Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/46c7e6-4006-40f0-adaa-b4192ac638c9/1/CkKubpYYDwO3ym2XQnUW5MB_bis.mft
File: CkKubpYYDwO3ym2XQnUW5MB_bis.mft (raw, json)
Hash identifier: BvlIschPe+Js4Agc1qAmGCzIPup69CSzJCP/NgrQvDo=
Subject key identifier: CE:32:6B:F8:60:EE:83:3A:1F:32:AB:C7:81:35:0D:35:DC:5E:6A:42
Authority key identifier: 0A:42:AE:6E:96:18:0F:03:B7:CA:6D:97:42:75:16:E4:C0:7F:6E:2B
Certificate issuer: /CN=0a42ae6e96180f03b7ca6d97427516e4c07f6e2b
Certificate serial: 01987298248473F9FDD3A42487D70F9CE6C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkKubpYYDwO3ym2XQnUW5MB_bis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/46c7e6-4006-40f0-adaa-b4192ac638c9/1/CkKubpYYDwO3ym2XQnUW5MB_bis.mft
Manifest number: 14B5
Signing time: Mon 04 Aug 2025 01:00:30 +0000
Manifest this update: Mon 04 Aug 2025 01:00:30 +0000
Manifest next update: Tue 05 Aug 2025 01:00:30 +0000
Files and hashes: 1: CkKubpYYDwO3ym2XQnUW5MB_bis.crl (hash: pBHPOlN+o/FU3OkWPeczWX6lJNeNiFq8uS4WsdSH/oc=)
2: OH2h9N_hyzRLLEO1xxz2pS01OI8.roa (hash: KX0d4zyKelEiSPA5pJcqywoIBRSpP8vuqYcvjW39t40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/46c7e6-4006-40f0-adaa-b4192ac638c9/1/CkKubpYYDwO3ym2XQnUW5MB_bis.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/46c7e6-4006-40f0-adaa-b4192ac638c9/1/CkKubpYYDwO3ym2XQnUW5MB_bis.mft
rsync://rpki.ripe.net/repository/DEFAULT/CkKubpYYDwO3ym2XQnUW5MB_bis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:24:84:73:f9:fd:d3:a4:24:87:d7:0f:9c:e6:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a42ae6e96180f03b7ca6d97427516e4c07f6e2b
Validity
Not Before: Aug 4 01:00:30 2025 GMT
Not After : Aug 5 01:00:30 2025 GMT
Subject: CN=ce326bf860ee833a1f32abc781350d35dc5e6a42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f2:7e:2f:d5:86:c7:05:a1:89:a0:61:56:f6:
b0:29:d1:30:80:17:34:8a:af:f8:94:9e:91:4a:b1:
14:8b:dd:78:dc:41:95:71:51:5f:8d:ed:5d:39:62:
b7:f9:13:e5:d4:51:1b:e5:4a:83:b3:8f:01:e5:3d:
6e:5c:05:71:97:fd:9b:7e:0c:50:3e:fb:e0:a8:d7:
a1:a0:85:8e:67:4d:eb:e4:d6:0e:b5:3a:1c:9f:81:
29:d5:dc:97:86:ea:11:23:11:1f:ea:77:97:91:b9:
c2:67:7f:ee:d1:b9:a5:fd:5f:b4:0d:e8:5c:8a:c7:
37:f6:d8:57:ed:32:47:7b:ae:ee:bf:ae:9e:be:60:
09:9c:f3:45:15:4b:ce:d8:7b:9b:3e:93:e6:4f:6c:
a3:a2:37:89:e5:60:42:4d:dc:dc:21:43:45:c6:f8:
8f:d1:a5:ba:82:e1:e1:05:b3:e4:16:79:a3:97:0f:
41:d6:3d:98:da:ab:f4:d0:ec:00:98:47:9d:72:62:
17:28:56:b4:c5:82:7a:90:94:17:c4:13:a0:f9:4d:
97:e9:2b:b6:00:98:66:70:33:39:f2:7b:9b:42:46:
3f:49:c0:43:08:dd:7f:23:07:1a:cc:83:30:55:d8:
7e:cf:d8:20:47:de:2c:f6:e1:92:ec:01:09:bf:04:
2c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:32:6B:F8:60:EE:83:3A:1F:32:AB:C7:81:35:0D:35:DC:5E:6A:42
X509v3 Authority Key Identifier:
keyid:0A:42:AE:6E:96:18:0F:03:B7:CA:6D:97:42:75:16:E4:C0:7F:6E:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkKubpYYDwO3ym2XQnUW5MB_bis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/46c7e6-4006-40f0-adaa-b4192ac638c9/1/CkKubpYYDwO3ym2XQnUW5MB_bis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/46c7e6-4006-40f0-adaa-b4192ac638c9/1/CkKubpYYDwO3ym2XQnUW5MB_bis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:15:4f:d0:07:79:93:41:f4:47:1b:15:cf:55:54:7b:76:ed:
db:b3:a8:a3:3a:10:84:f9:82:98:f3:f5:5a:30:3e:fb:31:a9:
b1:35:69:cf:5b:20:00:0b:31:58:54:84:3c:d7:ac:fb:26:88:
a3:ef:e0:e6:9a:70:67:94:a6:c9:11:76:74:31:e2:b7:00:88:
91:88:73:a1:a7:0b:f2:65:14:83:68:3c:a6:01:72:6d:b4:74:
18:d1:c0:11:ea:d9:b0:c9:f7:75:5e:22:11:0a:96:e1:d5:a8:
9f:92:c3:f3:da:17:46:5d:91:cc:41:bc:42:6a:d5:27:ea:b8:
32:51:eb:88:c7:fa:df:06:38:1b:5b:5d:69:40:77:c1:5b:51:
f8:cc:d1:dd:b1:12:60:e5:43:f0:bf:2d:3f:42:0d:17:0e:3a:
26:46:26:6d:56:c2:e5:4c:48:57:79:bf:fd:45:2a:72:fb:ac:
36:70:f7:30:e3:e5:18:13:d4:b6:26:77:69:48:7e:c7:8e:95:
d7:44:52:86:4a:01:3c:90:3f:07:5a:7d:a3:3d:d4:6c:aa:25:
2e:a8:04:3f:32:01:1c:fe:ae:af:83:69:f7:03:66:93:e5:3f:
43:42:b0:1b:72:ef:04:2e:e8:70:68:2a:ff:7c:99:89:b4:53:
77:94:29:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:06:53 2025 by rpki-client