Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/b15658-10b6-4041-a3da-8d3a6d165da3/1/v-NULdY_7SUN5ctl9uykh-f0eEc.mft
File: v-NULdY_7SUN5ctl9uykh-f0eEc.mft (raw, json)
Hash identifier: wRsr76Wunpsrj1B9LT/wLKNn9rK3kAawBRImctAVMFA=
Subject key identifier: 31:A4:E9:44:65:7B:37:9D:23:5B:19:5B:30:C2:E1:8B:6A:87:99:DC
Authority key identifier: BF:E3:54:2D:D6:3F:ED:25:0D:E5:CB:65:F6:EC:A4:87:E7:F4:78:47
Certificate issuer: /CN=bfe3542dd63fed250de5cb65f6eca487e7f47847
Certificate serial: 0198481BF529BF12884E1288F6F419089538
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v-NULdY_7SUN5ctl9uykh-f0eEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/b15658-10b6-4041-a3da-8d3a6d165da3/1/v-NULdY_7SUN5ctl9uykh-f0eEc.mft
Manifest number: 1600
Signing time: Sat 26 Jul 2025 19:00:48 +0000
Manifest this update: Sat 26 Jul 2025 19:00:48 +0000
Manifest next update: Sun 27 Jul 2025 19:00:48 +0000
Files and hashes: 1: 7_ycmg0-2tzp7CIdo8gplL9a278.roa (hash: XEoDI5Kr97fRLNGyRswSpfdzIPuYNKJgNWwTLw/sOpg=)
2: u42E-rWAmQgBLYpngQke_W6nUiE.roa (hash: skcKb420yoQzvUX8+CNyJl60MwIyb91kXhUGkdXKV9A=)
3: v-NULdY_7SUN5ctl9uykh-f0eEc.crl (hash: 8ZSP4UVIg3RwlirybVyzUrD1wgqukroNCAQHp6lufrI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/b15658-10b6-4041-a3da-8d3a6d165da3/1/v-NULdY_7SUN5ctl9uykh-f0eEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/b15658-10b6-4041-a3da-8d3a6d165da3/1/v-NULdY_7SUN5ctl9uykh-f0eEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/v-NULdY_7SUN5ctl9uykh-f0eEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:1b:f5:29:bf:12:88:4e:12:88:f6:f4:19:08:95:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfe3542dd63fed250de5cb65f6eca487e7f47847
Validity
Not Before: Jul 26 19:00:48 2025 GMT
Not After : Jul 27 19:00:48 2025 GMT
Subject: CN=31a4e944657b379d235b195b30c2e18b6a8799dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:14:bd:4b:22:e9:c0:47:53:5c:96:3a:cd:eb:
c3:84:db:eb:44:2e:f5:61:79:b4:70:dd:d5:44:e4:
6d:0a:eb:e1:23:ec:e1:0a:7b:08:c1:cd:b1:25:88:
3f:5b:af:7e:f5:33:00:ef:5b:f3:cd:bb:e5:ad:2f:
ac:d1:0e:d8:d5:b7:3f:a3:b5:bc:2e:fe:b1:26:1e:
ef:b9:20:6f:30:77:fa:88:c6:7e:f0:81:50:ce:26:
9f:ae:00:9a:2d:97:13:45:01:25:dd:20:2a:3a:cc:
55:65:80:ff:a5:e1:9b:28:d3:a7:26:d1:14:67:35:
ea:36:5a:73:87:48:6a:f7:81:66:9b:7b:ae:9b:28:
3b:39:3a:95:ac:09:1b:cd:f0:1c:aa:7e:12:ab:99:
7f:15:71:3a:d3:86:38:15:b4:89:6e:9a:57:81:d3:
07:5b:3e:ac:97:fc:82:df:04:2f:ac:6a:23:af:eb:
ec:e9:35:10:1e:df:98:a5:1c:83:68:83:de:9e:40:
61:a0:47:d8:58:cb:1d:2d:e5:38:07:06:c0:24:79:
85:28:f4:b1:11:20:39:62:d6:33:49:9c:06:98:f9:
7f:70:91:ec:81:0c:9e:57:bd:75:56:1a:82:b7:7d:
66:ab:31:ac:2d:f0:34:5e:84:58:dd:7d:85:43:e8:
bd:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:A4:E9:44:65:7B:37:9D:23:5B:19:5B:30:C2:E1:8B:6A:87:99:DC
X509v3 Authority Key Identifier:
keyid:BF:E3:54:2D:D6:3F:ED:25:0D:E5:CB:65:F6:EC:A4:87:E7:F4:78:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v-NULdY_7SUN5ctl9uykh-f0eEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b15658-10b6-4041-a3da-8d3a6d165da3/1/v-NULdY_7SUN5ctl9uykh-f0eEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b15658-10b6-4041-a3da-8d3a6d165da3/1/v-NULdY_7SUN5ctl9uykh-f0eEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:cd:12:e3:24:93:dd:8d:37:7e:76:34:8e:a7:71:db:cf:e8:
15:bb:ba:ed:dc:18:ba:7c:5a:63:38:7b:67:a0:cf:8f:ec:b5:
ae:ea:06:f4:e3:40:d7:d3:29:d7:e9:76:5c:30:b4:61:61:6f:
a6:4d:c9:33:3b:92:fc:8f:14:3a:b7:73:21:cc:09:06:83:e7:
fa:33:ce:50:7b:51:6f:89:9d:80:f2:5c:83:42:6f:2b:b3:96:
fb:96:34:57:e8:24:68:38:9b:c6:e0:3c:21:ef:3e:12:c8:11:
59:1c:b8:58:84:57:1c:64:a5:0b:5f:a9:ae:26:5a:68:65:e6:
8a:40:fe:c8:af:b5:d0:7c:a4:ed:49:96:33:8a:0c:2a:35:6c:
cd:1d:ee:0c:41:05:a5:3b:54:9f:c4:fe:a7:47:6f:85:9b:09:
59:3e:45:c0:ca:4f:a2:bd:65:05:49:a8:20:6b:c7:87:b0:d7:
ec:fe:5b:6d:51:2e:5d:d8:b3:92:3c:ee:2b:9d:ac:93:60:32:
10:ff:9c:4c:9a:d1:2f:10:06:d7:a9:d0:3f:c8:29:c2:8c:ae:
56:67:a2:ee:70:e7:01:23:2f:54:c7:f7:51:cb:28:79:29:18:
ad:4a:c7:35:64:17:34:ae:36:bb:93:0b:e8:43:52:7e:74:30:
41:40:ae:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 23:44:42 2025 by rpki-client