Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.mft
File: v9gcqQzFIkWGr-urHHixeQJo1cE.mft (raw, json)
Hash identifier: 3r29X8gQoNQCjQeyccsL6hRKPbdi2BViTznFprsTV50=
Subject key identifier: A2:37:D1:5E:CC:8A:7F:B9:29:56:3C:DA:04:5D:47:6E:9A:6F:3A:B7
Authority key identifier: BF:D8:1C:A9:0C:C5:22:45:86:AF:EB:AB:1C:78:B1:79:02:68:D5:C1
Certificate issuer: /CN=bfd81ca90cc5224586afebab1c78b1790268d5c1
Certificate serial: 01987CE5A7D0EEDAD9358A563CE92A8A8B1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v9gcqQzFIkWGr-urHHixeQJo1cE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.mft
Manifest number: 161C
Signing time: Wed 06 Aug 2025 01:01:22 +0000
Manifest this update: Wed 06 Aug 2025 01:01:22 +0000
Manifest next update: Thu 07 Aug 2025 01:01:22 +0000
Files and hashes: 1: 9UunLY0e7RvMMeMDRjD3u7_pf2Y.roa (hash: 7lRPIrPRKCCE3BPTd9dDNpxXDgXsPWg+ml+ju6JbueA=)
2: ncR4oR_y2D6exGXXU4466Dj_Hq0.roa (hash: QHWP1FBTjP+R0Pof3RRPjusJf04L/sCOEBJrDKRdhZ4=)
3: rOoYFHKRe7ghGBjkeruHV6kIlyA.roa (hash: elXY8PrAbFgsd98hRj7mkOX8iG0smL3sFgAD/6xBNtE=)
4: v9gcqQzFIkWGr-urHHixeQJo1cE.crl (hash: p9Zv6zFpwg20MEmNGDJXY7Wvs1BMvy9+iu2aGVOvY04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.mft
rsync://rpki.ripe.net/repository/DEFAULT/v9gcqQzFIkWGr-urHHixeQJo1cE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:e5:a7:d0:ee:da:d9:35:8a:56:3c:e9:2a:8a:8b:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfd81ca90cc5224586afebab1c78b1790268d5c1
Validity
Not Before: Aug 6 01:01:22 2025 GMT
Not After : Aug 7 01:01:22 2025 GMT
Subject: CN=a237d15ecc8a7fb929563cda045d476e9a6f3ab7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:39:d3:94:de:6f:ef:4c:6e:ea:46:7c:ee:27:
ba:f6:77:40:f6:0a:84:ee:f5:3b:1d:1e:ff:d3:cb:
5b:a4:46:1f:be:cf:f6:f8:8b:33:e9:d6:74:dd:0c:
0b:8e:31:6f:68:42:46:9f:25:94:1c:bd:b7:35:4f:
6b:8f:6b:ce:82:9e:f0:78:00:c0:47:34:4c:69:7a:
b3:cf:aa:78:aa:0f:12:43:5f:53:15:0e:b2:bd:88:
d4:31:cd:6b:d3:e2:a8:4c:e2:8e:6c:10:ec:5f:48:
79:72:dd:3b:74:e1:a2:29:60:7a:81:b9:23:e7:70:
95:4a:70:38:01:ae:29:59:4f:87:d2:43:6e:bb:ee:
5b:fe:2a:0d:df:ad:b0:6b:2e:bc:8f:c6:fa:5d:17:
a6:31:7f:ba:e5:2a:b8:3a:b2:59:e8:e1:db:81:4a:
11:9d:c7:54:a8:ec:24:2a:16:e1:d6:16:5c:42:ea:
88:a8:44:1e:ee:70:64:cb:10:1c:6f:1d:9f:1c:ea:
ae:51:4b:10:bf:80:d1:8c:66:c7:48:20:96:34:b0:
71:2a:ad:16:5f:f0:be:9e:5e:03:d3:0c:85:64:5b:
9f:71:24:ae:71:aa:f3:ab:8f:32:38:80:b0:b5:67:
da:6a:03:10:81:9c:9d:5a:18:28:e6:f3:d4:65:46:
15:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:37:D1:5E:CC:8A:7F:B9:29:56:3C:DA:04:5D:47:6E:9A:6F:3A:B7
X509v3 Authority Key Identifier:
keyid:BF:D8:1C:A9:0C:C5:22:45:86:AF:EB:AB:1C:78:B1:79:02:68:D5:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v9gcqQzFIkWGr-urHHixeQJo1cE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/25a59c-c2fc-4fd4-96f7-84adcbf5ac55/1/v9gcqQzFIkWGr-urHHixeQJo1cE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:14:8c:5f:de:48:90:33:b0:b6:9c:11:67:7c:90:85:ef:23:
1d:12:d4:c3:75:a7:a6:d5:d7:c2:3b:62:92:18:7c:0d:b9:34:
6c:7c:7f:ed:f8:d4:38:ba:24:54:25:b0:65:30:8c:8d:d2:be:
34:8e:27:78:17:4a:b4:02:1d:b3:d1:b6:db:8a:2a:c8:57:98:
50:82:50:05:90:67:cf:4b:bd:bf:81:22:c5:29:a7:cf:46:07:
50:38:66:7b:04:60:26:0c:45:29:d4:93:b7:cb:68:5e:a8:c3:
54:c6:d8:32:93:5d:ba:7b:5b:ed:58:ef:47:3c:2f:58:d9:96:
e3:2a:6e:c3:be:ba:95:01:52:9a:e2:64:64:5e:26:68:4f:7c:
1d:2c:c8:67:9d:8e:de:52:24:db:b6:cb:cd:13:23:ee:95:87:
41:78:b7:ed:51:c2:b7:73:fa:ea:4f:1a:f3:ca:45:15:95:b3:
6e:87:3d:7a:68:74:bd:3b:ed:2a:7f:63:58:55:01:07:b3:3f:
32:00:af:ec:af:5d:7e:1d:a0:bf:da:45:5f:16:cd:e5:c0:32:
eb:be:d4:6a:7e:fe:95:9b:b1:cf:ba:c0:cc:05:68:35:15:6a:
9a:ac:8a:b0:5b:fa:4a:35:87:62:e5:c0:fc:e3:6c:1d:12:da:
ff:8f:31:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 04:10:05 2025 by rpki-client