Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f7308a-4108-4acc-b600-3630543b521b/1/bTi1QIMcnNXfSAhRpygGZ-181kc.mft
File: bTi1QIMcnNXfSAhRpygGZ-181kc.mft (raw, json)
Hash identifier: NVz5DwZSGb24h/MTnoSpkyz2xItpmBQqCuSbYOm/jzk=
Subject key identifier: 7E:FE:A7:6D:ED:18:20:BF:B2:5A:4F:1D:D4:77:02:EC:E0:01:1F:6D
Authority key identifier: 6D:38:B5:40:83:1C:9C:D5:DF:48:08:51:A7:28:06:67:ED:7C:D6:47
Certificate issuer: /CN=6d38b540831c9cd5df480851a7280667ed7cd647
Certificate serial: 01987E65F7C5D8065EC3429F7CB12F21A574
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bTi1QIMcnNXfSAhRpygGZ-181kc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f7308a-4108-4acc-b600-3630543b521b/1/bTi1QIMcnNXfSAhRpygGZ-181kc.mft
Manifest number: 0A3C
Signing time: Wed 06 Aug 2025 08:01:07 +0000
Manifest this update: Wed 06 Aug 2025 08:01:07 +0000
Manifest next update: Thu 07 Aug 2025 08:01:07 +0000
Files and hashes: 1: bTi1QIMcnNXfSAhRpygGZ-181kc.crl (hash: A2hyCmBcmTzXCv+VD9JdJfu3s1DWH3Y5ERcUfvNdnKc=)
2: okBQ3HYZQrL6ORKAHfJHyIzTOqU.roa (hash: 8hx35QaymOBGYmgY5QQuJWW8cF+INO74gqLHBnenUT8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f7308a-4108-4acc-b600-3630543b521b/1/bTi1QIMcnNXfSAhRpygGZ-181kc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/f7308a-4108-4acc-b600-3630543b521b/1/bTi1QIMcnNXfSAhRpygGZ-181kc.mft
rsync://rpki.ripe.net/repository/DEFAULT/bTi1QIMcnNXfSAhRpygGZ-181kc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7e:65:f7:c5:d8:06:5e:c3:42:9f:7c:b1:2f:21:a5:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d38b540831c9cd5df480851a7280667ed7cd647
Validity
Not Before: Aug 6 08:01:07 2025 GMT
Not After : Aug 7 08:01:07 2025 GMT
Subject: CN=7efea76ded1820bfb25a4f1dd47702ece0011f6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d2:81:a3:d3:28:c3:1f:cc:54:8c:99:d4:62:
4d:30:7b:98:34:fb:f5:2c:b3:4c:fa:de:11:85:0c:
70:97:cb:af:18:38:ff:de:5c:68:dd:3f:f1:82:0a:
03:8d:00:c1:ff:53:c6:b8:1b:e6:3f:a6:fa:2f:d7:
fa:18:b5:1e:2d:12:7c:85:18:6e:67:a8:b2:ee:eb:
a5:62:7b:30:18:c8:81:5f:76:b2:81:d6:ba:43:0f:
e2:2b:c2:f1:95:9b:89:c3:a8:ff:a5:9f:a4:b9:a0:
41:a7:68:bb:0b:6c:c8:d8:a3:ff:a2:ac:df:30:fe:
b5:9d:a7:0b:11:ae:05:46:b2:c7:da:45:63:79:33:
78:ac:fa:d5:39:26:81:af:a1:c0:93:a0:5d:47:fc:
f6:30:7b:96:60:2f:11:25:c2:52:5e:5a:db:50:99:
64:05:37:a4:a0:77:2c:2d:8b:05:b7:9d:ab:3b:5e:
3e:bc:a6:a6:bb:b2:7c:ef:eb:93:5e:ad:33:b2:b0:
c8:3f:63:66:46:60:0e:75:6d:45:cd:e6:8b:ea:58:
c4:13:12:5d:7a:2b:dd:d6:97:db:c7:e6:9d:1f:6b:
2e:d1:0d:88:a3:a0:22:80:f6:f5:fb:2e:af:e3:0e:
5a:2f:ad:ce:a2:d0:92:08:57:de:35:4e:60:93:2e:
3b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:FE:A7:6D:ED:18:20:BF:B2:5A:4F:1D:D4:77:02:EC:E0:01:1F:6D
X509v3 Authority Key Identifier:
keyid:6D:38:B5:40:83:1C:9C:D5:DF:48:08:51:A7:28:06:67:ED:7C:D6:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bTi1QIMcnNXfSAhRpygGZ-181kc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f7308a-4108-4acc-b600-3630543b521b/1/bTi1QIMcnNXfSAhRpygGZ-181kc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f7308a-4108-4acc-b600-3630543b521b/1/bTi1QIMcnNXfSAhRpygGZ-181kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:3e:e9:96:a1:24:0d:4e:d7:d7:a7:e3:50:d8:85:6c:ff:1c:
53:d6:f0:2a:6a:a4:5e:fd:68:00:4b:18:df:e1:6a:5c:67:91:
32:86:06:cd:71:ab:38:65:4d:c0:2e:1e:bd:81:3e:38:0b:49:
31:ab:76:b6:7e:e0:05:90:15:3a:c1:19:1b:4d:61:43:9a:3b:
20:93:d6:f4:ea:c4:1f:6a:2a:d3:6a:43:e4:4e:56:9d:86:5d:
5d:b2:1e:5a:8d:fb:86:99:7a:ef:26:69:33:47:be:93:61:da:
a1:53:0c:e6:ba:e1:79:c2:f5:46:b9:58:fb:12:08:01:73:bc:
95:48:e6:ae:07:72:30:5f:5d:c6:7e:c6:79:eb:6b:e7:ce:8c:
a0:3b:37:1d:50:65:cb:fb:6c:c2:a3:18:1e:da:69:f3:d9:b8:
02:4e:ed:52:e1:a6:84:1f:13:06:97:69:22:98:c4:a7:08:d1:
91:37:16:78:30:49:18:d5:ee:d4:6d:69:12:27:11:85:7c:3d:
13:c9:53:13:ff:69:a7:28:8e:04:af:44:cf:9e:8b:cb:16:4d:
35:78:a3:e1:95:a1:dc:e9:fc:a2:20:89:55:79:0e:ba:d0:a6:
db:26:12:8d:a0:1a:8d:c9:66:85:23:06:5e:b8:e4:ff:96:9a:
5e:b7:f7:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:03:14 2025 by rpki-client