Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/ece5c7-2143-4db4-9857-052cf01d2048/1/v85V0V6xGeUtb6_NOXPi9tTyI_I.mft
File: v85V0V6xGeUtb6_NOXPi9tTyI_I.mft (raw, json)
Hash identifier: yysd3r06nygjmLR6uvcig+9+udbnAbGoPvxiPPfzW0k=
Subject key identifier: B0:97:5F:9C:50:BD:46:03:2F:3D:FB:F4:A6:B0:08:91:21:E1:65:09
Authority key identifier: BF:CE:55:D1:5E:B1:19:E5:2D:6F:AF:CD:39:73:E2:F6:D4:F2:23:F2
Certificate issuer: /CN=bfce55d15eb119e52d6fafcd3973e2f6d4f223f2
Certificate serial: 0198481BCB868D99E0207030C4BB44C6E3BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v85V0V6xGeUtb6_NOXPi9tTyI_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/ece5c7-2143-4db4-9857-052cf01d2048/1/v85V0V6xGeUtb6_NOXPi9tTyI_I.mft
Manifest number: 1600
Signing time: Sat 26 Jul 2025 19:00:37 +0000
Manifest this update: Sat 26 Jul 2025 19:00:37 +0000
Manifest next update: Sun 27 Jul 2025 19:00:37 +0000
Files and hashes: 1: qMVh3MmBW-5x18q2N1wXFpopTgM.roa (hash: PQtT5tx/edekggmnvi46ZZ9KahB7EPBY+tQD/QXkwJY=)
2: v85V0V6xGeUtb6_NOXPi9tTyI_I.crl (hash: HVtNcdrjzNZOKDiUJvKqmFerg5M1UaZcUKsolx78Z5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/ece5c7-2143-4db4-9857-052cf01d2048/1/v85V0V6xGeUtb6_NOXPi9tTyI_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/ece5c7-2143-4db4-9857-052cf01d2048/1/v85V0V6xGeUtb6_NOXPi9tTyI_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/v85V0V6xGeUtb6_NOXPi9tTyI_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:1b:cb:86:8d:99:e0:20:70:30:c4:bb:44:c6:e3:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfce55d15eb119e52d6fafcd3973e2f6d4f223f2
Validity
Not Before: Jul 26 19:00:37 2025 GMT
Not After : Jul 27 19:00:37 2025 GMT
Subject: CN=b0975f9c50bd46032f3dfbf4a6b0089121e16509
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:4a:b7:05:fe:33:a9:88:e5:ac:d8:d3:b4:64:
76:4e:78:f0:b6:fc:e6:c2:a6:3f:5e:cc:d0:37:91:
10:4a:c2:a0:a3:7c:d2:0c:73:e6:f9:b5:0a:c1:cb:
2c:02:01:ae:f6:c1:31:bf:7e:34:0b:c5:11:98:b5:
ec:42:c6:ee:86:e7:bd:ba:d8:bd:3e:e0:65:9e:07:
a8:f6:37:67:49:64:72:54:54:24:41:cf:49:79:00:
79:9d:8b:bb:6c:a9:68:d1:af:03:78:ea:2e:6d:48:
b1:b6:85:41:28:73:83:eb:22:5c:55:46:a5:a8:13:
96:77:fe:1a:b5:92:78:e4:79:6c:44:16:c2:62:ee:
f4:20:46:cf:e5:48:ab:22:78:0a:85:01:15:43:02:
c9:6d:92:46:be:1f:b7:0b:75:f2:21:4d:cb:1d:61:
ce:d3:91:d5:2e:de:d5:f6:6a:3a:8f:5e:ea:c7:cc:
f0:fd:c1:92:ac:40:bb:7c:fc:7c:32:22:61:d4:c8:
17:0c:6d:65:ac:be:90:84:af:75:aa:86:55:ba:e7:
19:b8:86:38:79:3f:40:de:39:9f:ab:67:a7:da:57:
91:8f:ee:b2:ea:97:de:c1:7f:aa:e6:b9:59:40:60:
f3:fd:d2:3c:fa:01:04:dc:05:85:95:51:60:39:c0:
f2:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:97:5F:9C:50:BD:46:03:2F:3D:FB:F4:A6:B0:08:91:21:E1:65:09
X509v3 Authority Key Identifier:
keyid:BF:CE:55:D1:5E:B1:19:E5:2D:6F:AF:CD:39:73:E2:F6:D4:F2:23:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v85V0V6xGeUtb6_NOXPi9tTyI_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/ece5c7-2143-4db4-9857-052cf01d2048/1/v85V0V6xGeUtb6_NOXPi9tTyI_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/ece5c7-2143-4db4-9857-052cf01d2048/1/v85V0V6xGeUtb6_NOXPi9tTyI_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:0b:c6:60:5a:2a:9d:2b:1f:f6:e8:d5:4b:52:50:a0:c0:a1:
1d:1c:f4:c7:ce:fb:02:1c:0f:4e:b1:14:b9:26:24:a3:3d:27:
cc:80:52:63:1e:7d:2d:7e:e1:e9:8f:77:56:0c:ee:6d:46:5c:
c4:34:55:c7:eb:e5:93:c1:76:ca:2c:d6:ef:c4:3c:4e:48:d4:
17:eb:93:60:76:37:aa:10:bb:03:3f:b5:53:00:f3:2f:fb:81:
cd:6e:8f:c0:78:30:bd:03:14:6a:3e:4e:f4:83:9f:e0:65:37:
c6:52:ec:ed:b7:c7:a0:98:38:f5:55:f7:74:95:01:d5:8f:5d:
03:c5:2b:c7:de:86:81:3c:4a:7e:f4:aa:bd:5d:3b:7b:9b:ea:
b9:c5:cd:70:52:b0:92:5d:bf:ed:5c:25:94:8a:db:a1:dc:6a:
20:e6:2f:1d:0a:de:c0:93:7c:a6:e8:c9:be:41:da:b1:d9:de:
92:80:aa:8e:6f:42:ac:96:b0:df:e0:58:f8:9a:98:b6:e6:68:
25:f0:88:77:e4:16:80:e6:16:73:98:24:91:15:f1:f9:98:7d:
28:d8:b1:5e:cf:98:94:24:0d:1f:ae:46:56:37:88:8f:1d:57:
3f:69:56:48:8a:87:c5:62:67:32:2e:46:f5:b6:c9:7f:e6:6d:
1c:5d:c1:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:40:24 2025 by rpki-client