Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/eaea59-919d-4135-9bde-6dcf0c93cbdb/1/v_0PCtnHhAlsWg-56M9cLwRAQTs.mft
File: v_0PCtnHhAlsWg-56M9cLwRAQTs.mft (raw, json)
Hash identifier: s1VMzGEbqbYOnBy0bdVjwU7L7Nf49a7j0xdUpbfXTno=
Subject key identifier: 09:6C:4B:6E:54:7C:A8:A7:46:D0:22:98:48:01:26:C0:EF:50:8D:44
Authority key identifier: BF:FD:0F:0A:D9:C7:84:09:6C:5A:0F:B9:E8:CF:5C:2F:04:40:41:3B
Certificate issuer: /CN=bffd0f0ad9c784096c5a0fb9e8cf5c2f0440413b
Certificate serial: 01992255CCA93E28DDBFD52EA2357C69DE75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v_0PCtnHhAlsWg-56M9cLwRAQTs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/eaea59-919d-4135-9bde-6dcf0c93cbdb/1/v_0PCtnHhAlsWg-56M9cLwRAQTs.mft
Manifest number: 064D
Signing time: Sun 07 Sep 2025 04:01:12 +0000
Manifest this update: Sun 07 Sep 2025 04:01:12 +0000
Manifest next update: Mon 08 Sep 2025 04:01:12 +0000
Files and hashes: 1: Z2OOQN_xvDinvSk0PjmWHnzGsnE.roa (hash: +MwSX4X4GjxkZcy+4f+CH7/gMqlsDpwDxxCncAgans4=)
2: v_0PCtnHhAlsWg-56M9cLwRAQTs.crl (hash: f9fzcSsxez1HECU+R3CwzdfKPhx0bNnARFPfgoFMNHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/eaea59-919d-4135-9bde-6dcf0c93cbdb/1/v_0PCtnHhAlsWg-56M9cLwRAQTs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/eaea59-919d-4135-9bde-6dcf0c93cbdb/1/v_0PCtnHhAlsWg-56M9cLwRAQTs.mft
rsync://rpki.ripe.net/repository/DEFAULT/v_0PCtnHhAlsWg-56M9cLwRAQTs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:cc:a9:3e:28:dd:bf:d5:2e:a2:35:7c:69:de:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bffd0f0ad9c784096c5a0fb9e8cf5c2f0440413b
Validity
Not Before: Sep 7 04:01:12 2025 GMT
Not After : Sep 8 04:01:12 2025 GMT
Subject: CN=096c4b6e547ca8a746d02298480126c0ef508d44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:0a:cb:8a:34:ef:6f:fc:3b:12:0f:8e:31:99:
1c:7d:5b:1d:dd:f7:80:c3:73:24:75:e6:b7:b7:97:
86:01:66:1e:7d:a7:32:1e:5a:02:ee:64:57:a6:31:
d0:75:07:b1:fe:ca:0f:02:da:7c:ad:dd:e4:78:96:
73:4b:69:fd:3b:3f:53:e4:a8:3e:48:13:d3:72:cd:
6e:be:48:d2:20:e3:75:b2:8b:e8:33:38:77:3c:5b:
9d:6e:8a:3c:6a:9b:51:1f:55:1d:99:fc:78:6f:55:
99:7d:47:0e:78:50:29:8c:03:2b:33:34:1f:96:01:
01:39:f7:8c:94:8f:6e:e4:40:35:d8:a9:4b:3f:cd:
86:73:07:ba:22:3c:c3:8b:0f:a9:1b:89:97:a6:c6:
50:1a:7e:42:a9:4e:d1:1b:12:9f:3f:f4:7f:41:a1:
88:c8:02:d0:06:3a:fb:21:4d:64:d2:3a:0a:86:e1:
c8:d1:c8:78:82:56:94:ac:a4:6b:78:d0:a6:a9:08:
02:0d:48:7c:06:7f:89:3d:a8:9b:5e:1a:9c:66:a2:
af:18:af:8c:eb:a3:4a:71:c5:ff:18:46:6a:f0:8f:
03:e2:92:85:ed:74:c8:8b:fa:86:17:8f:06:ee:57:
6a:93:f5:51:15:40:35:dd:11:58:0e:5b:d2:f2:4f:
7d:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:6C:4B:6E:54:7C:A8:A7:46:D0:22:98:48:01:26:C0:EF:50:8D:44
X509v3 Authority Key Identifier:
keyid:BF:FD:0F:0A:D9:C7:84:09:6C:5A:0F:B9:E8:CF:5C:2F:04:40:41:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v_0PCtnHhAlsWg-56M9cLwRAQTs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/eaea59-919d-4135-9bde-6dcf0c93cbdb/1/v_0PCtnHhAlsWg-56M9cLwRAQTs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/eaea59-919d-4135-9bde-6dcf0c93cbdb/1/v_0PCtnHhAlsWg-56M9cLwRAQTs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:c4:eb:00:9d:77:49:f0:f7:ba:77:0c:e1:96:ef:78:29:9d:
43:b0:3f:f1:ed:bc:ec:a4:fa:fb:d0:6a:60:a8:c7:82:05:4e:
16:ca:ef:c3:15:9a:2e:5e:c8:4e:26:33:ed:90:76:a7:2f:f1:
6f:ab:fb:df:84:1d:61:ab:87:52:73:c8:66:52:30:06:7b:2e:
74:39:67:5d:fd:11:dc:ad:c7:e0:52:45:cc:b4:52:d7:d6:ab:
f9:0a:94:58:a2:8c:30:d0:91:ed:92:76:62:c0:57:be:84:96:
b2:8e:88:79:cc:5e:3b:b9:6a:a2:d4:c4:e3:d6:39:fe:60:9f:
48:fa:03:d9:dc:e3:5a:a5:4d:40:18:22:b3:40:69:ac:3e:bc:
80:db:a6:38:62:bb:78:9b:ae:fc:e7:0e:4e:64:fd:65:2a:fc:
21:1e:2e:20:12:ed:c6:ab:04:4a:b9:c9:9d:2a:9c:98:e1:fa:
d7:5b:5b:c4:9f:da:5b:8d:63:db:cf:5c:25:c8:dd:45:dd:27:
c0:02:37:78:dc:50:3c:93:41:cd:22:39:a2:20:14:5b:ba:ff:
0e:f2:aa:48:d0:aa:10:6b:46:a8:d4:b8:4f:bc:d7:f5:fd:08:
3d:0a:67:45:95:5a:41:38:94:f2:87:7b:84:e0:ae:c0:c7:46:
db:de:e6:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:47:44 2025 by rpki-client