
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/edecb7-bd59-4ebe-b201-6cf131c1caac/1/bGbVyy-crT9IQ_cUpNxi1yE96-g.mft
File: bGbVyy-crT9IQ_cUpNxi1yE96-g.mft (raw, json)
Hash identifier: 6torQhMxi/bsNVPQRavO/t+ttXz6KQg/G5VTKn2YP8E=
Subject key identifier: 92:C6:C3:C7:C7:5D:83:20:A8:0F:12:1A:FB:14:22:86:60:5C:95:AB
Authority key identifier: 6C:66:D5:CB:2F:9C:AD:3F:48:43:F7:14:A4:DC:62:D7:21:3D:EB:E8
Certificate issuer: /CN=6c66d5cb2f9cad3f4843f714a4dc62d7213debe8
Certificate serial: 019896DC41E8145755B5AF0FEDF7412BE06B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bGbVyy-crT9IQ_cUpNxi1yE96-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/edecb7-bd59-4ebe-b201-6cf131c1caac/1/bGbVyy-crT9IQ_cUpNxi1yE96-g.mft
Manifest number: 162A
Signing time: Mon 11 Aug 2025 02:01:13 +0000
Manifest this update: Mon 11 Aug 2025 02:01:13 +0000
Manifest next update: Tue 12 Aug 2025 02:01:13 +0000
Files and hashes: 1: JAwkYlt_gNZ54Td8tq5GWdme2ug.roa (hash: zUyQFLpVWmBaNa+EvYNx5U2/U4IK1mMjW0Y/zg4R97w=)
2: bGbVyy-crT9IQ_cUpNxi1yE96-g.crl (hash: 8Qp3bQwiswUJukH783Xuahiif1U9tGw4El+5wOIaQ6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/edecb7-bd59-4ebe-b201-6cf131c1caac/1/bGbVyy-crT9IQ_cUpNxi1yE96-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/edecb7-bd59-4ebe-b201-6cf131c1caac/1/bGbVyy-crT9IQ_cUpNxi1yE96-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/bGbVyy-crT9IQ_cUpNxi1yE96-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:dc:41:e8:14:57:55:b5:af:0f:ed:f7:41:2b:e0:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c66d5cb2f9cad3f4843f714a4dc62d7213debe8
Validity
Not Before: Aug 11 02:01:13 2025 GMT
Not After : Aug 12 02:01:13 2025 GMT
Subject: CN=92c6c3c7c75d8320a80f121afb142286605c95ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c6:ba:de:08:8d:69:5c:64:fa:b8:af:f3:a2:
a3:a1:e6:ac:8b:08:4d:c5:57:25:41:5d:c1:7c:87:
71:76:c6:a0:d6:41:53:78:0e:25:e1:fa:98:85:75:
5f:6b:1a:05:b5:a5:b9:ba:c4:0b:81:e7:bd:8c:93:
9e:7d:ac:51:10:1e:66:95:09:75:0d:94:c1:db:e1:
09:6f:2e:fe:6c:9a:dc:a0:fc:37:a4:f8:6a:02:69:
09:85:c8:5b:b3:d1:d3:07:39:ab:03:c3:c2:ba:e4:
8b:9a:7a:b6:6c:b8:1d:eb:26:4d:3a:46:1d:49:d1:
87:e3:59:57:2d:fa:2c:cf:1b:43:c7:98:be:a2:0a:
5c:e3:4f:cf:68:97:e1:0a:3a:8b:93:4b:ad:94:27:
ed:6f:49:ff:ed:9b:fa:71:5d:a9:a4:21:4c:89:ed:
0a:f1:2d:1a:a8:4e:04:a9:28:45:b4:e8:1c:09:b9:
c3:6a:83:e0:81:ab:8a:76:0c:33:6c:01:f4:02:9e:
83:9a:6a:f4:aa:a3:5b:c2:42:43:e6:44:3f:3e:8a:
d6:59:59:00:be:da:cd:57:59:56:5c:db:1d:9d:b3:
f4:d9:2c:c7:52:dc:ca:4f:3a:7c:2b:9a:ec:ee:61:
77:96:ef:ac:92:fc:ac:d7:db:0a:5b:b3:7d:92:31:
a1:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:C6:C3:C7:C7:5D:83:20:A8:0F:12:1A:FB:14:22:86:60:5C:95:AB
X509v3 Authority Key Identifier:
keyid:6C:66:D5:CB:2F:9C:AD:3F:48:43:F7:14:A4:DC:62:D7:21:3D:EB:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bGbVyy-crT9IQ_cUpNxi1yE96-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/edecb7-bd59-4ebe-b201-6cf131c1caac/1/bGbVyy-crT9IQ_cUpNxi1yE96-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/edecb7-bd59-4ebe-b201-6cf131c1caac/1/bGbVyy-crT9IQ_cUpNxi1yE96-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:33:62:1a:4c:f9:25:86:aa:81:ff:1a:0a:0a:2a:3b:b7:82:
a0:11:f6:9c:f9:1b:35:dd:d2:59:1a:df:17:c4:9a:08:9f:ab:
16:23:f4:d9:51:b6:01:02:ac:e4:ca:09:19:d8:20:72:a4:8c:
6a:ed:0f:10:ad:1e:e7:4c:7c:07:ef:b4:0a:89:aa:06:1c:4b:
cf:d3:5a:d4:50:80:ba:e4:60:a8:ee:a2:7b:0d:c3:f4:12:59:
70:73:f5:99:90:90:21:9f:c3:bc:8f:cb:b1:00:b5:e4:dc:c4:
c9:33:00:51:b0:54:fe:e3:63:b1:e6:1e:9b:0c:21:11:1f:f9:
de:6e:b0:72:ca:17:c6:72:61:dd:d5:69:7e:57:aa:4f:d5:e7:
61:5e:72:d9:e3:e0:02:b5:0e:09:d0:09:48:fa:98:f5:99:5c:
4b:ee:44:17:ca:5a:16:94:14:88:a4:21:09:93:85:d3:f9:50:
85:ce:6b:da:69:52:c1:eb:67:f4:bc:37:bd:d2:ee:21:08:c4:
d3:2d:08:7b:f8:0f:2a:9f:95:11:27:61:6a:99:79:2d:77:db:
2a:cd:38:d0:e9:c7:d3:2a:ee:18:2d:ad:a5:b4:a5:20:33:45:
75:73:20:cc:a9:c6:25:1d:cf:22:41:fb:b1:64:a7:32:c4:9a:
9b:a0:50:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 04:07:59 2025 by rpki-client