Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/vCDUGtNXDtiIw7mjlYQ9KMS95w4.mft
File: vCDUGtNXDtiIw7mjlYQ9KMS95w4.mft (raw, json)
Hash identifier: bQf8hYRBu6FXImQAy+8FN0c3hy1XYESmpOwjMhBRqXI=
Subject key identifier: 10:57:10:A5:97:4A:A6:EE:83:0C:18:18:D6:AE:83:A3:2E:39:2C:51
Authority key identifier: BC:20:D4:1A:D3:57:0E:D8:88:C3:B9:A3:95:84:3D:28:C4:BD:E7:0E
Certificate issuer: /CN=bc20d41ad3570ed888c3b9a395843d28c4bde70e
Certificate serial: 0198D4E0CBA15F9C354CBCE0CC7E1F8E8DB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vCDUGtNXDtiIw7mjlYQ9KMS95w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/vCDUGtNXDtiIw7mjlYQ9KMS95w4.mft
Manifest number: 164E
Signing time: Sat 23 Aug 2025 03:02:38 +0000
Manifest this update: Sat 23 Aug 2025 03:02:38 +0000
Manifest next update: Sun 24 Aug 2025 03:02:38 +0000
Files and hashes: 1: 2_V6lJnSbHp-dXL7YMoo09f6snw.roa (hash: OhjwpaD5BnWeaMwPzsn2/JlXIUwI6tpxdz7vTY63lGM=)
2: vCDUGtNXDtiIw7mjlYQ9KMS95w4.crl (hash: V4VFJSZX5SBE2xsITuJOIsKyugto9MQtj+LD35AXWtU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/vCDUGtNXDtiIw7mjlYQ9KMS95w4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/vCDUGtNXDtiIw7mjlYQ9KMS95w4.mft
rsync://rpki.ripe.net/repository/DEFAULT/vCDUGtNXDtiIw7mjlYQ9KMS95w4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:cb:a1:5f:9c:35:4c:bc:e0:cc:7e:1f:8e:8d:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc20d41ad3570ed888c3b9a395843d28c4bde70e
Validity
Not Before: Aug 23 03:02:38 2025 GMT
Not After : Aug 24 03:02:38 2025 GMT
Subject: CN=105710a5974aa6ee830c1818d6ae83a32e392c51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:55:ee:92:59:01:fe:40:a5:0a:6e:b7:8f:5d:
5d:b3:98:0d:37:69:37:5b:67:45:3a:81:a4:94:10:
fa:18:fe:1f:a7:75:13:af:b0:90:42:2a:f9:d2:48:
b0:fc:fb:0b:6b:78:f2:7f:dc:ac:7b:30:97:ce:b6:
68:e0:2c:39:ab:e3:b9:e3:d6:b7:07:fd:76:93:0e:
2f:cc:7c:85:3b:cd:3d:c6:3e:7e:47:66:7f:0d:23:
0c:37:0a:fe:cb:21:3b:f2:61:26:08:c4:7c:f8:7c:
2d:ca:7f:e1:e7:bd:20:b1:df:ce:73:78:1f:65:d2:
ab:b5:8a:46:03:a7:49:59:18:5e:b4:fb:3e:e1:a5:
aa:49:65:b4:7b:8b:5b:92:70:c1:15:ea:cd:61:1e:
f6:a6:db:1e:a6:7b:a0:14:85:d5:fd:0c:76:87:b9:
63:43:03:a9:c8:1f:97:89:a6:d4:f5:77:a3:4b:ae:
c2:37:7d:32:75:6f:fe:1f:74:93:67:d0:84:de:32:
0a:7f:b7:a1:c1:e5:d9:fe:62:60:9e:37:68:de:19:
9d:34:ec:53:40:a7:5a:93:cd:1c:79:45:5f:a5:e4:
32:66:8d:2b:01:89:fe:51:48:fd:98:b1:3b:e4:87:
be:b0:29:d2:e5:42:19:00:09:63:97:e3:18:53:9a:
d9:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:57:10:A5:97:4A:A6:EE:83:0C:18:18:D6:AE:83:A3:2E:39:2C:51
X509v3 Authority Key Identifier:
