Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.mft
File: v0tRsLrEX6ImvS3P8Rcw7UDsIUk.mft (raw, json)
Hash identifier: ZsrP25yZNYbwb7E7kCbBeByQQZaIHGGzELNHYpKG/j8=
Subject key identifier: 16:6D:B5:85:84:B9:72:AF:6F:33:B2:0D:1C:7C:DC:B8:6E:F0:23:4D
Authority key identifier: BF:4B:51:B0:BA:C4:5F:A2:26:BD:2D:CF:F1:17:30:ED:40:EC:21:49
Certificate issuer: /CN=bf4b51b0bac45fa226bd2dcff11730ed40ec2149
Certificate serial: 01987D1C291F5BC73CD6F8212E3FB3831556
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.mft
Manifest number: 161D
Signing time: Wed 06 Aug 2025 02:00:54 +0000
Manifest this update: Wed 06 Aug 2025 02:00:54 +0000
Manifest next update: Thu 07 Aug 2025 02:00:54 +0000
Files and hashes: 1: 1-MOd61mqzzUd3k7RQR0FdOI1Nn0.roa (hash: Ney+qmboFEb3EnQIoVOu45+2AwAnlZ+xcFMz6UpUYIw=)
2: v0tRsLrEX6ImvS3P8Rcw7UDsIUk.crl (hash: aewjcahSkmCpDwmn1wGI5AFKqbLl/gdiE5kH3jJl4Qg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.mft
rsync://rpki.ripe.net/repository/DEFAULT/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:1c:29:1f:5b:c7:3c:d6:f8:21:2e:3f:b3:83:15:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf4b51b0bac45fa226bd2dcff11730ed40ec2149
Validity
Not Before: Aug 6 02:00:54 2025 GMT
Not After : Aug 7 02:00:54 2025 GMT
Subject: CN=166db58584b972af6f33b20d1c7cdcb86ef0234d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5e:23:84:6e:24:90:15:3d:e0:cf:66:bd:5d:
bc:af:ea:6c:e4:bd:30:f6:bc:ed:1a:ab:5c:60:1c:
93:cf:01:a1:d8:cc:42:34:6a:71:9a:82:cf:d4:a7:
c4:4a:f8:a3:28:97:bb:57:a1:39:fb:a0:2a:1f:3d:
20:a2:47:c9:7b:c6:97:d4:9d:66:76:9a:ce:3c:3f:
e8:0e:bd:0a:e6:dd:70:95:c6:a5:c8:4e:0b:f9:c2:
6f:b1:93:29:e5:ed:1a:84:2e:47:cf:76:34:8a:3f:
1b:ac:d2:7d:9d:95:42:ba:c6:08:9d:ca:eb:ef:bf:
2a:ca:30:18:21:51:2a:a0:d7:be:e6:80:28:8b:65:
8a:8b:2c:b0:02:ee:5b:96:d0:fb:1d:eb:b1:ef:1d:
d4:ff:2a:7e:7a:15:0a:2b:b3:be:10:ac:62:1f:35:
00:8b:0e:ea:f7:73:a1:7f:77:78:ed:1b:e9:02:19:
4d:25:39:31:61:50:44:8c:a0:43:ce:44:a4:33:e3:
61:1d:56:aa:ef:94:6c:09:f6:54:03:80:18:8c:c8:
a2:99:17:02:0a:4a:4c:c9:1f:81:c9:b8:f0:f9:59:
3c:1f:9a:e1:3e:fc:33:57:b4:4e:2e:46:23:e7:3a:
16:ba:ba:64:df:96:1c:0b:c0:ce:80:e9:40:0e:b1:
5a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:6D:B5:85:84:B9:72:AF:6F:33:B2:0D:1C:7C:DC:B8:6E:F0:23:4D
X509v3 Authority Key Identifier:
keyid:BF:4B:51:B0:BA:C4:5F:A2:26:BD:2D:CF:F1:17:30:ED:40:EC:21:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/deb064-a922-46a6-86ca-e43523983793/1/v0tRsLrEX6ImvS3P8Rcw7UDsIUk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:0d:8a:aa:46:10:15:03:9c:75:48:f2:61:9b:fc:ff:68:f4:
22:d3:6e:06:c8:2a:89:9d:1e:43:01:8e:b6:84:c6:85:26:e2:
85:5d:0a:01:ab:13:41:07:00:4e:87:df:fd:24:1d:62:73:8c:
db:9c:95:f8:f2:eb:1d:d6:48:65:8e:bb:aa:a2:26:b7:8a:b1:
fa:fb:e2:4e:16:76:95:0d:99:c5:5c:de:6f:9f:69:d3:69:e4:
9b:a5:1e:b6:99:d6:a2:84:e1:d1:55:3b:50:aa:9b:c0:4d:1b:
2c:2d:bf:ad:78:09:f3:cf:cd:66:dc:d4:13:71:4d:40:f6:ae:
cc:a3:3e:a0:a4:ab:66:80:f0:24:79:91:85:ee:80:4a:35:06:
e5:2f:3a:a6:9b:b7:4d:d7:b8:c3:35:be:3e:2d:e4:63:ee:62:
1a:df:35:39:37:63:3a:e1:ae:4b:ed:0e:b4:64:7f:0e:78:16:
b1:12:f3:1a:be:2e:bd:02:b6:e3:9e:4c:20:d2:d1:c2:68:8b:
35:39:35:31:61:aa:02:61:12:85:72:88:c2:97:3b:19:9b:66:
fe:5e:eb:8d:16:42:67:6e:85:e8:42:c5:38:71:84:9a:1b:53:
1e:6c:29:5d:28:3c:31:9b:e8:69:82:40:37:d5:d0:a7:12:f1:
d9:f2:01:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:52:34 2025 by rpki-client