Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/3f85da-311f-45b4-a747-56560b26a0db/1/VEbfB_88sm389O64dh-wFsr3-e4.mft
File: VEbfB_88sm389O64dh-wFsr3-e4.mft (raw, json)
Hash identifier: d6aVV8Xt1KO3pc0hqPjWWMpP2xcWHO1WB5P9s9gb+4w=
Subject key identifier: 8C:2F:05:BC:CE:FB:A8:8A:8A:82:43:04:D9:92:A9:7B:B2:39:26:20
Authority key identifier: 54:46:DF:07:FF:3C:B2:6D:FC:F4:EE:B8:76:1F:B0:16:CA:F7:F9:EE
Certificate issuer: /CN=5446df07ff3cb26dfcf4eeb8761fb016caf7f9ee
Certificate serial: 0198D51614AC0B155F539D1508F0AB7F5FE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VEbfB_88sm389O64dh-wFsr3-e4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/3f85da-311f-45b4-a747-56560b26a0db/1/VEbfB_88sm389O64dh-wFsr3-e4.mft
Manifest number: 3C
Signing time: Sat 23 Aug 2025 04:00:50 +0000
Manifest this update: Sat 23 Aug 2025 04:00:50 +0000
Manifest next update: Sun 24 Aug 2025 04:00:50 +0000
Files and hashes: 1: Mt4ySnJ9tLnzzQYq2U6tfp3Q3JA.roa (hash: Czeue2iwQkgf4dbWmDFWclQeOMsHJV7V0inLeSwakN8=)
2: VEbfB_88sm389O64dh-wFsr3-e4.crl (hash: mt/KvRcMCxCxBqzOHJCkYPwy7bZIkydHbTti9JJhSRw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/3f85da-311f-45b4-a747-56560b26a0db/1/VEbfB_88sm389O64dh-wFsr3-e4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/3f85da-311f-45b4-a747-56560b26a0db/1/VEbfB_88sm389O64dh-wFsr3-e4.mft
rsync://rpki.ripe.net/repository/DEFAULT/VEbfB_88sm389O64dh-wFsr3-e4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:14:ac:0b:15:5f:53:9d:15:08:f0:ab:7f:5f:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5446df07ff3cb26dfcf4eeb8761fb016caf7f9ee
Validity
Not Before: Aug 23 04:00:50 2025 GMT
Not After : Aug 24 04:00:50 2025 GMT
Subject: CN=8c2f05bccefba88a8a824304d992a97bb2392620
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c7:d7:cd:8b:ce:a7:44:f4:cc:c6:da:82:cd:
79:48:2f:d8:63:05:f0:79:0b:26:98:64:b3:19:e0:
cb:84:87:a1:6d:4a:62:c5:b3:c3:8a:52:c2:f5:82:
26:a0:22:09:3f:f6:18:40:b3:5a:74:ab:5e:f1:ec:
bc:bb:2b:64:2c:df:c7:4b:ed:57:b2:21:4b:30:56:
5f:53:da:10:a8:ca:1c:f8:20:3c:5a:a5:c4:ef:df:
67:6b:30:32:3d:53:c7:d4:86:26:36:75:19:a1:56:
13:27:ba:10:f5:2d:90:34:61:35:c0:55:2d:f8:51:
05:b2:ef:d5:9c:83:5c:22:f4:65:5e:5b:a5:83:00:
67:67:85:ab:19:42:6b:2e:06:3e:a5:02:2d:f2:55:
c5:f6:3f:64:27:f9:8b:e8:1b:27:c0:af:a5:2b:74:
f4:6e:27:42:f7:ce:fb:d7:73:57:5d:4f:d8:fa:80:
a0:b5:ae:b8:6e:ff:83:ce:94:3a:2f:35:04:f7:8b:
d4:88:95:9e:fa:d4:bd:db:86:a7:79:43:d1:22:e0:
a9:1f:35:f9:87:26:c2:cc:44:54:d8:2b:0b:81:d1:
cd:dd:81:22:96:4f:9b:d8:4b:23:2d:ef:7d:ad:15:
fb:da:42:4b:84:93:6c:dd:f9:d5:33:7a:b4:18:0a:
37:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:2F:05:BC:CE:FB:A8:8A:8A:82:43:04:D9:92:A9:7B:B2:39:26:20
X509v3 Authority Key Identifier:
keyid:54:46:DF:07:FF:3C:B2:6D:FC:F4:EE:B8:76:1F:B0:16:CA:F7:F9:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VEbfB_88sm389O64dh-wFsr3-e4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3f85da-311f-45b4-a747-56560b26a0db/1/VEbfB_88sm389O64dh-wFsr3-e4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/3f85da-311f-45b4-a747-56560b26a0db/1/VEbfB_88sm389O64dh-wFsr3-e4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:40:6e:b8:c4:c6:8a:fe:f3:04:48:30:e8:33:9c:20:e9:7f:
ef:0d:0d:9a:2e:42:41:c9:a9:79:1e:ae:90:66:4f:5f:24:c0:
16:0b:ae:77:19:c1:72:e4:dd:55:db:4b:32:bb:dc:a5:83:8a:
12:23:bd:fd:f8:85:52:c3:26:b0:3f:ee:b9:15:34:b0:84:bd:
13:da:cf:36:40:cc:a3:a8:dd:d4:63:70:ec:f4:74:6c:ea:6e:
c6:6b:e2:61:37:0d:d5:4e:89:00:dd:b9:30:7c:ac:9d:c3:89:
7a:56:e0:e4:a7:62:49:00:49:d4:35:f4:87:d5:7c:9c:43:d6:
3e:ce:f3:6f:e0:f6:c3:90:bf:10:dc:41:9b:67:57:cc:a3:e9:
2f:46:74:63:bf:19:9e:85:33:7a:12:05:c1:30:79:78:b1:9f:
2a:1c:96:85:1d:3b:bc:45:52:44:36:03:d4:8c:9f:8c:d0:99:
02:38:43:94:2d:61:f4:65:52:f4:b0:aa:a1:af:ff:e8:e6:e4:
04:31:ab:c6:9f:c2:0d:df:4a:4a:65:98:e4:9d:8f:db:0b:2a:
7d:bc:53:83:d7:94:47:62:0e:d6:98:ec:c9:52:a1:31:35:fa:
b4:f3:94:e7:37:a6:51:40:f6:4a:de:69:ad:f4:71:15:4a:9a:
e8:00:a5:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:19 2025 by rpki-client