keyid:BC:20:D4:1A:D3:57:0E:D8:88:C3:B9:A3:95:84:3D:28:C4:BD:E7:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vCDUGtNXDtiIw7mjlYQ9KMS95w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/vCDUGtNXDtiIw7mjlYQ9KMS95w4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/79ff5d-6dfe-441b-a21d-135c40217b86/1/vCDUGtNXDtiIw7mjlYQ9KMS95w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:0f:01:b8:18:98:f2:8b:87:7e:a0:c8:24:e6:47:97:33:6b:
0a:d1:ba:ad:26:b0:4c:42:c0:74:bd:50:fa:bb:75:97:be:aa:
f4:2a:33:21:28:9d:9f:91:2c:3e:29:e9:3f:83:59:25:d9:a4:
8a:4a:f6:b9:84:0c:e8:59:4e:d2:4d:84:ba:52:ef:2f:05:ec:
9f:0f:1a:fc:88:59:ab:0c:07:ab:d4:57:7d:ff:0c:7e:d1:02:
47:32:82:31:b3:74:e3:10:fb:cd:58:0d:9a:71:66:c8:2c:58:
1d:5a:b5:aa:2c:eb:fc:34:55:15:23:15:60:52:a9:c3:38:d5:
26:79:fc:a5:b9:0b:d8:16:8e:d9:62:25:de:4b:84:23:4e:e5:
d5:4f:b4:73:5c:2d:54:92:26:4f:36:7c:7b:43:03:fe:fe:b9:
fd:af:4e:a4:77:3a:a8:fb:5d:08:a1:0e:29:6c:41:da:03:56:
eb:c9:33:8a:65:49:40:cd:8a:cb:9a:92:01:2e:73:9c:fd:70:
1b:85:3b:ea:07:83:84:91:4a:2d:a0:91:0e:53:8d:06:bf:2b:
f8:bb:cd:7c:84:51:27:b7:5b:f5:75:99:86:8b:eb:9c:4c:8c:
be:ba:ed:29:d2:70:ca:fd:d2:ab:be:1c:b1:b0:4c:da:a1:0b:
d8:7b:43:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU4MuhX5w1TLzgzH4fjo2zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjMjBkNDFhZDM1NzBlZDg4OGMzYjlhMzk1ODQzZDI4YzRi
ZGU3MGUwHhcNMjUwODIzMDMwMjM4WhcNMjUwODI0MDMwMjM4WjAzMTEwLwYDVQQD
EygxMDU3MTBhNTk3NGFhNmVlODMwYzE4MThkNmFlODNhMzJlMzkyYzUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlXuklkB/kClCm63j11ds5gNN2k3
W2dFOoGklBD6GP4fp3UTr7CQQir50kiw/PsLa3jyf9ysezCXzrZo4Cw5q+O549a3
B/12kw4vzHyFO809xj5+R2Z/DSMMNwr+yyE78mEmCMR8+Hwtyn/h570gsd/Oc3gf
ZdKrtYpGA6dJWRhetPs+4aWqSWW0e4tbknDBFerNYR72ptsepnugFIXV/Qx2h7lj
QwOpyB+XiabU9XejS67CN30ydW/+H3STZ9CE3jIKf7ehweXZ/mJgnjdo3hmdNOxT
QKdak80ceUVfpeQyZo0rAYn+UUj9mLE75Ie+sCnS5UIZAAljl+MYU5rZfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBBXEKWXSqbugwwYGNaug6MuOSxRMB8GA1UdIwQY
MBaAFLwg1BrTVw7YiMO5o5WEPSjEvecOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkNEVUd0TlhEdGlJdzdtamxZUTlLTVM5NXc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi83OWZmNWQtNmRmZS00NDFiLWEyMWQt
MTM1YzQwMjE3Yjg2LzEvdkNEVUd0TlhEdGlJdzdtamxZUTlLTVM5NXc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi83OWZmNWQtNmRmZS00NDFiLWEyMWQtMTM1YzQwMjE3Yjg2
LzEvdkNEVUd0TlhEdGlJdzdtamxZUTlLTVM5NXc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbA8BuBiY
8ouHfqDIJOZHlzNrCtG6rSawTELAdL1Q+rt1l76q9CozISidn5EsPinpP4NZJdmk
ikr2uYQM6FlO0k2EulLvLwXsnw8a/IhZqwwHq9RXff8MftECRzKCMbN04xD7zVgN
mnFmyCxYHVq1qizr/DRVFSMVYFKpwzjVJnn8pbkL2BaO2WIl3kuEI07l1U+0c1wt
VJImTzZ8e0MD/v65/a9OpHc6qPtdCKEOKWxB2gNW68kzimVJQM2Ky5qSAS5znP1w
G4U76geDhJFKLaCRDlONBr8r+LvNfIRRJ7db9XWZhovrnEyMvrrtKdJwyv3Sq74c
sbBM2qEL2HtDfQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:25:03 2025 by rpki-client