Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/c3e329-15ef-423a-bb12-3a6063cfea95/1/vuCpSZdnKpIKKQzL_QSRJvcHXJk.mft
File: vuCpSZdnKpIKKQzL_QSRJvcHXJk.mft (raw, json)
Hash identifier: MIEHp7Mrg45etCli5B0cLgH5lpMm5iZjZuNH36bqta8=
Subject key identifier: 16:79:8C:26:26:7F:20:56:5E:97:93:F8:7E:12:5E:46:7B:CF:3C:17
Authority key identifier: BE:E0:A9:49:97:67:2A:92:0A:29:0C:CB:FD:04:91:26:F7:07:5C:99
Certificate issuer: /CN=bee0a94997672a920a290ccbfd049126f7075c99
Certificate serial: 0198D6297E109A0C5EDE0CBF4854327AF883
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vuCpSZdnKpIKKQzL_QSRJvcHXJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/c3e329-15ef-423a-bb12-3a6063cfea95/1/vuCpSZdnKpIKKQzL_QSRJvcHXJk.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 09:01:39 +0000
Manifest this update: Sat 23 Aug 2025 09:01:39 +0000
Manifest next update: Sun 24 Aug 2025 09:01:39 +0000
Files and hashes: 1: N_iXT6yoM0IiJyQUNbfBu971Pc8.roa (hash: N5hBaTrYl3FRJAHCB5WOt0nXtIURvZkeHKhzHTcrevA=)
2: TDfXhLaJicDqER43mZJ9Gt5o4NM.roa (hash: xPlhAH8Cus6o3YMGrcO3bp4+1D+Angi7zwsI6/D/vLM=)
3: vuCpSZdnKpIKKQzL_QSRJvcHXJk.crl (hash: BFQaG8zXMpRCQEnQWFLheeYMZNe3oZt+vj9Dignc/1M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/c3e329-15ef-423a-bb12-3a6063cfea95/1/vuCpSZdnKpIKKQzL_QSRJvcHXJk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/c3e329-15ef-423a-bb12-3a6063cfea95/1/vuCpSZdnKpIKKQzL_QSRJvcHXJk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vuCpSZdnKpIKKQzL_QSRJvcHXJk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:29:7e:10:9a:0c:5e:de:0c:bf:48:54:32:7a:f8:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bee0a94997672a920a290ccbfd049126f7075c99
Validity
Not Before: Aug 23 09:01:39 2025 GMT
Not After : Aug 24 09:01:39 2025 GMT
Subject: CN=16798c26267f20565e9793f87e125e467bcf3c17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:86:3b:8d:31:77:af:0a:1c:b2:4e:39:28:bb:
65:77:4f:1e:b8:b3:9c:33:b5:08:a4:b8:f1:32:c5:
41:39:58:1b:69:b5:9f:74:4c:41:7f:e0:bf:01:9c:
f7:d0:ba:5d:b7:39:56:81:c3:6e:95:eb:af:63:41:
01:64:5b:79:e9:ff:10:5e:b0:65:f5:a7:65:34:c0:
96:b2:8e:8a:07:c8:63:37:41:34:12:48:0f:85:84:
79:0e:d9:47:62:d2:77:a3:fd:49:3b:ea:2a:97:ad:
e9:e6:c9:44:80:28:11:84:7a:1b:5b:7f:01:34:d5:
16:96:8f:80:d7:14:57:47:fa:e7:ec:13:5b:b0:28:
51:a8:23:cd:08:83:90:c5:bf:1f:de:e3:e8:61:17:
85:5f:b1:7a:27:3f:c2:6f:f7:8d:bd:09:0f:00:fc:
9d:f0:3a:c7:a0:9c:36:bb:ea:72:f8:83:d2:fe:24:
75:45:5d:25:20:17:2c:59:6f:e9:77:b0:d2:19:e2:
71:fe:58:bc:75:cf:47:7d:f6:2d:ee:a5:ba:f2:74:
37:dc:a9:3a:c6:cd:d5:da:9a:db:66:4b:2e:7e:84:
58:89:6e:16:2a:61:34:7d:34:34:7c:56:79:a4:89:
1d:e7:09:c0:c6:bf:b8:6e:b7:0c:61:4b:4a:c4:e4:
9a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:79:8C:26:26:7F:20:56:5E:97:93:F8:7E:12:5E:46:7B:CF:3C:17
X509v3 Authority Key Identifier:
