Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.mft
File: vDEkfzWabUktyZQ64PAPyL4hbHg.mft (raw, json)
Hash identifier: E+5TYNcl1LHJ2BXYuierGwk8uGI3e2Nani5nWiSV1Yw=
Subject key identifier: 89:F8:1E:E7:60:7A:C7:BB:43:81:FE:80:B1:EA:DD:F8:F1:EB:D8:BB
Authority key identifier: BC:31:24:7F:35:9A:6D:49:2D:C9:94:3A:E0:F0:0F:C8:BE:21:6C:78
Certificate issuer: /CN=bc31247f359a6d492dc9943ae0f00fc8be216c78
Certificate serial: 01987DF87351F824AB4327CCA4E152E94837
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vDEkfzWabUktyZQ64PAPyL4hbHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.mft
Manifest number: 161E
Signing time: Wed 06 Aug 2025 06:01:31 +0000
Manifest this update: Wed 06 Aug 2025 06:01:31 +0000
Manifest next update: Thu 07 Aug 2025 06:01:31 +0000
Files and hashes: 1: OTqu6ofFTyzK0xc5jrx6KgXbQ7M.roa (hash: McteydyUGW+LpPCexm+O1QefOp1oYc2XsREa8UjCVIA=)
2: dKgonROO4xpKslqbxO1osnY3m3M.roa (hash: Hl3GLighJnfdP7Jed7jsC0ysJmCVrDY4pvlKDvOdEYc=)
3: vDEkfzWabUktyZQ64PAPyL4hbHg.crl (hash: K/91pXE16pbpuwRVkhKVZYlPo6w1zd9y7V7UOqMCamM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vDEkfzWabUktyZQ64PAPyL4hbHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 06:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:f8:73:51:f8:24:ab:43:27:cc:a4:e1:52:e9:48:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc31247f359a6d492dc9943ae0f00fc8be216c78
Validity
Not Before: Aug 6 06:01:31 2025 GMT
Not After : Aug 7 06:01:31 2025 GMT
Subject: CN=89f81ee7607ac7bb4381fe80b1eaddf8f1ebd8bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9e:9d:83:d1:1f:23:f1:73:e9:79:4b:cb:5e:
a1:da:10:f5:56:8c:e1:ae:44:8f:28:ab:1c:90:f8:
06:fc:bc:bc:a4:d3:05:a5:7e:9d:5c:f6:97:77:38:
45:87:2a:7f:c7:78:e3:60:61:4f:64:da:92:b9:46:
3f:73:1e:7a:53:9c:8c:db:52:9e:c7:24:9e:a0:0c:
c0:c0:69:a2:25:95:ae:b3:20:71:8b:7a:93:27:a5:
f5:7a:5e:16:9e:58:f0:4e:51:d1:28:67:7a:c1:7d:
32:d1:a8:d9:23:2b:43:54:f6:b4:92:37:11:6e:0d:
04:11:f8:d0:d2:63:8a:67:01:a5:69:92:f3:ae:51:
32:e4:ba:86:42:7d:a5:ed:c6:7f:e2:43:44:da:f4:
d1:18:c8:1a:14:0b:a4:90:5c:5e:86:8d:48:8a:28:
4a:6a:0b:de:23:7b:68:dd:f7:10:33:38:82:68:93:
6c:ba:59:75:38:91:b4:5e:24:85:c8:97:0b:95:5f:
0c:18:fc:8a:cf:e9:87:98:41:14:de:ee:7e:89:0c:
44:06:b3:b2:af:c5:33:3e:13:44:7a:10:86:d6:de:
e7:4a:fc:5b:c8:5e:8f:c6:9b:ed:db:ca:4e:29:aa:
eb:9d:c5:56:da:79:72:6e:fe:37:15:6d:b1:7b:ca:
2f:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:F8:1E:E7:60:7A:C7:BB:43:81:FE:80:B1:EA:DD:F8:F1:EB:D8:BB
X509v3 Authority Key Identifier:
keyid:BC:31:24:7F:35:9A:6D:49:2D:C9:94:3A:E0:F0:0F:C8:BE:21:6C:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vDEkfzWabUktyZQ64PAPyL4hbHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/346bef-0a5e-4400-9f84-56805ca11c33/1/vDEkfzWabUktyZQ64PAPyL4hbHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:82:da:3c:34:c5:58:9e:c6:18:db:39:a8:9c:eb:17:e6:ed:
f6:ce:23:c0:eb:64:bc:11:8d:8b:d2:37:17:5a:47:5d:68:40:
19:c6:01:64:ae:f4:95:6e:92:c8:de:e0:37:72:83:f0:51:1f:
83:f5:92:1f:8f:dd:b3:63:5d:65:11:41:c3:fa:65:12:33:a3:
72:cc:0f:d5:13:93:a2:0c:6f:0c:5e:12:80:eb:e9:cc:ea:f8:
f0:f0:20:f5:73:9e:70:af:fb:3c:bb:1d:e2:f0:8f:84:da:0e:
6c:6a:f4:f7:56:f3:13:1a:5a:69:ab:c3:b6:ba:8e:a0:7e:b4:
d4:77:18:34:1e:1c:6f:72:7a:5e:8b:16:40:60:a4:dc:52:17:
12:e7:9d:47:9c:81:18:cf:29:3d:4b:a9:e2:31:da:53:00:1c:
d3:b1:d8:96:f7:96:17:36:39:de:d6:d0:76:4c:1f:d0:3d:37:
d4:d2:c2:77:74:5a:45:d5:13:89:f1:97:d3:fc:1e:52:eb:62:
c4:30:23:64:80:a5:92:f0:40:cb:75:33:ab:07:0e:4c:6f:01:
67:27:62:fa:cf:02:81:7f:ca:60:5e:72:03:7a:2a:4c:f4:a7:
dc:9a:0e:1e:43:19:4f:a7:58:0e:35:08:bf:5c:c0:25:06:b3:
5f:7e:cb:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:10:35 2025 by rpki-client