Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/00c711-0c29-4301-94bc-ea57cbe36811/1/v-b8dorUe5aOCiWf7Mij2jL6xeo.mft
File: v-b8dorUe5aOCiWf7Mij2jL6xeo.mft (raw, json)
Hash identifier: YbqeLe15Png+a3vOvvzQC1s4d59JHkFUY4VcA0+VJx8=
Subject key identifier: F9:1B:FC:28:D7:53:DD:18:2A:56:7A:25:9C:EA:36:93:2C:95:DC:11
Authority key identifier: BF:E6:FC:76:8A:D4:7B:96:8E:0A:25:9F:EC:C8:A3:DA:32:FA:C5:EA
Certificate issuer: /CN=bfe6fc768ad47b968e0a259fecc8a3da32fac5ea
Certificate serial: 0198D4E080AA6A23CA83526C01EDB32A0AFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v-b8dorUe5aOCiWf7Mij2jL6xeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/00c711-0c29-4301-94bc-ea57cbe36811/1/v-b8dorUe5aOCiWf7Mij2jL6xeo.mft
Manifest number: 164E
Signing time: Sat 23 Aug 2025 03:02:19 +0000
Manifest this update: Sat 23 Aug 2025 03:02:19 +0000
Manifest next update: Sun 24 Aug 2025 03:02:19 +0000
Files and hashes: 1: BbPU1Bnn4njLoJyEV_1fon0xq_M.roa (hash: hSofywL/61c+ycaV0QrJyYDUafrPsowFjsTpxS/wPU8=)
2: idgepXLlrREH-xoC6R-XHWqyAro.roa (hash: m88a+GTZ/SRnSaetSuTlX6BeBnowd2dvflLVRuisI/M=)
3: v-b8dorUe5aOCiWf7Mij2jL6xeo.crl (hash: DjO0WfnA0JhmK7pBiVMADjN8a6aTgG7Zak1Jaw+Jn6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/00c711-0c29-4301-94bc-ea57cbe36811/1/v-b8dorUe5aOCiWf7Mij2jL6xeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/00c711-0c29-4301-94bc-ea57cbe36811/1/v-b8dorUe5aOCiWf7Mij2jL6xeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/v-b8dorUe5aOCiWf7Mij2jL6xeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:80:aa:6a:23:ca:83:52:6c:01:ed:b3:2a:0a:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfe6fc768ad47b968e0a259fecc8a3da32fac5ea
Validity
Not Before: Aug 23 03:02:19 2025 GMT
Not After : Aug 24 03:02:19 2025 GMT
Subject: CN=f91bfc28d753dd182a567a259cea36932c95dc11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:9b:92:05:3c:97:18:8e:8f:53:44:42:5f:4b:
57:50:55:f4:54:0e:d3:4d:43:3d:27:45:67:66:47:
cd:f6:27:e0:5c:a4:dc:aa:bc:b7:d2:01:d9:24:e6:
b1:fa:cf:82:84:83:b8:5e:75:31:d6:94:78:98:b4:
a5:51:40:20:a5:1e:a0:f3:19:3e:3e:9c:89:a2:c3:
0d:1a:ed:b3:1a:13:08:7d:f6:de:b8:46:ce:b6:73:
3b:ff:fe:40:0a:af:51:7f:9c:d9:10:54:19:ff:cb:
2b:8c:fd:6d:e0:93:e4:e7:34:ce:09:c7:25:c6:56:
d0:32:9c:4c:a7:01:44:e8:10:24:28:e5:e7:7b:1a:
58:11:57:41:60:0f:24:76:38:86:dd:cf:41:13:93:
fc:ad:a2:c0:d7:81:4d:62:55:db:d5:c3:3d:ed:6d:
0b:85:14:81:8c:31:4e:8f:1e:1c:9f:76:10:45:ab:
1c:b0:48:e4:9b:a6:51:8e:97:48:a9:9a:c7:59:fe:
c1:b9:ab:5a:99:d0:86:17:b0:8d:2e:76:f5:25:c0:
92:20:f5:8d:43:99:fc:89:75:62:92:82:7d:d8:77:
10:71:64:c5:05:2b:9d:09:7a:2e:15:73:d0:76:1f:
c4:a9:ed:9f:00:6a:6a:10:58:9a:b0:0d:ee:49:1d:
61:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:1B:FC:28:D7:53:DD:18:2A:56:7A:25:9C:EA:36:93:2C:95:DC:11
X509v3 Authority Key Identifier:
keyid:BF:E6:FC:76:8A:D4:7B:96:8E:0A:25:9F:EC:C8:A3:DA:32:FA:C5:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v-b8dorUe5aOCiWf7Mij2jL6xeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/00c711-0c29-4301-94bc-ea57cbe36811/1/v-b8dorUe5aOCiWf7Mij2jL6xeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/00c711-0c29-4301-94bc-ea57cbe36811/1/v-b8dorUe5aOCiWf7Mij2jL6xeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:34:79:b6:40:45:b3:01:c7:df:b4:40:59:de:4c:5e:fa:16:
7f:00:d5:f4:6e:12:59:44:1f:03:ff:73:03:27:31:c5:6f:16:
37:df:2b:7a:e4:54:e4:b5:6e:5b:e4:ac:24:02:37:4b:5d:54:
c0:80:66:94:97:d5:f7:04:d8:e4:4e:88:93:82:1c:15:76:d7:
51:37:16:a9:c3:dc:d8:44:a5:73:e2:2c:bb:86:a4:66:b8:61:
cb:14:03:6a:33:f8:5c:40:27:85:17:8a:41:2e:dd:1e:b8:46:
13:26:82:ac:71:e6:ef:63:cc:4b:2a:fb:99:80:8c:6c:b3:81:
7d:9a:28:a4:ec:3c:ee:fe:7c:f5:ea:9e:df:7d:1b:8d:a6:87:
65:25:17:0e:bd:c3:e9:5e:e9:8a:72:9d:96:34:02:aa:4c:0a:
57:47:59:47:da:97:c9:94:e0:db:07:bf:36:a3:73:35:46:0d:
ec:b5:42:88:b4:58:52:2e:cc:be:66:51:98:51:a0:6d:14:32:
59:d8:3c:ca:f2:43:58:a7:11:3a:bf:ca:52:40:3d:ba:dd:27:
8c:e9:53:45:23:d0:1d:d0:43:fc:32:76:26:1f:65:f5:79:ab:
b0:e2:7e:ce:ce:56:c3:e2:f6:57:5d:73:e4:74:cb:f7:15:02:
06:93:77:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:32:40 2025 by rpki-client