keyid:BE:E0:A9:49:97:67:2A:92:0A:29:0C:CB:FD:04:91:26:F7:07:5C:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vuCpSZdnKpIKKQzL_QSRJvcHXJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c3e329-15ef-423a-bb12-3a6063cfea95/1/vuCpSZdnKpIKKQzL_QSRJvcHXJk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c3e329-15ef-423a-bb12-3a6063cfea95/1/vuCpSZdnKpIKKQzL_QSRJvcHXJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:c5:0b:66:9d:8e:cf:c3:00:e9:d5:22:a1:94:ec:a0:11:81:
01:97:18:97:fa:27:2f:24:ba:57:d6:58:e2:5e:e7:a3:ce:03:
27:d3:46:f3:6d:f8:7f:d0:a7:70:09:71:cb:55:63:1c:f7:53:
37:86:50:84:0d:55:ac:31:c6:9a:53:6e:dc:c4:45:40:ae:46:
27:ea:c6:aa:62:3b:50:ef:4b:8f:1d:f5:ed:62:25:dd:6e:ae:
1c:d7:ef:50:00:2e:c5:84:a4:ab:1b:32:27:45:49:25:c4:df:
a8:f8:89:05:b4:64:c5:d8:3b:8b:33:8f:1f:37:6d:cf:3d:17:
9d:df:27:e5:cc:c4:e4:5f:96:c1:0a:3f:ac:48:9d:44:28:02:
5a:04:c5:ac:04:11:05:8a:cc:97:a4:bd:13:2c:0f:ee:64:68:
29:88:87:4e:2b:6f:a2:17:74:4d:c5:b7:22:15:d4:14:4f:a7:
93:17:ff:7d:57:57:bb:dd:eb:0e:92:0d:f6:5c:a7:5c:6d:c7:
ad:b0:d3:53:a4:13:d8:08:be:72:e5:9c:d6:dc:24:e4:19:4c:
63:29:f3:08:13:8e:5f:36:5b:50:9a:9c:a8:a1:df:70:88:f9:
53:98:07:dc:62:a5:65:28:1a:59:00:22:c4:c5:e3:88:4b:d4:
97:fe:81:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWKX4Qmgxe3gy/SFQyeviDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlZTBhOTQ5OTc2NzJhOTIwYTI5MGNjYmZkMDQ5MTI2Zjcw
NzVjOTkwHhcNMjUwODIzMDkwMTM5WhcNMjUwODI0MDkwMTM5WjAzMTEwLwYDVQQD
EygxNjc5OGMyNjI2N2YyMDU2NWU5NzkzZjg3ZTEyNWU0NjdiY2YzYzE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYY7jTF3rwocsk45KLtld08euLOc
M7UIpLjxMsVBOVgbabWfdExBf+C/AZz30LpdtzlWgcNuleuvY0EBZFt56f8QXrBl
9adlNMCWso6KB8hjN0E0EkgPhYR5DtlHYtJ3o/1JO+oql63p5slEgCgRhHobW38B
NNUWlo+A1xRXR/rn7BNbsChRqCPNCIOQxb8f3uPoYReFX7F6Jz/Cb/eNvQkPAPyd
8DrHoJw2u+py+IPS/iR1RV0lIBcsWW/pd7DSGeJx/li8dc9HffYt7qW68nQ33Kk6
xs3V2prbZksufoRYiW4WKmE0fTQ0fFZ5pIkd5wnAxr+4brcMYUtKxOSaewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBZ5jCYmfyBWXpeT+H4SXkZ7zzwXMB8GA1UdIwQY
MBaAFL7gqUmXZyqSCikMy/0EkSb3B1yZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnVDcFNaZG5LcElLS1F6TF9RU1JKdmNIWEprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9jM2UzMjktMTVlZi00MjNhLWJiMTIt
M2E2MDYzY2ZlYTk1LzEvdnVDcFNaZG5LcElLS1F6TF9RU1JKdmNIWEprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS9jM2UzMjktMTVlZi00MjNhLWJiMTItM2E2MDYzY2ZlYTk1
LzEvdnVDcFNaZG5LcElLS1F6TF9RU1JKdmNIWEprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi8ULZp2O
z8MA6dUioZTsoBGBAZcYl/onLyS6V9ZY4l7no84DJ9NG8234f9CncAlxy1VjHPdT
N4ZQhA1VrDHGmlNu3MRFQK5GJ+rGqmI7UO9Ljx317WIl3W6uHNfvUAAuxYSkqxsy
J0VJJcTfqPiJBbRkxdg7izOPHzdtzz0Xnd8n5czE5F+WwQo/rEidRCgCWgTFrAQR
BYrMl6S9EywP7mRoKYiHTitvohd0TcW3IhXUFE+nkxf/fVdXu93rDpIN9lynXG3H
rbDTU6QT2Ai+cuWc1twk5BlMYynzCBOOXzZbUJqcqKHfcIj5U5gH3GKlZSgaWQAi
xMXjiEvUl/6BaQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:38:27 2025 by rpki-client