Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/a75507-5c5c-4842-a1c4-8d56ddcfa4b8/1/bMfzcUDRMXn5pckglknIDDfGpxM.mft
File: bMfzcUDRMXn5pckglknIDDfGpxM.mft (raw, json)
Hash identifier: Es0Ryoe/j0shei17X8kWxZ2kT+C/TZum+204vX2eNPk=
Subject key identifier: 8C:0D:55:3A:82:72:58:0A:A7:0A:52:C0:92:4F:A9:CD:25:79:95:27
Authority key identifier: 6C:C7:F3:71:40:D1:31:79:F9:A5:C9:20:96:49:C8:0C:37:C6:A7:13
Certificate issuer: /CN=6cc7f37140d13179f9a5c9209649c80c37c6a713
Certificate serial: 0198A0BA966A19DF46BA283CFFD7ABEFB0CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bMfzcUDRMXn5pckglknIDDfGpxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/a75507-5c5c-4842-a1c4-8d56ddcfa4b8/1/bMfzcUDRMXn5pckglknIDDfGpxM.mft
Manifest number: 1246
Signing time: Wed 13 Aug 2025 00:00:39 +0000
Manifest this update: Wed 13 Aug 2025 00:00:39 +0000
Manifest next update: Thu 14 Aug 2025 00:00:39 +0000
Files and hashes: 1: bMfzcUDRMXn5pckglknIDDfGpxM.crl (hash: J4quPyXNge11KOKqICHkiKpaRouGEV1y/aKVUjiUAUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/a75507-5c5c-4842-a1c4-8d56ddcfa4b8/1/bMfzcUDRMXn5pckglknIDDfGpxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/a75507-5c5c-4842-a1c4-8d56ddcfa4b8/1/bMfzcUDRMXn5pckglknIDDfGpxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/bMfzcUDRMXn5pckglknIDDfGpxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a0:ba:96:6a:19:df:46:ba:28:3c:ff:d7:ab:ef:b0:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cc7f37140d13179f9a5c9209649c80c37c6a713
Validity
Not Before: Aug 13 00:00:39 2025 GMT
Not After : Aug 14 00:00:39 2025 GMT
Subject: CN=8c0d553a8272580aa70a52c0924fa9cd25799527
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:3f:9a:a7:17:31:da:3f:17:ef:53:d4:ae:50:
50:b3:6f:c3:73:e2:5f:e4:95:81:51:75:68:56:bb:
cf:f6:d4:20:73:77:03:0b:13:fd:0f:c8:2f:cb:21:
25:26:06:da:86:89:4e:04:b6:dc:6b:fe:9b:d9:8e:
71:39:02:e4:2d:b8:f1:ff:87:24:ed:48:8b:9c:04:
e5:37:76:75:d0:1a:4f:13:6f:5e:2e:86:f8:76:0a:
11:f1:fc:23:a1:19:da:6c:d9:18:0b:d5:1a:39:b8:
84:c9:a8:e4:85:bb:ca:e3:83:b4:40:5d:94:1e:64:
6b:3d:72:f2:ae:d1:a2:a0:b5:c9:19:d1:0f:5e:91:
66:54:ab:f3:42:71:10:a8:3c:95:9c:41:37:d4:b9:
6f:af:c8:55:7d:eb:34:42:ee:af:fd:60:c6:a1:c6:
e6:16:7f:f8:88:c7:d8:ca:5f:67:37:b0:41:57:74:
56:5e:86:c1:d8:65:5a:10:7b:1f:ab:10:a4:dd:d1:
16:e0:63:a3:63:ae:ab:90:fd:aa:b0:00:bd:82:85:
fd:3d:24:7f:99:81:fc:58:92:68:35:86:a5:dc:c9:
ed:a8:7b:39:40:71:2b:4f:c3:b2:0f:f6:d1:4b:ce:
5d:3e:8a:a4:48:f4:a2:fe:ce:be:17:d5:4d:de:1e:
01:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:0D:55:3A:82:72:58:0A:A7:0A:52:C0:92:4F:A9:CD:25:79:95:27
X509v3 Authority Key Identifier:
keyid:6C:C7:F3:71:40:D1:31:79:F9:A5:C9:20:96:49:C8:0C:37:C6:A7:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMfzcUDRMXn5pckglknIDDfGpxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a75507-5c5c-4842-a1c4-8d56ddcfa4b8/1/bMfzcUDRMXn5pckglknIDDfGpxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a75507-5c5c-4842-a1c4-8d56ddcfa4b8/1/bMfzcUDRMXn5pckglknIDDfGpxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:d2:45:da:66:c1:85:17:50:67:2c:bc:37:0e:92:af:f3:c6:
7c:7c:b6:11:a6:08:e1:cf:a3:54:cb:49:2f:cc:9d:86:6c:f9:
d7:22:68:18:78:b3:2a:1b:01:6e:52:c1:d2:56:b3:be:9f:a4:
bc:5d:87:f1:7f:2d:0b:37:8e:a4:78:74:c9:c6:cd:ab:8b:33:
37:83:a8:9f:58:51:61:0e:ac:26:54:91:88:c8:58:15:11:62:
d7:73:52:6f:88:5d:9a:68:b6:82:a9:90:a7:71:4e:8f:1e:3f:
8d:8f:7f:40:b8:e1:a7:ad:8f:44:55:a7:f4:eb:25:a9:6c:9c:
96:67:fb:0e:39:95:40:1a:a6:80:b9:b4:ef:50:30:aa:ce:89:
2a:e0:cc:93:c8:42:20:9b:7a:d4:ec:6b:3f:8e:3e:a2:dd:7a:
25:2a:8d:ff:05:fd:17:5b:04:ea:f5:08:76:36:8b:c6:d8:96:
1f:18:c8:6d:07:6d:45:3b:92:18:74:21:20:99:34:28:60:be:
07:f5:17:75:65:47:07:1f:3e:6d:53:f0:fe:d6:c4:3c:24:b9:
41:6a:3c:d3:7e:82:5b:f3:97:78:7f:f2:33:08:4b:ee:96:c3:
aa:a4:dd:63:2c:fc:14:dc:74:c3:6c:4f:89:1b:ae:98:c8:c1:
72:d9:0a:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 05:51:37 2025 by rpki-client