Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/b15658-10b6-4041-a3da-8d3a6d165da3/1/v-NULdY_7SUN5ctl9uykh-f0eEc.mft
File: v-NULdY_7SUN5ctl9uykh-f0eEc.mft (raw, json)
Hash identifier: c3u+F2Wv+GQiHTN8WbXPAx2gFbbgAFng4FU6olnIjM8=
Subject key identifier: 07:EA:D0:F9:B9:08:BE:D9:7F:F3:53:32:CD:60:6B:C8:01:17:82:5F
Authority key identifier: BF:E3:54:2D:D6:3F:ED:25:0D:E5:CB:65:F6:EC:A4:87:E7:F4:78:47
Certificate issuer: /CN=bfe3542dd63fed250de5cb65f6eca487e7f47847
Certificate serial: 019935A5A600980774CA2CD8B2402506CBFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v-NULdY_7SUN5ctl9uykh-f0eEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/b15658-10b6-4041-a3da-8d3a6d165da3/1/v-NULdY_7SUN5ctl9uykh-f0eEc.mft
Manifest number: 167B
Signing time: Wed 10 Sep 2025 22:01:12 +0000
Manifest this update: Wed 10 Sep 2025 22:01:12 +0000
Manifest next update: Thu 11 Sep 2025 22:01:12 +0000
Files and hashes: 1: 7_ycmg0-2tzp7CIdo8gplL9a278.roa (hash: XEoDI5Kr97fRLNGyRswSpfdzIPuYNKJgNWwTLw/sOpg=)
2: u42E-rWAmQgBLYpngQke_W6nUiE.roa (hash: skcKb420yoQzvUX8+CNyJl60MwIyb91kXhUGkdXKV9A=)
3: v-NULdY_7SUN5ctl9uykh-f0eEc.crl (hash: 5qcvJilrBLZdtUhbF0RfFnr66dum/gKxbislcfGDehE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/b15658-10b6-4041-a3da-8d3a6d165da3/1/v-NULdY_7SUN5ctl9uykh-f0eEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/b15658-10b6-4041-a3da-8d3a6d165da3/1/v-NULdY_7SUN5ctl9uykh-f0eEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/v-NULdY_7SUN5ctl9uykh-f0eEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 22:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:35:a5:a6:00:98:07:74:ca:2c:d8:b2:40:25:06:cb:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfe3542dd63fed250de5cb65f6eca487e7f47847
Validity
Not Before: Sep 10 22:01:12 2025 GMT
Not After : Sep 11 22:01:12 2025 GMT
Subject: CN=07ead0f9b908bed97ff35332cd606bc80117825f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:e7:d0:7d:a8:1e:96:d2:59:bd:b3:ea:c7:63:
eb:03:cd:bd:8f:47:fd:30:ad:c8:fa:d8:24:ea:6f:
6c:86:98:44:51:89:44:7c:0c:b0:c8:27:48:f8:07:
a8:cd:1f:4c:34:0e:4d:a0:57:32:c7:f7:ef:54:95:
7f:92:dc:9b:7d:11:49:b0:24:7f:0b:48:ee:ca:43:
8b:9e:67:4e:8b:25:01:89:ff:39:f4:34:f2:ac:97:
32:55:cf:56:8c:99:6d:14:b7:b5:d6:ec:4e:44:b5:
90:fd:84:99:f0:50:13:0f:ae:d9:34:02:11:a5:96:
2c:b8:8c:c2:ed:b8:ba:3f:b6:45:db:d6:ac:1a:1c:
49:73:cb:da:2b:48:22:2b:1c:08:03:a0:10:0f:ac:
90:8a:65:f4:02:2e:32:ab:71:77:79:73:c4:12:ea:
dd:2c:4c:b7:63:c5:2b:fe:7d:df:57:15:8e:25:61:
5f:a1:4a:cc:3b:67:03:5e:9b:6a:c2:31:ed:22:66:
71:9a:ac:dd:c6:53:10:63:77:0e:66:34:14:9f:75:
73:b2:bb:4f:0e:01:5c:1c:d1:4b:b5:cc:0c:df:11:
3e:73:55:ac:87:96:f4:ec:2c:c0:50:65:8b:58:85:
cb:40:6b:db:16:8a:6a:25:f3:35:85:c2:38:14:b0:
76:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:EA:D0:F9:B9:08:BE:D9:7F:F3:53:32:CD:60:6B:C8:01:17:82:5F
X509v3 Authority Key Identifier:
keyid:BF:E3:54:2D:D6:3F:ED:25:0D:E5:CB:65:F6:EC:A4:87:E7:F4:78:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v-NULdY_7SUN5ctl9uykh-f0eEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b15658-10b6-4041-a3da-8d3a6d165da3/1/v-NULdY_7SUN5ctl9uykh-f0eEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b15658-10b6-4041-a3da-8d3a6d165da3/1/v-NULdY_7SUN5ctl9uykh-f0eEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:a1:0d:ac:16:1f:cd:ae:e4:88:9a:56:51:ea:b3:ae:19:c6:
2e:d7:66:37:e8:ed:6f:b7:30:6d:04:8e:60:58:a6:8e:a1:9c:
58:ec:08:27:a9:0f:9b:5c:c2:2e:76:0c:9a:52:c8:b7:f5:2e:
16:5e:5f:26:03:fa:9e:cc:ff:14:04:aa:d8:71:b8:7d:af:e2:
52:9d:70:92:0d:40:08:72:b5:8e:01:59:58:0b:a6:d0:e4:d7:
db:f2:dd:61:da:85:80:44:60:ec:de:d7:ee:a1:32:34:2c:18:
1d:bd:33:d4:d3:4a:73:90:cd:e0:c3:18:af:12:a8:5e:e6:0f:
b8:d9:69:14:ae:72:de:22:f3:49:22:2c:4c:21:ed:f3:e1:82:
27:5b:22:4e:51:f5:05:8f:73:94:b3:71:1d:40:1f:52:fe:d6:
b1:16:96:7b:98:88:5b:12:12:41:9d:38:a7:1d:55:12:7e:c0:
d1:63:3f:7c:0f:6b:63:e9:1e:d8:71:eb:6c:bc:24:d9:2c:34:
09:30:52:19:18:2f:5b:a3:a5:f4:ed:87:00:22:97:b0:f0:5a:
bd:4e:68:e3:e3:f2:15:f5:6d:88:b4:56:22:b1:5b:f1:67:ad:
82:ea:58:db:64:3b:aa:11:d0:7b:5c:b8:fa:ab:83:43:a8:b5:
47:d7:ea:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 08:04:11 2025 by rpki-client