Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/d52e84-eb84-45c2-b6c5-51c1faa4718f/1/0bvzaAza5sJnqY0D0I9rI9DtHUY.mft
File: 0bvzaAza5sJnqY0D0I9rI9DtHUY.mft (raw, json)
Hash identifier: lvZgHKzJjebuEA4AnMNu8v8dZUokPtMVqkIXwTnrUfA=
Subject key identifier: 20:81:D9:FC:13:9E:00:98:43:E8:4A:7F:5F:9D:F0:DB:50:F5:AD:A1
Authority key identifier: D1:BB:F3:68:0C:DA:E6:C2:67:A9:8D:03:D0:8F:6B:23:D0:ED:1D:46
Certificate issuer: /CN=d1bbf3680cdae6c267a98d03d08f6b23d0ed1d46
Certificate serial: 0198D697FB6362F9A06252F508CABCD91E14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0bvzaAza5sJnqY0D0I9rI9DtHUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/d52e84-eb84-45c2-b6c5-51c1faa4718f/1/0bvzaAza5sJnqY0D0I9rI9DtHUY.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 11:02:21 +0000
Manifest this update: Sat 23 Aug 2025 11:02:21 +0000
Manifest next update: Sun 24 Aug 2025 11:02:21 +0000
Files and hashes: 1: 0bvzaAza5sJnqY0D0I9rI9DtHUY.crl (hash: wI6vr1zgAf9dJcb9TTVtHqDXodJEKLeY7InIpAz3QOk=)
2: Mbm6QXqJoPSY8lmJ2uuYnoixdss.roa (hash: YVUXdFTCHChTHodePJ+65GQKTip7VafzN3LWZ67guNY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/d52e84-eb84-45c2-b6c5-51c1faa4718f/1/0bvzaAza5sJnqY0D0I9rI9DtHUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/d52e84-eb84-45c2-b6c5-51c1faa4718f/1/0bvzaAza5sJnqY0D0I9rI9DtHUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0bvzaAza5sJnqY0D0I9rI9DtHUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:97:fb:63:62:f9:a0:62:52:f5:08:ca:bc:d9:1e:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1bbf3680cdae6c267a98d03d08f6b23d0ed1d46
Validity
Not Before: Aug 23 11:02:21 2025 GMT
Not After : Aug 24 11:02:21 2025 GMT
Subject: CN=2081d9fc139e009843e84a7f5f9df0db50f5ada1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:1d:c4:05:ee:a7:77:6d:6c:2e:df:d1:56:3f:
c8:c1:de:2f:3b:9f:2f:97:5a:36:f7:70:ea:22:65:
fe:1f:0a:2c:76:26:6b:5c:59:b4:4e:56:70:85:dd:
fd:c6:4c:88:ea:c9:58:a8:cb:de:af:e9:ee:47:a0:
de:cd:65:e4:03:4d:b1:85:58:89:35:6e:a1:74:cf:
70:15:d7:05:ea:92:cb:74:c8:52:9a:5b:4a:9a:1f:
cb:21:2e:3e:06:08:45:e3:d0:7d:fd:11:41:fa:64:
39:bb:41:ca:6c:2a:4b:21:07:cb:70:e5:a2:89:73:
ee:15:03:0a:94:72:e8:71:a7:f4:e0:09:de:40:b2:
3f:18:52:61:c3:b1:51:65:99:61:d7:ce:b2:77:49:
ea:42:57:1d:0b:b0:ee:9a:50:09:f6:d6:c8:e5:4c:
b9:75:40:c2:99:1e:a5:4a:d4:a6:b8:af:79:0a:df:
97:72:ef:3c:c0:5c:04:27:b2:22:b9:bc:8c:c1:be:
d0:c8:9a:58:8f:3f:a4:04:49:b9:0b:9b:61:35:b2:
74:a0:24:9b:6b:b6:c7:12:14:90:ed:ce:55:1f:10:
6f:be:fb:aa:d7:df:bc:40:62:57:d7:19:47:b6:f8:
f1:cf:ba:50:4f:bb:15:e0:74:00:5f:1f:0f:0e:0b:
4e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:81:D9:FC:13:9E:00:98:43:E8:4A:7F:5F:9D:F0:DB:50:F5:AD:A1
X509v3 Authority Key Identifier:
keyid:D1:BB:F3:68:0C:DA:E6:C2:67:A9:8D:03:D0:8F:6B:23:D0:ED:1D:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0bvzaAza5sJnqY0D0I9rI9DtHUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d52e84-eb84-45c2-b6c5-51c1faa4718f/1/0bvzaAza5sJnqY0D0I9rI9DtHUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d52e84-eb84-45c2-b6c5-51c1faa4718f/1/0bvzaAza5sJnqY0D0I9rI9DtHUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:21:e8:7d:cf:13:ae:1a:50:d3:f0:e0:6c:f1:83:05:86:4a:
a5:60:eb:e4:91:4c:0b:bc:66:9e:10:76:59:56:45:8c:36:bc:
69:e9:1e:d1:7f:19:00:fc:b7:10:b7:32:bc:d1:cb:90:46:38:
5d:12:b8:a9:4c:49:8b:7f:e2:16:4d:36:a8:34:71:ea:b0:6e:
59:12:61:22:3b:0f:d9:08:52:72:97:8b:ce:2b:aa:d5:98:6d:
85:cc:67:e7:17:dc:e3:d4:01:f5:97:c0:5f:dd:c1:e1:e7:f4:
89:98:c2:3a:db:b8:c5:a3:7d:87:2b:ac:1f:11:aa:f5:12:a5:
34:14:9d:02:79:7e:e0:87:f5:09:58:98:02:b7:27:4e:53:54:
01:22:09:d1:54:9b:79:7a:89:64:4b:19:f7:5f:69:45:76:91:
38:fa:f0:46:1d:5e:6e:fe:d1:69:6f:40:ec:26:bc:42:db:39:
95:a5:7f:60:70:89:ba:96:7d:ee:b3:66:1c:84:f8:33:ef:65:
80:29:42:29:bb:5d:26:65:0f:21:77:a5:c4:76:67:d7:d4:ad:
69:16:f7:20:d5:5d:7e:90:6f:67:63:8a:55:72:8a:72:38:09:
ae:46:05:19:2e:3c:fb:e2:21:be:59:d9:39:5e:31:f1:23:d0:
b2:7f:b7:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:14:31 2025 by rpki-client