Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/d74cb2-f0fc-4f2c-be01-536e1f0c4ff9/1/bNxpTwwyVdXVVz8TKOU2VM-yLE0.mft
File: bNxpTwwyVdXVVz8TKOU2VM-yLE0.mft (raw, json)
Hash identifier: GUVXbnLaWQM6eF9Xc7U4rcEDPZ4PXWJmha6VAM9Nm+c=
Subject key identifier: 69:57:11:E7:04:4D:D3:76:6A:20:4B:A8:6B:65:7D:98:A3:82:4C:41
Authority key identifier: 6C:DC:69:4F:0C:32:55:D5:D5:57:3F:13:28:E5:36:54:CF:B2:2C:4D
Certificate issuer: /CN=6cdc694f0c3255d5d5573f1328e53654cfb22c4d
Certificate serial: 019872CF6817FC3CFC578E9EC5344CE17277
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bNxpTwwyVdXVVz8TKOU2VM-yLE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/d74cb2-f0fc-4f2c-be01-536e1f0c4ff9/1/bNxpTwwyVdXVVz8TKOU2VM-yLE0.mft
Manifest number: 0D8B
Signing time: Mon 04 Aug 2025 02:00:51 +0000
Manifest this update: Mon 04 Aug 2025 02:00:51 +0000
Manifest next update: Tue 05 Aug 2025 02:00:51 +0000
Files and hashes: 1: bNxpTwwyVdXVVz8TKOU2VM-yLE0.crl (hash: DPGOPMmiw0n9dNdyJrEZU/rLvDZ17Tr8BQYcfJJmcdo=)
2: mf0dhA7BgjaM7eDjfmF7DxTSVfY.roa (hash: 1vX40l9RdR1damElfdrSUBtrrLE1iQPxYSNwcaRMl0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/d74cb2-f0fc-4f2c-be01-536e1f0c4ff9/1/bNxpTwwyVdXVVz8TKOU2VM-yLE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/d74cb2-f0fc-4f2c-be01-536e1f0c4ff9/1/bNxpTwwyVdXVVz8TKOU2VM-yLE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bNxpTwwyVdXVVz8TKOU2VM-yLE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 02:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:cf:68:17:fc:3c:fc:57:8e:9e:c5:34:4c:e1:72:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cdc694f0c3255d5d5573f1328e53654cfb22c4d
Validity
Not Before: Aug 4 02:00:51 2025 GMT
Not After : Aug 5 02:00:51 2025 GMT
Subject: CN=695711e7044dd3766a204ba86b657d98a3824c41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:88:85:28:65:d0:a8:6b:a7:f2:8a:79:da:57:
19:96:eb:cd:8b:23:18:05:a7:47:7c:c2:60:2d:c3:
3a:04:08:1e:cf:23:11:cb:ba:33:27:5c:dd:0d:7f:
9e:66:91:99:a5:1d:b3:89:78:99:00:f5:79:a9:e5:
2c:94:12:ea:d3:00:6d:4e:e4:f5:21:27:75:61:01:
48:c1:7c:d6:32:4d:fa:71:28:67:7b:7f:f7:1e:f6:
97:c2:66:70:d4:4f:29:89:91:a8:1d:60:11:0f:d1:
12:0b:ba:9c:3e:d3:47:fd:9b:38:48:3c:9e:04:ed:
d8:38:00:41:20:03:7e:92:52:7b:0e:3f:4e:ed:9d:
d5:1d:93:a5:5f:04:f4:37:c2:2b:5b:5a:19:6c:41:
2a:aa:87:6d:c8:bb:c4:99:c5:c3:f9:72:b1:9d:cd:
88:33:ab:50:93:5a:b3:a2:a1:ec:a7:ee:6f:84:e2:
cf:db:86:e7:6e:a6:b7:c1:06:06:ce:da:b0:67:a6:
18:65:c0:bc:2d:57:0f:9d:f8:ea:83:1b:1e:c5:af:
57:f5:cb:0a:b3:52:9d:fd:a1:0a:6b:dd:d2:f8:bc:
b5:3e:50:9f:54:29:9c:62:e4:50:8d:0d:32:99:8b:
11:24:56:e0:3e:58:99:33:d6:67:9b:6a:14:54:6f:
f7:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:57:11:E7:04:4D:D3:76:6A:20:4B:A8:6B:65:7D:98:A3:82:4C:41
X509v3 Authority Key Identifier:
keyid:6C:DC:69:4F:0C:32:55:D5:D5:57:3F:13:28:E5:36:54:CF:B2:2C:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bNxpTwwyVdXVVz8TKOU2VM-yLE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d74cb2-f0fc-4f2c-be01-536e1f0c4ff9/1/bNxpTwwyVdXVVz8TKOU2VM-yLE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d74cb2-f0fc-4f2c-be01-536e1f0c4ff9/1/bNxpTwwyVdXVVz8TKOU2VM-yLE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:16:47:2e:df:e1:76:c9:2d:c5:86:ba:38:64:69:13:34:ff:
5e:81:dc:f2:b3:a2:1d:24:b6:21:1f:04:2a:df:c6:23:b2:c8:
b1:6d:9b:2f:79:4b:3a:24:e8:83:6a:62:ea:22:f1:f4:ed:96:
5c:48:54:a6:de:39:d4:67:e3:12:84:da:ed:42:cc:41:d7:97:
66:fd:22:f2:78:b6:99:6f:f5:d2:eb:9c:ae:c8:cd:d1:16:ed:
4f:68:a4:db:f2:c2:82:5d:67:cc:d6:f7:19:ad:b5:a2:8f:d3:
bd:2a:8e:21:69:45:1f:6a:7a:39:54:2b:2a:47:45:96:c8:7a:
93:27:2a:d3:eb:3a:b3:ad:51:a5:e8:68:56:7b:85:34:2a:1c:
bb:3a:71:8e:e9:0d:e6:9b:90:bb:58:9b:66:42:dd:81:15:96:
25:69:e6:9a:3d:be:4d:50:9b:0b:09:27:3c:9a:58:ab:9d:ad:
5c:3d:3c:d0:60:df:c9:a9:8a:0f:93:b4:e5:f6:ce:03:7b:56:
f1:8b:f9:3b:66:b1:5e:34:56:1c:19:df:32:2a:6d:c3:a7:3b:
a6:15:29:b8:80:84:8b:40:74:bb:2c:38:85:b4:12:f7:19:50:
47:80:2a:93:e8:6b:69:8e:1b:02:db:46:d8:30:82:a8:6e:88:
df:d0:ad:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:00:17 2025 by rpki-client