Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/e4f2db-6f46-4761-adfe-7327df6bdd10/1/bj7iuEACCKfupFBg9LeoPEPo3nw.mft
File: bj7iuEACCKfupFBg9LeoPEPo3nw.mft (raw, json)
Hash identifier: bXPSlFuzUTRTMhT96eCNfJklCvhi5l5YIvk/9ngfW/4=
Subject key identifier: 9D:44:F0:B7:FF:91:18:23:A9:BB:DA:4C:1F:0F:55:47:A2:5D:FE:98
Authority key identifier: 6E:3E:E2:B8:40:02:08:A7:EE:A4:50:60:F4:B7:A8:3C:43:E8:DE:7C
Certificate issuer: /CN=6e3ee2b8400208a7eea45060f4b7a83c43e8de7c
Certificate serial: 01987F0A50F22A2611A01857CEC9AED796C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bj7iuEACCKfupFBg9LeoPEPo3nw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/e4f2db-6f46-4761-adfe-7327df6bdd10/1/bj7iuEACCKfupFBg9LeoPEPo3nw.mft
Manifest number: 0D59
Signing time: Wed 06 Aug 2025 11:00:39 +0000
Manifest this update: Wed 06 Aug 2025 11:00:39 +0000
Manifest next update: Thu 07 Aug 2025 11:00:39 +0000
Files and hashes: 1: CHQq2YDxipt537b311Ui3tG3zOU.roa (hash: Q8vdLMat40/Z7pZgYQmg+RQTQD9awPvQh60JlwKVzLU=)
2: bj7iuEACCKfupFBg9LeoPEPo3nw.crl (hash: UIn+ZiSmnFOsFOX7St8A2WlL+dWCbXyhQwrPo1Xt2Q8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/e4f2db-6f46-4761-adfe-7327df6bdd10/1/bj7iuEACCKfupFBg9LeoPEPo3nw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/e4f2db-6f46-4761-adfe-7327df6bdd10/1/bj7iuEACCKfupFBg9LeoPEPo3nw.mft
rsync://rpki.ripe.net/repository/DEFAULT/bj7iuEACCKfupFBg9LeoPEPo3nw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 08:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7f:0a:50:f2:2a:26:11:a0:18:57:ce:c9:ae:d7:96:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e3ee2b8400208a7eea45060f4b7a83c43e8de7c
Validity
Not Before: Aug 6 11:00:39 2025 GMT
Not After : Aug 7 11:00:39 2025 GMT
Subject: CN=9d44f0b7ff911823a9bbda4c1f0f5547a25dfe98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:01:da:bc:59:39:b9:d0:14:d5:b0:45:9c:a6:
77:24:a9:df:78:e4:b9:cc:a9:27:77:2c:eb:b0:b1:
d0:c0:19:f0:52:eb:bc:13:62:8f:7b:4f:f3:16:3c:
e5:c9:6a:7a:75:a0:8d:36:7e:25:b7:95:d4:59:08:
68:0e:ce:21:43:ca:2c:39:05:31:a0:6e:bd:e3:ea:
fc:26:bb:36:06:a5:55:a3:a7:37:9a:7f:55:57:6f:
37:d7:13:7e:0d:54:c9:40:34:e1:2f:c6:8b:a2:d7:
73:0f:99:0e:8d:fa:b9:c8:96:de:30:d3:bb:ff:00:
de:49:c6:b1:97:a4:3f:5b:e6:b9:a7:68:ac:27:59:
d7:dd:c9:77:61:dc:b7:35:0e:33:3c:c4:16:43:23:
12:11:f7:02:7d:2e:9e:22:5c:e8:49:28:2c:e7:b0:
64:06:6b:f3:12:07:4d:47:dd:58:b9:ee:0d:d5:b9:
2c:4b:f7:82:22:b3:b2:5d:4c:d5:cb:83:c6:0a:76:
33:57:d0:fe:17:da:f2:32:f0:97:ca:a1:63:10:d3:
53:04:70:0f:fe:2c:cc:4e:c5:92:e8:4b:6f:9d:5d:
fb:48:54:a7:ae:a3:5a:ce:b4:f0:19:4a:e7:e7:4b:
43:f4:0b:30:6c:ec:d3:b7:1b:18:bc:6f:f6:75:c1:
58:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:44:F0:B7:FF:91:18:23:A9:BB:DA:4C:1F:0F:55:47:A2:5D:FE:98
X509v3 Authority Key Identifier:
keyid:6E:3E:E2:B8:40:02:08:A7:EE:A4:50:60:F4:B7:A8:3C:43:E8:DE:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bj7iuEACCKfupFBg9LeoPEPo3nw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/e4f2db-6f46-4761-adfe-7327df6bdd10/1/bj7iuEACCKfupFBg9LeoPEPo3nw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/e4f2db-6f46-4761-adfe-7327df6bdd10/1/bj7iuEACCKfupFBg9LeoPEPo3nw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:43:c1:07:c0:86:a5:c2:5d:64:86:1c:fc:d4:ee:d2:33:68:
f3:1c:7d:66:5b:bb:7c:11:29:aa:4c:92:fc:41:97:9f:64:0e:
96:c3:9c:68:8e:47:19:b9:f9:92:85:dd:6b:cf:76:46:16:fa:
cd:cd:54:12:15:52:80:a8:22:b7:5f:8f:b6:58:cb:e3:57:17:
0e:10:38:ec:6a:5a:9e:e3:fa:9a:e8:e9:33:a8:5d:8d:23:b6:
39:e8:46:4f:bc:e5:ab:53:28:d9:f3:99:73:f4:07:af:a0:a5:
dd:d6:86:43:78:4a:47:e2:e5:1c:0b:c9:3b:cb:cc:25:31:89:
fa:b8:c4:9d:71:96:71:d8:06:90:7f:6f:a1:70:eb:b9:f3:9e:
b9:58:be:27:5f:49:2a:93:ca:dd:e6:8d:e1:11:6b:69:b1:b8:
52:ec:8a:0b:d9:ae:27:60:b6:30:88:44:4f:7a:59:ef:f0:fd:
6c:87:a2:98:c9:f4:7f:e1:b9:43:e0:49:50:a9:5f:c9:4b:f7:
ef:c8:d2:7a:fa:66:81:43:a9:47:fa:53:36:c5:88:88:c2:1b:
a3:00:a6:c3:fb:98:8d:40:c4:f9:d9:f6:c4:9b:82:55:0c:de:
0d:f0:de:35:96:b1:55:a8:23:a6:fb:da:69:3e:be:ce:0a:58:
58:4e:5b:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 14:07:24 2025 by rpki-client