Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.mft
File: vDEkfzWabUktyZQ64PAPyL4hbHg.mft (raw, json)
Hash identifier: TCPNN9dIr2Jk/48WMYVpSyEVNLU63jZ+in1Uoo+JJgM=
Subject key identifier: 42:E2:AB:62:C1:3D:7C:4A:72:8F:90:F9:65:2D:19:60:31:86:D1:83
Authority key identifier: BC:31:24:7F:35:9A:6D:49:2D:C9:94:3A:E0:F0:0F:C8:BE:21:6C:78
Certificate issuer: /CN=bc31247f359a6d492dc9943ae0f00fc8be216c78
Certificate serial: 0198D4E09EE379BBB8F46D6491167F0F959E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vDEkfzWabUktyZQ64PAPyL4hbHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 03:02:27 +0000
Manifest this update: Sat 23 Aug 2025 03:02:27 +0000
Manifest next update: Sun 24 Aug 2025 03:02:27 +0000
Files and hashes: 1: OTqu6ofFTyzK0xc5jrx6KgXbQ7M.roa (hash: McteydyUGW+LpPCexm+O1QefOp1oYc2XsREa8UjCVIA=)
2: dKgonROO4xpKslqbxO1osnY3m3M.roa (hash: Hl3GLighJnfdP7Jed7jsC0ysJmCVrDY4pvlKDvOdEYc=)
3: vDEkfzWabUktyZQ64PAPyL4hbHg.crl (hash: cPVTLIuMufaUBcwlNUX05vEoy5L9vKSHVqbgEwEnQ60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vDEkfzWabUktyZQ64PAPyL4hbHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:9e:e3:79:bb:b8:f4:6d:64:91:16:7f:0f:95:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc31247f359a6d492dc9943ae0f00fc8be216c78
Validity
Not Before: Aug 23 03:02:27 2025 GMT
Not After : Aug 24 03:02:27 2025 GMT
Subject: CN=42e2ab62c13d7c4a728f90f9652d19603186d183
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:50:5c:ba:34:81:b6:9b:b8:a3:04:3e:41:4c:
45:fd:b9:1f:cf:8d:42:d0:9b:fe:72:8b:30:c0:7c:
a3:1d:09:71:ad:0b:ee:25:db:16:12:64:b9:74:fc:
c0:62:a0:b3:ef:7b:eb:af:73:1c:60:20:54:af:d7:
8e:b3:67:5d:3a:9e:bb:01:f1:9b:ba:1b:d8:52:07:
97:77:3e:50:9e:01:c0:7b:e5:dd:40:84:da:54:81:
73:69:ec:91:ea:e4:1e:db:f4:c6:8f:e9:1f:13:e9:
08:28:f5:c4:bb:6a:17:99:81:5a:1c:e1:28:26:e9:
4f:69:8c:90:da:41:ae:24:f5:1e:e6:3e:a5:b9:e7:
11:93:06:c2:c8:02:21:75:a2:b5:f0:dd:b8:bf:e3:
e0:87:29:85:67:c2:80:e2:c0:b8:d1:72:80:0b:f5:
b5:08:2d:d4:a7:5c:a8:f1:d9:a6:f4:cb:b3:17:ac:
c4:c1:58:9a:4a:ab:7a:88:4c:5e:ae:2b:5d:32:dc:
82:e3:45:95:61:d7:e4:a4:aa:2e:96:bf:c1:a8:92:
36:b7:1a:39:66:26:bf:2c:3b:f0:72:bb:86:76:f5:
1d:d9:46:75:36:e6:e7:6b:ff:c9:e2:b3:83:7b:68:
e0:0e:ec:1a:a5:42:bd:21:0b:74:84:16:76:47:3e:
03:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:E2:AB:62:C1:3D:7C:4A:72:8F:90:F9:65:2D:19:60:31:86:D1:83
X509v3 Authority Key Identifier:
keyid:BC:31:24:7F:35:9A:6D:49:2D:C9:94:3A:E0:F0:0F:C8:BE:21:6C:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vDEkfzWabUktyZQ64PAPyL4hbHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:ad:14:d1:a4:16:96:42:e5:2c:9a:97:9d:41:42:cd:bc:cf:
4d:23:de:ba:59:80:01:c2:3b:5b:e1:b0:86:d3:22:b9:05:bb:
d8:8e:4c:cf:4c:c9:b8:7d:af:25:25:67:5c:3b:4d:fd:77:fe:
53:26:c2:c7:6e:21:47:8e:4d:2f:8c:0c:6d:47:fc:d3:e1:06:
25:35:b4:ee:05:84:a9:29:6d:19:ba:6f:13:d4:ab:87:04:58:
3f:ba:d9:3f:36:e7:2c:ab:b5:b4:21:98:ed:51:f8:76:55:87:
ca:32:99:b3:95:67:45:57:73:c0:6d:68:84:db:45:3d:2c:37:
bd:c6:fa:57:8c:11:98:05:15:86:48:4a:38:55:cd:f4:46:5c:
b1:93:05:77:ac:e5:e1:74:73:65:70:46:cf:f4:cb:46:ea:97:
5d:d8:6b:a6:35:49:ab:43:06:7f:e5:b0:f2:45:7d:80:e0:62:
13:95:97:ff:e4:c1:0c:ba:32:8d:45:22:dd:42:cb:18:fc:4a:
6c:f5:5d:5e:0f:27:64:b3:5a:e8:4d:a5:ea:36:ce:37:7e:ee:
0c:98:72:eb:09:ad:b6:62:96:f6:76:a5:e3:6d:4f:aa:6b:5e:
be:1a:ad:94:1c:8b:b6:18:50:fe:78:de:60:b4:9c:d5:40:de:
25:ea:6e:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:18:24 2025 by rpki-client