Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.mft
File: bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.mft (raw, json)
Hash identifier: 3HBhHP/lWBwoeibNIs030E1Zvj/q+AySwrQ1F8iqWtQ=
Subject key identifier: A9:ED:1C:EC:FE:ED:9B:73:86:74:4A:79:83:43:CF:7F:34:52:57:B5
Authority key identifier: 6C:B0:DE:C1:3D:F2:05:A6:6E:C5:22:79:25:B8:F5:6B:DB:09:F4:99
Certificate issuer: /CN=6cb0dec13df205a66ec5227925b8f56bdb09f499
Certificate serial: 01988431591CABC64D9AE0BECD87BA528E90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.mft
Manifest number: 1404
Signing time: Thu 07 Aug 2025 11:01:23 +0000
Manifest this update: Thu 07 Aug 2025 11:01:23 +0000
Manifest next update: Fri 08 Aug 2025 11:01:23 +0000
Files and hashes: 1: 4fkynkxl95431dIe-ABsA7v5RCg.roa (hash: EGfFvZoQzCGUyDaxbnd+O3QTAMwiWmSgrk3gdk+vKlc=)
2: bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.crl (hash: XbNc0kVQR3AGYOjA6/2C3jvoU44Xwb5FMRMTjzM1qeg=)
3: lgA3OzlgN5mO-phBlXIn8VKgG_E.roa (hash: FrDJm2Vh5IZpvHu6Ip1jtuiPOr7jqRjxluv8XgGr48o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.mft
rsync://rpki.ripe.net/repository/DEFAULT/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:84:31:59:1c:ab:c6:4d:9a:e0:be:cd:87:ba:52:8e:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cb0dec13df205a66ec5227925b8f56bdb09f499
Validity
Not Before: Aug 7 11:01:23 2025 GMT
Not After : Aug 8 11:01:23 2025 GMT
Subject: CN=a9ed1cecfeed9b7386744a798343cf7f345257b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f9:23:cb:80:0e:08:90:0d:6e:13:d2:c2:08:
13:32:8d:19:32:28:cf:1e:04:81:84:c4:f6:39:29:
cc:da:16:4b:c5:38:ce:52:ba:7f:7e:6d:98:fb:34:
43:b4:75:cf:32:9a:9c:67:6b:fc:4f:e7:fc:de:f8:
6e:e7:6f:65:26:8d:86:d2:f7:c9:34:e2:a0:68:8f:
da:ac:70:a6:cd:c8:d2:df:50:cc:c2:e7:92:dc:7a:
4d:75:e2:4b:d6:c6:79:b0:69:ab:fe:cb:dd:d1:45:
18:16:ab:28:f1:50:8a:96:9d:ef:4d:ab:e6:8c:1e:
de:91:ab:87:4b:17:43:48:44:95:1d:9c:0f:4e:92:
f0:76:b3:9d:df:1d:40:1c:01:86:cc:03:dc:da:10:
9b:eb:8d:b3:4e:ad:b8:e4:e0:54:cc:b6:84:ce:25:
45:08:4d:0b:6c:63:15:70:29:ea:62:40:00:c5:d2:
d7:23:11:0f:b0:b6:3a:7c:bf:e5:6e:16:dd:fb:7e:
51:04:24:6f:51:d6:76:ca:2e:70:50:a8:94:83:63:
ad:42:a1:d5:99:9d:66:08:24:98:ba:b8:d8:6a:aa:
6e:bb:5c:b8:ad:be:d9:04:95:57:bf:52:d1:24:e1:
3d:75:f3:09:8b:2b:5c:fa:85:80:ec:a5:8d:57:29:
d5:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:ED:1C:EC:FE:ED:9B:73:86:74:4A:79:83:43:CF:7F:34:52:57:B5
X509v3 Authority Key Identifier:
keyid:6C:B0:DE:C1:3D:F2:05:A6:6E:C5:22:79:25:B8:F5:6B:DB:09:F4:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:ac:50:3f:4f:b3:4a:36:9d:1f:bc:5e:ec:6a:84:d9:fd:56:
21:0a:f9:d3:d1:84:9f:78:17:72:a9:6a:84:fe:39:ea:04:4c:
2b:4b:c6:84:54:d6:cf:32:1a:0d:ae:69:0e:99:f3:5f:1c:33:
33:e9:33:84:46:4d:42:2c:c1:07:05:2f:c8:7c:6c:f6:88:fa:
ea:64:ea:42:c6:49:21:cc:0b:14:39:82:51:43:60:ec:c1:17:
a0:06:a0:0f:da:67:58:7d:0c:9c:ac:e9:3a:fd:bf:ca:dc:24:
bc:9c:e3:61:9e:18:93:e9:be:18:95:b0:bb:68:c4:e9:5f:c4:
be:2d:de:8c:7e:64:69:da:5b:fb:6f:fa:b3:76:9e:f6:b1:c6:
97:8d:ea:47:f2:00:a6:e2:b1:82:51:65:d3:cc:a9:9f:80:7a:
24:e7:21:73:ab:5a:6c:2a:a8:7a:78:e3:98:2f:69:86:96:73:
81:50:8f:ed:cc:30:b5:be:d6:84:a4:3a:e9:3c:fb:6f:c9:8a:
f1:48:81:6a:c7:58:af:0e:7b:bd:bb:da:82:70:df:df:4e:61:
33:d0:42:a5:a9:b0:88:15:53:30:2b:06:61:18:16:e5:2a:05:
92:30:3b:09:ce:20:96:0b:a3:80:5b:8b:ab:60:a5:cf:ac:a3:
31:5a:90:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 14:38:49 2025 by rpki-client