Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/d8e096-4310-42b9-bd20-b5602d3da8a6/1/bmCIOq5JHl-3c6kmQBn_T4iNXKU.mft
File: bmCIOq5JHl-3c6kmQBn_T4iNXKU.mft (raw, json)
Hash identifier: 0fbMOcnDLhmxge7DfaUukEW8TttVWn1BZri1/ZLSsoc=
Subject key identifier: DE:42:F9:53:68:E8:AE:05:20:FA:94:CA:CD:1B:B5:44:EA:E9:D7:E1
Authority key identifier: 6E:60:88:3A:AE:49:1E:5F:B7:73:A9:26:40:19:FF:4F:88:8D:5C:A5
Certificate issuer: /CN=6e60883aae491e5fb773a9264019ff4f888d5ca5
Certificate serial: 019875D26524AA76BC65A07C68339E503AA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bmCIOq5JHl-3c6kmQBn_T4iNXKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/d8e096-4310-42b9-bd20-b5602d3da8a6/1/bmCIOq5JHl-3c6kmQBn_T4iNXKU.mft
Manifest number: 0B33
Signing time: Mon 04 Aug 2025 16:02:59 +0000
Manifest this update: Mon 04 Aug 2025 16:02:59 +0000
Manifest next update: Tue 05 Aug 2025 16:02:59 +0000
Files and hashes: 1: ENnWwF0vmdv43P7jgDpOBWdDipc.roa (hash: 6ywQWq+YpeM+QYJxsua0ysg5X/K6fdwSexzVmdsk58s=)
2: bmCIOq5JHl-3c6kmQBn_T4iNXKU.crl (hash: HlhbZe0kuVj7bB3QUnsuV3iwHiZtfgiGC53zD1HPhNo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/d8e096-4310-42b9-bd20-b5602d3da8a6/1/bmCIOq5JHl-3c6kmQBn_T4iNXKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/d8e096-4310-42b9-bd20-b5602d3da8a6/1/bmCIOq5JHl-3c6kmQBn_T4iNXKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/bmCIOq5JHl-3c6kmQBn_T4iNXKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:d2:65:24:aa:76:bc:65:a0:7c:68:33:9e:50:3a:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e60883aae491e5fb773a9264019ff4f888d5ca5
Validity
Not Before: Aug 4 16:02:59 2025 GMT
Not After : Aug 5 16:02:59 2025 GMT
Subject: CN=de42f95368e8ae0520fa94cacd1bb544eae9d7e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f7:c5:f1:f7:8f:dc:4e:8a:64:d9:90:df:7a:
79:e9:0f:86:9e:ac:89:e7:e6:c5:45:26:57:3d:bb:
8e:1b:14:e6:ec:98:05:72:59:74:1a:23:9d:d2:39:
23:05:53:b9:b2:83:4e:02:a2:1a:33:9b:1c:3e:63:
4e:29:f2:18:3d:c5:ac:0d:ff:d3:b4:9f:8f:47:10:
22:2f:a2:6b:52:24:3d:78:bc:0d:13:a3:9a:8c:d9:
61:47:5c:83:56:14:f4:22:85:67:96:3e:92:b4:f2:
77:ab:4a:75:b9:06:36:a5:d3:e4:2e:42:21:a4:13:
65:a8:ec:b8:8a:87:d0:6a:ca:58:e5:08:ee:34:35:
ef:df:88:ed:aa:0e:bf:4f:55:66:d3:cb:58:98:a3:
2b:17:c4:55:d8:67:b4:9f:bd:40:4f:ab:cf:58:16:
69:24:e7:21:28:e3:2e:67:2e:e7:69:3b:57:7d:6d:
45:e6:f7:9c:f5:84:5a:e1:54:0d:5f:80:5f:32:32:
04:21:b2:a7:ac:bd:23:86:6e:d6:76:df:c2:92:e0:
14:f3:88:a5:4a:0f:6c:66:3e:06:dc:89:4b:a0:0d:
56:61:28:ff:ec:f8:80:fb:8b:ec:da:d4:7e:3e:38:
ba:f0:a5:b2:9d:c0:ca:8d:c9:ac:82:c0:71:53:02:
c1:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:42:F9:53:68:E8:AE:05:20:FA:94:CA:CD:1B:B5:44:EA:E9:D7:E1
X509v3 Authority Key Identifier:
keyid:6E:60:88:3A:AE:49:1E:5F:B7:73:A9:26:40:19:FF:4F:88:8D:5C:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bmCIOq5JHl-3c6kmQBn_T4iNXKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/d8e096-4310-42b9-bd20-b5602d3da8a6/1/bmCIOq5JHl-3c6kmQBn_T4iNXKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/d8e096-4310-42b9-bd20-b5602d3da8a6/1/bmCIOq5JHl-3c6kmQBn_T4iNXKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:b4:af:2d:6a:e8:d3:cf:de:3f:9f:16:be:aa:49:ad:7a:21:
3b:b0:d1:de:8c:53:ae:96:0e:55:85:2e:66:81:e7:3d:9d:69:
24:8f:c9:cb:7b:8c:6d:b9:cf:77:59:f3:dd:e0:31:cb:0c:9a:
57:1a:69:4f:92:98:09:17:fe:30:9a:05:39:72:aa:18:15:a7:
35:0b:29:5f:85:a6:e6:03:76:0a:44:34:ba:38:1e:14:19:8a:
7d:69:0a:bc:de:84:f1:00:d4:06:ff:66:55:7f:ed:10:d4:5b:
01:cb:1d:41:88:a3:b6:8b:0d:b4:f6:27:81:8b:e7:ce:25:53:
5f:ef:98:b9:a7:09:86:2d:42:f7:d9:48:c3:10:8f:90:da:e7:
b8:20:2d:29:3d:b3:2c:fe:46:0d:af:ae:aa:db:c2:0c:a8:cd:
07:46:1f:9a:a1:49:8f:34:37:fe:d9:df:c9:44:37:e2:a7:0d:
7a:a3:c7:ef:c0:c4:0a:39:de:4a:72:0f:dd:1e:bd:b3:ca:f6:
8c:33:ae:bd:13:1d:cd:68:91:61:aa:0e:f0:34:c0:4a:23:97:
bb:dd:2e:06:da:91:09:3b:a8:af:41:a7:c4:ef:b5:af:e4:dc:
66:71:77:c4:50:b5:d3:89:2d:97:ed:87:37:d8:a4:99:3a:c7:
8d:c7:1e:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:58:14 2025 by rpki-client