Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/df0e4b-8f67-4295-9e42-346a3cce5f09/1/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.mft
File: BsH6wk4w2SWOsu9y8x7ZvWCP4N4.mft (raw, json)
Hash identifier: FLlDYSLoAvyriPRxF9cfzKEUvk9Z12PJNAqNRVxCTss=
Subject key identifier: 35:21:8E:B3:77:FA:2F:E1:52:04:BB:5C:0D:7D:19:91:D3:90:FE:88
Authority key identifier: 06:C1:FA:C2:4E:30:D9:25:8E:B2:EF:72:F3:1E:D9:BD:60:8F:E0:DE
Certificate issuer: /CN=06c1fac24e30d9258eb2ef72f31ed9bd608fe0de
Certificate serial: 019874873D50D9B86D8E8F9FAFE2B65B3F72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/df0e4b-8f67-4295-9e42-346a3cce5f09/1/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.mft
Manifest number: 08EF
Signing time: Mon 04 Aug 2025 10:01:16 +0000
Manifest this update: Mon 04 Aug 2025 10:01:16 +0000
Manifest next update: Tue 05 Aug 2025 10:01:16 +0000
Files and hashes: 1: 8uEM_1N5qJUdzAi9u7zTYv5_N7c.roa (hash: yrQsFc8W4TPUkwunx5GCuvi5bxPjLTa5VSHSj8PIIVA=)
2: BsH6wk4w2SWOsu9y8x7ZvWCP4N4.crl (hash: 8Iyl2R3JzqrEbNpSOhdFXIRBcjlgVe5//ZsMU0I4IoA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/df0e4b-8f67-4295-9e42-346a3cce5f09/1/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/df0e4b-8f67-4295-9e42-346a3cce5f09/1/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 10:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:87:3d:50:d9:b8:6d:8e:8f:9f:af:e2:b6:5b:3f:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06c1fac24e30d9258eb2ef72f31ed9bd608fe0de
Validity
Not Before: Aug 4 10:01:16 2025 GMT
Not After : Aug 5 10:01:16 2025 GMT
Subject: CN=35218eb377fa2fe15204bb5c0d7d1991d390fe88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b1:23:84:a0:ed:ba:8e:f1:be:e4:75:6d:6c:
96:a6:2c:8a:16:5b:d4:08:7f:91:59:fd:6a:fb:e0:
19:bd:8c:0b:d3:ce:29:44:5a:6c:4a:6f:e3:f3:0c:
19:e8:f0:6b:30:04:45:04:ad:bc:da:9d:d1:63:ef:
c2:8b:65:4f:7b:2a:29:26:fb:39:32:fe:34:2f:91:
e4:92:2c:08:ec:49:61:b1:45:05:d4:74:5a:22:74:
40:8c:06:2f:f1:71:64:e5:00:63:24:82:75:9e:58:
04:78:f8:12:25:f4:36:53:7c:ce:d2:4d:61:91:64:
12:ae:70:27:ae:a2:e6:98:0f:0c:5d:64:7e:4a:e4:
b3:1e:de:eb:02:8e:5f:8e:37:ab:2e:97:4f:77:56:
79:46:16:57:36:e1:04:ea:77:59:f0:a9:06:31:2e:
9f:7e:3c:1d:42:c4:d2:b2:99:85:ac:65:d5:2a:d8:
97:70:db:8a:44:2b:60:d6:cb:c2:4b:94:9d:77:72:
75:bf:c0:7c:74:21:8c:18:59:7e:ee:ff:77:4b:db:
1b:93:72:bb:d6:05:1f:34:be:16:ad:bc:21:59:f5:
16:c9:04:0e:e5:36:9d:1f:ca:08:23:08:7a:10:e0:
30:e0:d9:ba:7b:b2:c4:32:41:77:2d:7f:f6:65:a1:
b9:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:21:8E:B3:77:FA:2F:E1:52:04:BB:5C:0D:7D:19:91:D3:90:FE:88
X509v3 Authority Key Identifier:
keyid:06:C1:FA:C2:4E:30:D9:25:8E:B2:EF:72:F3:1E:D9:BD:60:8F:E0:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/df0e4b-8f67-4295-9e42-346a3cce5f09/1/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/df0e4b-8f67-4295-9e42-346a3cce5f09/1/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:c0:ad:93:e4:13:3c:ed:7e:79:76:ac:b1:e0:95:13:53:2f:
61:00:25:15:06:44:7e:a4:80:41:59:75:e3:bf:9a:1e:34:bb:
5d:db:65:e9:be:78:ed:09:30:ac:ce:ff:23:5b:6f:ef:9f:f9:
ff:5c:d1:97:5e:5b:01:34:22:f9:03:b3:0f:b7:83:17:63:32:
9b:47:a0:20:ac:ca:b3:0b:5c:6c:1f:c7:eb:4f:9b:0a:0f:c6:
1c:60:ad:69:bd:bc:4e:02:82:72:a4:71:f6:cf:06:4e:be:e1:
a4:ec:72:c3:6b:63:e1:73:e6:4e:2a:5a:97:e7:56:02:74:c9:
e7:1f:87:0a:9b:9a:f2:ab:4d:4a:e8:cb:99:c0:e1:49:ba:29:
50:8a:a7:2b:53:1a:19:01:ff:97:bc:e1:78:65:22:db:42:66:
87:e5:21:98:74:c2:f4:36:5e:cf:51:a0:5e:4c:7c:22:9a:6d:
e6:96:1a:bf:f6:e7:1a:33:1d:d5:a5:d8:69:5c:90:e2:0f:c4:
96:6a:21:34:23:26:0e:1d:f0:5a:5e:fc:6a:c0:00:8e:ca:47:
94:2d:cf:2a:7f:76:e4:55:15:d4:7e:46:3f:2c:f6:ac:85:04:
44:40:8f:70:3c:06:e1:67:d3:b1:03:65:90:ea:2b:ad:72:7d:
aa:f8:ae:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:21:50 2025 by rpki-client