Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/ea471a-da64-4596-8370-612a762007ec/1/bqO1AozjZPUQLBrsJ3NrfDO8BJM.mft
File: bqO1AozjZPUQLBrsJ3NrfDO8BJM.mft (raw, json)
Hash identifier: JBHqLV5r6mi/Qv0cl0rxi3KmHeKgCKOxKdJEib5+plE=
Subject key identifier: 7E:A5:6F:D7:BF:F2:42:4A:96:0B:D9:3A:8E:05:26:BE:9C:33:85:BD
Authority key identifier: 6E:A3:B5:02:8C:E3:64:F5:10:2C:1A:EC:27:73:6B:7C:33:BC:04:93
Certificate issuer: /CN=6ea3b5028ce364f5102c1aec27736b7c33bc0493
Certificate serial: 0198887B66AA9D5ED9CBFCB147B98BAFA3B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bqO1AozjZPUQLBrsJ3NrfDO8BJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/ea471a-da64-4596-8370-612a762007ec/1/bqO1AozjZPUQLBrsJ3NrfDO8BJM.mft
Manifest number: 14FA
Signing time: Fri 08 Aug 2025 07:00:45 +0000
Manifest this update: Fri 08 Aug 2025 07:00:45 +0000
Manifest next update: Sat 09 Aug 2025 07:00:45 +0000
Files and hashes: 1: bqO1AozjZPUQLBrsJ3NrfDO8BJM.crl (hash: yxr/kA3NzC99RyRj9oi2sjWjiEHWLZtdPfLHcT/PfO0=)
2: xIncpff8t5DuBdap78CZRmBq41M.roa (hash: iuGa85kLc6g4Qd8kr/ZV4w/v+4lb0FJF9McHzQYZMGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/ea471a-da64-4596-8370-612a762007ec/1/bqO1AozjZPUQLBrsJ3NrfDO8BJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/ea471a-da64-4596-8370-612a762007ec/1/bqO1AozjZPUQLBrsJ3NrfDO8BJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/bqO1AozjZPUQLBrsJ3NrfDO8BJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:88:7b:66:aa:9d:5e:d9:cb:fc:b1:47:b9:8b:af:a3:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ea3b5028ce364f5102c1aec27736b7c33bc0493
Validity
Not Before: Aug 8 07:00:45 2025 GMT
Not After : Aug 9 07:00:45 2025 GMT
Subject: CN=7ea56fd7bff2424a960bd93a8e0526be9c3385bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:95:12:f0:6a:81:d1:61:aa:23:79:b3:1e:1f:
3f:b4:af:f9:89:c5:f3:c6:42:80:1f:d4:5d:29:e1:
3e:3d:eb:f4:c6:58:a8:ce:41:06:57:3c:6c:94:dd:
9f:83:f6:95:f8:d0:d6:77:74:3e:44:bc:a4:48:ee:
6a:42:b4:6e:67:86:f3:c1:6e:48:ea:5b:54:92:8b:
6f:51:99:8d:dc:1f:ed:c6:07:8a:68:69:30:61:1b:
e4:9d:d3:d4:02:f4:80:e4:49:e5:68:00:a2:e1:ee:
11:bc:38:a4:02:da:e9:b9:32:26:d2:42:d7:0e:79:
b6:6b:e5:b7:ac:f4:75:28:b9:15:4e:05:2f:13:b4:
2e:af:46:a2:5c:0c:6f:df:5a:23:8c:2e:06:47:84:
dd:dc:f6:0e:e4:77:3c:70:c0:9e:ed:e8:07:02:de:
57:92:ae:9f:b1:f0:75:97:8f:ae:99:cf:6a:5a:62:
5d:09:83:78:12:ea:79:6d:d8:5c:4c:c4:31:84:fb:
de:a4:12:6e:6e:80:2a:93:6b:18:aa:9a:32:c7:d3:
51:b7:c2:70:c9:7f:93:5d:a9:57:08:db:e0:ba:69:
50:2f:5a:59:c4:cf:8c:c4:05:23:18:69:06:1d:95:
56:8c:bf:81:a8:46:ab:37:4e:2b:75:29:54:b3:25:
86:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:A5:6F:D7:BF:F2:42:4A:96:0B:D9:3A:8E:05:26:BE:9C:33:85:BD
X509v3 Authority Key Identifier:
keyid:6E:A3:B5:02:8C:E3:64:F5:10:2C:1A:EC:27:73:6B:7C:33:BC:04:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bqO1AozjZPUQLBrsJ3NrfDO8BJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ea471a-da64-4596-8370-612a762007ec/1/bqO1AozjZPUQLBrsJ3NrfDO8BJM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/ea471a-da64-4596-8370-612a762007ec/1/bqO1AozjZPUQLBrsJ3NrfDO8BJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:19:a1:25:d5:61:d9:c9:66:a2:32:fa:58:78:11:78:44:e0:
72:e4:72:58:05:39:af:50:8f:ed:2c:42:48:de:08:ff:14:25:
e3:8e:f8:c9:fc:b7:78:7b:c5:83:f5:b2:dd:f1:a7:1a:14:c5:
cc:8b:d1:70:77:47:b2:e3:da:c0:e6:76:48:58:41:4f:eb:ab:
d9:49:fc:c9:10:79:86:c0:c8:e2:c7:4f:3f:d9:d5:a6:a7:04:
9d:a1:85:73:e7:43:13:39:9b:8e:bd:2c:39:4a:48:71:60:ae:
c8:61:ce:e5:93:93:ba:08:09:9a:68:2e:a3:1f:b0:23:17:50:
76:33:46:89:66:90:ca:25:e8:b9:99:d6:09:8f:a0:23:1d:70:
d2:7b:23:82:72:f3:3c:89:44:49:eb:2a:59:94:22:0b:7c:be:
60:c2:d8:c9:b3:d3:ec:d6:e7:ff:8e:79:02:4b:a8:75:13:4d:
8a:78:ad:98:25:b1:0b:55:a7:25:c3:cd:2d:9a:d4:1a:22:4c:
86:6b:07:1d:df:b7:bc:4f:f1:3f:c3:d6:57:1b:8a:93:3e:6d:
d5:3d:91:ae:31:22:3a:d4:c2:2f:29:33:c1:76:b0:2d:8a:3b:
97:67:a8:63:c6:48:40:f2:25:f3:72:f2:2a:ad:56:c4:80:fd:
59:14:48:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 10:12:43 2025 by rpki-client