Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/589db9-e22b-4d64-94b4-8ecf751057ac/1/bRRgVvD7veYYv_ARwPIrp0pYMrc.mft
File: bRRgVvD7veYYv_ARwPIrp0pYMrc.mft (raw, json)
Hash identifier: cisPLtkORT1aAfKsZjm/vtKF3n5tibogPQD28OwaYMA=
Subject key identifier: F5:03:C0:84:86:2E:81:6D:BE:DC:24:72:8E:F5:AD:92:F0:44:25:1D
Authority key identifier: 6D:14:60:56:F0:FB:BD:E6:18:BF:F0:11:C0:F2:2B:A7:4A:58:32:B7
Certificate issuer: /CN=6d146056f0fbbde618bff011c0f22ba74a5832b7
Certificate serial: 0198A1286ACEE0CE04599BBC1FED50365601
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bRRgVvD7veYYv_ARwPIrp0pYMrc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/589db9-e22b-4d64-94b4-8ecf751057ac/1/bRRgVvD7veYYv_ARwPIrp0pYMrc.mft
Manifest number: 162F
Signing time: Wed 13 Aug 2025 02:00:37 +0000
Manifest this update: Wed 13 Aug 2025 02:00:37 +0000
Manifest next update: Thu 14 Aug 2025 02:00:37 +0000
Files and hashes: 1: PWSDM2wQmRNxztAKQ8wgaZS7VDM.roa (hash: d9Wa5FwcE+PxgkYEzEZPmnpoKU1tHYNjbElNCRhvEFk=)
2: bRRgVvD7veYYv_ARwPIrp0pYMrc.crl (hash: RVw5LoD8ZlXfaSrkNf8301v41EgYk0Fz5ST6BJEA8sA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/589db9-e22b-4d64-94b4-8ecf751057ac/1/bRRgVvD7veYYv_ARwPIrp0pYMrc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/589db9-e22b-4d64-94b4-8ecf751057ac/1/bRRgVvD7veYYv_ARwPIrp0pYMrc.mft
rsync://rpki.ripe.net/repository/DEFAULT/bRRgVvD7veYYv_ARwPIrp0pYMrc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a1:28:6a:ce:e0:ce:04:59:9b:bc:1f:ed:50:36:56:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d146056f0fbbde618bff011c0f22ba74a5832b7
Validity
Not Before: Aug 13 02:00:37 2025 GMT
Not After : Aug 14 02:00:37 2025 GMT
Subject: CN=f503c084862e816dbedc24728ef5ad92f044251d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b7:be:df:a6:70:76:63:87:f9:b4:e5:dd:c2:
f6:52:dd:96:a5:d5:b8:1c:35:86:2c:31:ee:98:0d:
67:f1:1b:64:d6:6c:ec:4e:0c:ff:36:ac:b7:15:da:
3f:cd:4c:41:ab:be:d9:b7:6b:30:a5:da:42:c2:19:
48:e4:27:9a:8a:e8:16:a9:f5:d7:81:7b:87:75:83:
b4:3c:33:fb:bb:a5:a0:76:7c:2b:64:a2:2e:94:76:
9e:10:f7:70:f8:d6:b1:1f:ad:f4:7d:4f:5c:9e:52:
5a:d3:01:26:22:0e:d2:e7:95:94:1e:49:da:1e:f7:
b1:9e:4c:6b:e9:b4:72:cc:8a:2c:72:05:0c:8c:58:
6f:48:dc:1a:fc:69:1e:f4:fa:5a:84:66:e6:58:c8:
9f:ec:99:db:dd:2d:f4:ff:10:e2:fa:b6:01:16:5e:
5d:82:0c:fc:b4:f1:26:12:21:3e:43:36:5f:6a:d0:
df:5d:3e:ae:ff:f8:21:96:3a:ef:2a:1b:15:fc:6e:
9e:73:83:04:47:75:f2:49:0d:7f:cd:78:cf:8b:17:
98:56:d4:f1:c5:73:47:ae:87:e1:2f:71:22:84:e5:
ee:60:3e:4c:42:1d:92:f6:0f:d9:63:f9:d8:9c:7e:
d1:43:27:eb:6e:3d:e4:c2:16:55:ce:9f:01:55:a9:
d7:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:03:C0:84:86:2E:81:6D:BE:DC:24:72:8E:F5:AD:92:F0:44:25:1D
X509v3 Authority Key Identifier:
keyid:6D:14:60:56:F0:FB:BD:E6:18:BF:F0:11:C0:F2:2B:A7:4A:58:32:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bRRgVvD7veYYv_ARwPIrp0pYMrc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/589db9-e22b-4d64-94b4-8ecf751057ac/1/bRRgVvD7veYYv_ARwPIrp0pYMrc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/589db9-e22b-4d64-94b4-8ecf751057ac/1/bRRgVvD7veYYv_ARwPIrp0pYMrc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:a7:a4:fb:b9:99:83:e4:1d:72:65:86:34:23:ac:be:5d:93:
01:46:67:6f:9e:29:5b:c8:e4:12:80:ac:d4:fc:37:3f:70:b1:
9c:77:dc:22:24:99:46:34:e9:ba:fa:29:0e:95:b5:f0:e7:c5:
4c:68:5b:bc:78:a1:0d:f7:22:fd:7e:55:46:39:11:ea:74:bd:
99:22:e4:2c:6f:7c:8d:b5:2b:71:d1:59:67:c3:6c:ca:fb:2a:
18:26:1e:8a:4f:32:b8:1a:7b:9a:b5:92:17:a5:cb:5a:9a:ac:
55:45:17:74:7a:da:31:70:a5:37:c2:19:0a:2b:46:6a:82:10:
49:88:93:aa:37:c1:e6:f7:31:37:de:d3:88:08:bd:a6:63:cc:
5d:84:f7:3a:64:6a:7e:11:9a:a3:c2:b9:ac:10:0b:e1:a6:21:
9d:f5:63:29:f7:3b:56:66:82:67:fb:3b:1c:b3:7a:8d:f9:01:
02:76:de:07:b3:8b:24:cd:ab:fe:c6:1a:ad:94:f5:d6:2b:75:
32:13:51:65:77:cb:bf:92:97:fa:f6:41:94:05:63:e4:5f:fd:
56:8c:87:f5:e6:b1:cd:d7:12:a7:b3:d3:51:7c:73:ca:de:63:
0d:6b:91:2e:de:3e:e7:bd:a7:c6:e2:15:f6:06:44:61:d2:b7:
bc:b5:fa:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 13 04:25:03 2025 by rpki-client