Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/dc1c50-650d-43c4-9e76-ccd4fad950ed/1/vr8Jwvj_-X74rsL4FzV40KOnTIE.mft
File: vr8Jwvj_-X74rsL4FzV40KOnTIE.mft (raw, json)
Hash identifier: lFeXyLRPDMHCSr7d2CTh+iBEflG0p/IeaDfma3gg/Oc=
Subject key identifier: F3:ED:16:E0:1F:1C:3D:09:DC:09:6D:EE:56:30:0D:D7:FD:17:6C:7F
Authority key identifier: BE:BF:09:C2:F8:FF:F9:7E:F8:AE:C2:F8:17:35:78:D0:A3:A7:4C:81
Certificate issuer: /CN=bebf09c2f8fff97ef8aec2f8173578d0a3a74c81
Certificate serial: 01988F59F67B49681974A7DCEEEE56EF7B8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vr8Jwvj_-X74rsL4FzV40KOnTIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/dc1c50-650d-43c4-9e76-ccd4fad950ed/1/vr8Jwvj_-X74rsL4FzV40KOnTIE.mft
Manifest number: 1333
Signing time: Sat 09 Aug 2025 15:01:34 +0000
Manifest this update: Sat 09 Aug 2025 15:01:34 +0000
Manifest next update: Sun 10 Aug 2025 15:01:34 +0000
Files and hashes: 1: cn8udPBTEEt-C91LbDNfkmvEIY8.roa (hash: qd0d0GALCyhOr1vz+5VbFHCBAqP5I2yIxXIsY00d+3A=)
2: vr8Jwvj_-X74rsL4FzV40KOnTIE.crl (hash: GPeg2kGgUQt6B8G+NngSjsgskZ+gxdzWSfO2q2GcbBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/dc1c50-650d-43c4-9e76-ccd4fad950ed/1/vr8Jwvj_-X74rsL4FzV40KOnTIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/dc1c50-650d-43c4-9e76-ccd4fad950ed/1/vr8Jwvj_-X74rsL4FzV40KOnTIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/vr8Jwvj_-X74rsL4FzV40KOnTIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:59:f6:7b:49:68:19:74:a7:dc:ee:ee:56:ef:7b:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bebf09c2f8fff97ef8aec2f8173578d0a3a74c81
Validity
Not Before: Aug 9 15:01:34 2025 GMT
Not After : Aug 10 15:01:34 2025 GMT
Subject: CN=f3ed16e01f1c3d09dc096dee56300dd7fd176c7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:33:1c:8b:80:f2:55:66:83:a1:fe:6c:f2:f7:
eb:da:5e:2c:5b:97:a2:e7:40:6e:3c:2c:19:97:83:
fd:b6:5d:bb:32:93:f4:18:a2:d2:f3:57:dd:99:68:
45:21:06:67:57:97:1d:0e:cf:32:a8:39:d6:37:8a:
6d:49:08:a8:52:c2:de:61:65:e5:4d:dd:ba:dc:b9:
c0:67:50:b3:0e:7f:74:33:b7:f8:1e:c7:0c:7a:c9:
74:33:62:47:f0:ff:6f:f1:d2:51:32:9e:ce:41:ab:
af:4c:e7:cb:e2:03:23:d4:54:36:6b:27:25:de:fd:
db:94:a7:53:8f:f3:63:13:01:75:e7:00:18:92:a2:
9f:2d:ff:1d:f6:1d:cf:6f:42:86:b6:ea:42:20:3d:
4d:35:bf:32:b9:ea:16:18:44:fa:bc:1e:b7:0b:6b:
a2:75:dd:5e:91:29:4c:2a:32:31:60:b5:a1:53:61:
df:71:a6:5d:ee:eb:bc:8e:1c:1e:97:e8:2e:3c:17:
94:d1:56:b1:d1:48:0e:65:b4:b4:c2:fd:53:1e:1a:
48:3a:e0:70:1e:af:bb:ef:9d:a0:48:1c:65:4f:7b:
34:2c:43:05:dd:3e:84:8d:89:7c:3b:ec:64:5a:93:
f5:7d:0b:96:06:48:c7:a6:bb:34:b6:c6:ca:3a:e1:
fb:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:ED:16:E0:1F:1C:3D:09:DC:09:6D:EE:56:30:0D:D7:FD:17:6C:7F
X509v3 Authority Key Identifier:
keyid:BE:BF:09:C2:F8:FF:F9:7E:F8:AE:C2:F8:17:35:78:D0:A3:A7:4C:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vr8Jwvj_-X74rsL4FzV40KOnTIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/dc1c50-650d-43c4-9e76-ccd4fad950ed/1/vr8Jwvj_-X74rsL4FzV40KOnTIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/dc1c50-650d-43c4-9e76-ccd4fad950ed/1/vr8Jwvj_-X74rsL4FzV40KOnTIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:e9:d4:7e:43:77:b4:31:a5:83:60:40:b7:b9:aa:63:a0:72:
fe:d6:b9:5f:31:29:00:1a:91:74:66:0c:8b:46:ca:c6:97:0c:
8f:b9:17:61:ac:d3:ca:96:04:3f:f9:10:00:8c:53:62:9b:47:
14:39:a3:26:c0:d9:10:cf:3f:23:e2:08:12:f0:b7:2c:ea:cd:
3a:55:25:85:dd:7e:7c:e0:3b:f8:06:5c:75:54:09:14:52:6f:
8d:e8:f1:2e:bf:f2:d6:ef:92:e8:8d:25:ca:29:50:aa:0d:e1:
3f:0b:88:42:a1:94:a4:4f:05:5c:8f:12:b1:ce:79:88:55:c0:
11:5d:03:7d:55:c0:73:e8:56:c6:51:6b:c2:00:13:81:30:cc:
9e:da:5e:6d:49:0d:25:59:f5:1f:8e:99:1d:32:ad:21:d2:05:
05:f5:88:0f:df:e9:52:05:d2:aa:13:0c:65:c3:45:c9:46:1b:
20:98:62:fa:69:fe:7d:4d:7a:c6:64:df:7a:01:2c:7d:4d:a3:
cd:fd:5b:69:af:43:5c:0c:b0:02:83:9f:09:d4:b6:aa:38:15:
44:41:9a:22:e1:d3:19:45:95:ac:9d:29:ea:35:30:0f:7f:82:
25:92:14:5a:d7:7e:be:c4:57:36:c3:ea:59:93:f3:82:fd:51:
cc:70:e7:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 23:15:38 2025 by rpki-client