Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/2d1a0a-71cc-4f57-aa63-bedac10aacdc/1/v1vcQQat3onhzpwyuAeyCC67mUQ.mft
File: v1vcQQat3onhzpwyuAeyCC67mUQ.mft (raw, json)
Hash identifier: LerbAG501mhPOuwXnL/W+B5uPgwGphLvZELNIp19lT0=
Subject key identifier: 37:9A:6D:F4:E1:D1:F8:40:DA:21:FC:6E:40:D0:92:D9:48:5D:28:94
Authority key identifier: BF:5B:DC:41:06:AD:DE:89:E1:CE:9C:32:B8:07:B2:08:2E:BB:99:44
Certificate issuer: /CN=bf5bdc4106adde89e1ce9c32b807b2082ebb9944
Certificate serial: 0199221EEE397B7442D564D01E0C53EF78F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v1vcQQat3onhzpwyuAeyCC67mUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/2d1a0a-71cc-4f57-aa63-bedac10aacdc/1/v1vcQQat3onhzpwyuAeyCC67mUQ.mft
Manifest number: 166F
Signing time: Sun 07 Sep 2025 03:01:16 +0000
Manifest this update: Sun 07 Sep 2025 03:01:16 +0000
Manifest next update: Mon 08 Sep 2025 03:01:16 +0000
Files and hashes: 1: Uy9WOwPWbRCpTH3lj7ESDUuv-LI.roa (hash: 1fij03uU2Ynnat5tn8++7hQPOH2AmJ+7FEvkLIb0i0I=)
2: v1vcQQat3onhzpwyuAeyCC67mUQ.crl (hash: EHWeR+31IWYhND05gvxSr1bqEomTOg/mNIVnYQE+7YI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/2d1a0a-71cc-4f57-aa63-bedac10aacdc/1/v1vcQQat3onhzpwyuAeyCC67mUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/2d1a0a-71cc-4f57-aa63-bedac10aacdc/1/v1vcQQat3onhzpwyuAeyCC67mUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/v1vcQQat3onhzpwyuAeyCC67mUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:ee:39:7b:74:42:d5:64:d0:1e:0c:53:ef:78:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf5bdc4106adde89e1ce9c32b807b2082ebb9944
Validity
Not Before: Sep 7 03:01:16 2025 GMT
Not After : Sep 8 03:01:16 2025 GMT
Subject: CN=379a6df4e1d1f840da21fc6e40d092d9485d2894
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:84:01:d5:71:73:b3:5d:2e:b4:ed:b9:31:84:
69:87:80:30:ca:37:38:be:7d:d1:63:40:8a:19:f3:
ea:db:ab:7b:d0:50:06:f2:5b:f3:f1:95:c3:b2:33:
38:3b:91:7d:ea:f5:9f:07:43:6e:3c:c4:c8:45:d8:
c3:20:bd:53:fb:8c:d9:77:cc:87:99:9f:45:1e:29:
6e:15:6d:91:6f:85:40:45:f9:c7:b1:d9:2b:e6:75:
11:67:92:c4:4b:87:fd:c6:0b:45:85:27:0b:7c:3c:
43:72:72:63:7f:e7:a6:97:22:b1:c5:93:f0:45:f1:
ca:64:9d:e5:de:5d:f5:16:b6:67:aa:d0:0a:74:38:
87:bc:b3:13:41:32:9f:0e:7b:79:3e:b8:fe:6a:66:
38:9b:67:65:5a:3f:4c:e9:a8:ec:a2:f4:df:40:7f:
ce:cf:93:2e:cb:48:96:b1:cd:57:0b:87:6b:e8:bc:
92:94:b9:1d:fe:fa:8f:ca:e6:34:e6:5c:78:02:b1:
7a:fa:7e:87:bb:fb:06:e0:94:92:5f:e8:15:55:ec:
6a:9f:05:2e:ee:9a:02:1b:66:c1:55:00:2d:8f:76:
71:e6:5a:0b:58:26:4d:0f:9e:6f:0a:a3:8a:da:3d:
8a:f4:29:6c:08:1b:51:d2:cd:25:94:38:e9:5b:bb:
50:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:9A:6D:F4:E1:D1:F8:40:DA:21:FC:6E:40:D0:92:D9:48:5D:28:94
X509v3 Authority Key Identifier:
keyid:BF:5B:DC:41:06:AD:DE:89:E1:CE:9C:32:B8:07:B2:08:2E:BB:99:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v1vcQQat3onhzpwyuAeyCC67mUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/2d1a0a-71cc-4f57-aa63-bedac10aacdc/1/v1vcQQat3onhzpwyuAeyCC67mUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/2d1a0a-71cc-4f57-aa63-bedac10aacdc/1/v1vcQQat3onhzpwyuAeyCC67mUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:34:bc:56:ba:b7:99:51:2e:69:e6:a4:8d:d0:76:21:87:0b:
32:06:0d:07:64:d1:a6:9b:e0:90:13:4a:8d:20:fc:e2:49:9a:
35:f7:35:fa:24:04:10:18:14:d7:8b:a6:e3:f6:ad:cb:13:30:
32:28:ea:17:af:fb:39:35:74:47:a4:07:07:54:be:91:21:f8:
e5:1f:65:df:05:d7:12:da:c5:37:da:94:36:64:0f:51:16:15:
52:52:7b:a5:87:55:f7:d1:42:95:75:7e:24:d5:85:38:40:9f:
54:65:5a:f3:5f:b1:cc:ce:6a:30:39:4b:bf:e8:08:9c:5e:23:
33:12:6d:65:53:9f:b6:59:49:c9:f8:7a:28:c2:eb:68:3a:57:
d4:be:40:87:10:a5:c2:a3:65:5f:4a:7c:e8:26:ca:c0:31:7d:
d9:33:8a:1c:bf:dd:02:07:3f:b1:4a:e2:f0:14:5c:2c:d2:a7:
d8:ee:c6:b3:7b:77:8e:6b:d1:b7:da:89:0c:57:9e:e1:eb:eb:
bd:24:b3:a2:bf:59:21:1c:e0:15:96:e2:cb:e4:1a:68:e0:d6:
9a:f9:fa:24:d2:c7:4b:b0:3b:1d:e7:3c:ec:ea:54:cb:20:53:
0c:c9:c4:e1:07:d7:2b:64:d4:82:b3:9f:f4:eb:98:9e:da:8b:
de:d4:cb:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:07:33 2025 by rpki-client