:0f:8c:32:7d:a3:a3:d8:73:4f:80:
d9:09:8d:b7:15:9d:99:f2:bb:9b:63:3c:18:63:90:
11:43:d4:82:4b:af:ac:b0:c5:a0:a5:8b:ea:ad:a3:
10:b2:f7:05:d2:c9:1c:de:8a:55:4c:ed:23:73:5a:
d1:e0:95:18:f9:f3:02:22:01:b5:58:69:90:17:5e:
f5:d8:24:e5:0a:f1:ff:e6:bb:4a:18:f9:3f:2c:cf:
f3:9b:31:39:13:13:9f:44:7b:ba:21:82:c7:15:06:
1f:e8:1a:64:d8:cd:44:ca:02:0a:00:bb:08:7b:9d:
c4:d9:83:f7:7b:fa:d9:8b:24:04:17:63:43:cb:dc:
31:d2:58:ce:54:c6:7e:d4:15:49:a2:2e:7c:88:3f:
c2:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:08:C2:58:5C:D5:8B:56:84:80:75:77:52:1B:99:AD:3D:A2:18:7A
X509v3 Authority Key Identifier:
keyid:BC:65:B4:BA:4D:78:69:D5:CB:8F:95:74:F0:F4:FE:EE:70:EB:C6:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vGW0uk14adXLj5V08PT-7nDrxsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/442101-780b-47ac-857d-f9e7cb03c527/1/vGW0uk14adXLj5V08PT-7nDrxsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/442101-780b-47ac-857d-f9e7cb03c527/1/vGW0uk14adXLj5V08PT-7nDrxsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:82:47:79:8d:d4:a2:65:6d:40:77:10:39:2d:b2:9a:05:d0:
04:54:96:bd:db:5c:24:72:45:c0:5f:4b:d8:27:66:91:b3:65:
79:98:85:e7:8d:a2:05:be:21:58:0b:09:cd:94:b8:ce:0f:d1:
3c:fd:c0:e8:93:9d:c7:61:e6:05:70:2e:73:d4:62:54:aa:94:
71:47:b4:b1:34:5e:5c:eb:45:3e:02:ba:f8:a8:dd:c8:be:47:
ad:d2:a1:39:f2:24:d0:ac:29:76:2d:ef:52:d7:25:00:c3:5d:
f0:00:22:d1:86:c8:3f:2b:7c:7d:09:89:08:d6:31:86:d7:e9:
80:1e:8d:23:75:33:c8:2c:99:56:e5:cc:96:a9:75:48:c0:a4:
f7:cc:ef:be:3a:f5:bc:d6:e3:9a:8b:9c:e0:4e:cb:91:c7:71:
08:7f:30:dc:8c:7e:d1:0b:79:aa:b1:f1:29:a9:bf:28:f1:8a:
42:c2:63:25:c4:c9:e6:40:19:30:e8:1e:00:24:7b:9a:de:35:
71:74:b3:ba:ea:bd:b7:e1:1e:2e:5e:57:7c:0f:bc:e2:8f:4e:
3d:90:fa:3c:50:10:79:1a:51:e2:ce:10:69:15:cb:5d:3f:29:
d8:ab:d2:bf:b8:ef:9e:55:15:4f:b9:53:da:9e:23:1e:9a:ca:
62:54:01:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:07:53 2025 by rpki-client