Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/3493f6-9636-4fa3-be56-db8030879f51/1/v3rjZp-Ef6J6abFLuH-Me_15nuA.mft
File: v3rjZp-Ef6J6abFLuH-Me_15nuA.mft (raw, json)
Hash identifier: pnzmTsVOuHzGtKeBSeQi+QENsUmqpL+/78I01mDJbNA=
Subject key identifier: 15:C6:40:24:30:CC:D1:98:E8:AF:01:C3:88:E0:18:AE:87:E1:DB:1C
Authority key identifier: BF:7A:E3:66:9F:84:7F:A2:7A:69:B1:4B:B8:7F:8C:7B:FD:79:9E:E0
Certificate issuer: /CN=bf7ae3669f847fa27a69b14bb87f8c7bfd799ee0
Certificate serial: 0198D698833CB33AABFA2F28E83CFAD49594
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v3rjZp-Ef6J6abFLuH-Me_15nuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/3493f6-9636-4fa3-be56-db8030879f51/1/v3rjZp-Ef6J6abFLuH-Me_15nuA.mft
Manifest number: 0DBF
Signing time: Sat 23 Aug 2025 11:02:55 +0000
Manifest this update: Sat 23 Aug 2025 11:02:55 +0000
Manifest next update: Sun 24 Aug 2025 11:02:55 +0000
Files and hashes: 1: Z6k4PVUyfZNvtBW6nB5nR2R0amg.roa (hash: gFgurKpY3RWD/+pqzWGTie0De0tX7ossY01q+RXg6WE=)
2: v3rjZp-Ef6J6abFLuH-Me_15nuA.crl (hash: EVcaqcNnzLCUX1+693f1CKbKrkfD6AL7EeuAn23LI3k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/3493f6-9636-4fa3-be56-db8030879f51/1/v3rjZp-Ef6J6abFLuH-Me_15nuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/3493f6-9636-4fa3-be56-db8030879f51/1/v3rjZp-Ef6J6abFLuH-Me_15nuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/v3rjZp-Ef6J6abFLuH-Me_15nuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:83:3c:b3:3a:ab:fa:2f:28:e8:3c:fa:d4:95:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf7ae3669f847fa27a69b14bb87f8c7bfd799ee0
Validity
Not Before: Aug 23 11:02:55 2025 GMT
Not After : Aug 24 11:02:55 2025 GMT
Subject: CN=15c6402430ccd198e8af01c388e018ae87e1db1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:7b:ed:12:a8:5b:17:d5:43:6d:3c:38:0f:20:
ec:30:73:1c:56:ef:04:b0:f1:ec:8d:99:41:7a:ce:
59:26:90:92:d1:a5:f5:2c:f9:f0:d0:95:54:1a:5d:
01:23:a0:46:63:4f:e5:37:f1:f2:ad:f1:37:32:9c:
5f:bf:b0:84:3a:1d:70:5c:eb:5b:f5:4f:14:44:7e:
b6:6d:f6:b9:06:80:9e:b4:28:d5:a0:e4:2d:1c:c5:
76:9b:90:ed:f7:04:0e:22:5a:42:1c:cd:f7:f1:26:
35:93:83:f3:fa:93:1e:1c:87:f3:cc:b0:ad:37:77:
97:86:c9:f4:ee:31:ec:74:83:e7:13:26:7a:e7:ce:
f7:18:fa:96:a8:28:89:12:c3:84:06:ec:c9:36:3c:
5b:a8:bf:00:d5:52:97:99:c0:0b:4f:85:b5:70:51:
ea:ad:55:95:74:4a:4d:84:1d:49:36:1b:b4:85:e0:
f1:3f:db:e0:a1:7f:14:98:0c:9c:65:63:25:a6:64:
90:8d:ef:cf:d3:6a:19:b7:a3:27:86:29:4a:c2:9b:
df:f8:3d:f3:0f:1e:52:24:dc:79:e8:62:8d:9e:fa:
84:b8:8e:05:e0:d0:88:13:14:6c:6b:27:94:db:b0:
27:85:51:1d:ec:64:67:a5:1e:b4:f5:c3:60:38:c3:
3e:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:C6:40:24:30:CC:D1:98:E8:AF:01:C3:88:E0:18:AE:87:E1:DB:1C
X509v3 Authority Key Identifier:
keyid:BF:7A:E3:66:9F:84:7F:A2:7A:69:B1:4B:B8:7F:8C:7B:FD:79:9E:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v3rjZp-Ef6J6abFLuH-Me_15nuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/3493f6-9636-4fa3-be56-db8030879f51/1/v3rjZp-Ef6J6abFLuH-Me_15nuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/3493f6-9636-4fa3-be56-db8030879f51/1/v3rjZp-Ef6J6abFLuH-Me_15nuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:91:ba:f5:27:fd:a1:37:78:8d:99:de:b5:dd:3f:20:8d:96:
b1:f8:62:ad:fd:8c:de:d4:ec:75:ed:6a:21:02:f1:81:65:90:
08:f7:a8:6e:ab:0e:7c:3a:6b:2e:78:61:c6:67:1c:16:24:db:
6a:f6:25:37:e6:a1:a6:a8:8e:a0:8b:1e:a2:e5:22:5d:58:e0:
21:f8:42:40:f7:65:da:7f:57:54:53:94:36:e0:7f:f5:27:ad:
b5:12:36:7a:f3:6b:d5:09:94:b9:19:55:40:b2:bc:b9:f1:82:
63:9c:f2:f5:d0:23:ac:7f:56:f5:03:43:ab:1b:f3:96:1e:29:
27:aa:4e:e1:e2:4e:83:74:53:97:ae:4c:33:62:07:43:6d:b9:
19:52:28:9b:5c:21:73:a7:17:5c:10:94:8f:7a:29:cc:c4:3e:
43:74:6d:26:1f:0a:82:1b:f9:c1:79:ac:92:e0:05:65:3e:9a:
f0:6d:e8:64:33:53:2f:27:44:71:a9:8c:fc:d9:af:be:29:c9:
7a:d6:06:53:a3:37:22:28:0b:cf:06:ed:59:d2:a3:1c:8b:1e:
b3:e5:63:26:e2:f7:62:f6:50:20:4b:90:74:17:28:58:a6:ba:
13:83:6c:ef:23:b8:87:97:19:aa:dd:b6:67:c7:17:9d:4f:3d:
3c:86:52:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:14:33 2025 by rpki-client