Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.mft
File: bF5O9VFnmf_guxuDkxfb01W7eps.mft (raw, json)
Hash identifier: 8is9o5gdRkkpbpOyoiGmvM91LGxDQDKZUpFeXqJyCZU=
Subject key identifier: 76:9A:7F:4F:97:19:C1:C0:0C:98:21:50:F4:61:6C:BE:A5:4C:52:89
Authority key identifier: 6C:5E:4E:F5:51:67:99:FF:E0:BB:1B:83:93:17:DB:D3:55:BB:7A:9B
Certificate issuer: /CN=6c5e4ef5516799ffe0bb1b839317dbd355bb7a9b
Certificate serial: 01988EEBB85DA324661D4DB39FD78D9A519E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bF5O9VFnmf_guxuDkxfb01W7eps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.mft
Manifest number: 162F
Signing time: Sat 09 Aug 2025 13:01:09 +0000
Manifest this update: Sat 09 Aug 2025 13:01:09 +0000
Manifest next update: Sun 10 Aug 2025 13:01:09 +0000
Files and hashes: 1: 0wgL08QR2Tg8DD4ym9yl2cWgk4Y.roa (hash: qV9D4m0x0M6TJ4fUI73uoZNgwejKGUBXdkrfKOtrD44=)
2: bF5O9VFnmf_guxuDkxfb01W7eps.crl (hash: FktXSP+ah9mGgpdGMUnN0JYRo3jCKte1EW/AnugcZmk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.mft
rsync://rpki.ripe.net/repository/DEFAULT/bF5O9VFnmf_guxuDkxfb01W7eps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 13:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8e:eb:b8:5d:a3:24:66:1d:4d:b3:9f:d7:8d:9a:51:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c5e4ef5516799ffe0bb1b839317dbd355bb7a9b
Validity
Not Before: Aug 9 13:01:09 2025 GMT
Not After : Aug 10 13:01:09 2025 GMT
Subject: CN=769a7f4f9719c1c00c982150f4616cbea54c5289
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:bd:62:1c:06:d1:d1:ba:19:50:0f:e2:af:7e:
4f:8a:44:d6:b4:e7:2a:37:8c:db:8d:b2:60:01:c4:
cb:63:d8:ba:25:6f:31:33:55:00:9d:b3:6e:7a:f0:
17:3a:b2:44:32:fa:b0:45:e4:9c:dc:7f:75:ca:f5:
70:97:b6:2f:74:e3:eb:36:41:1d:f1:fc:38:f8:56:
1d:0f:ea:26:ec:3a:92:14:8a:83:e7:82:60:86:80:
e5:21:49:46:f6:3f:12:2c:1b:8e:a7:d2:31:9f:fe:
74:f4:74:4f:19:a7:de:8c:58:5c:0f:e3:45:86:c3:
72:6e:e1:31:fb:23:57:5c:39:7b:83:22:63:bb:42:
b6:be:e9:2a:a6:b5:1a:80:2e:da:2a:04:43:38:ca:
27:64:8d:cd:34:f8:f8:f2:7a:00:1f:bc:dd:5f:16:
43:19:bd:7e:78:82:40:6f:2c:ce:b5:38:79:10:a9:
44:41:f5:39:e2:44:40:08:a7:8c:04:93:91:67:52:
d7:97:31:7e:51:ee:e2:56:79:b9:2b:01:22:b4:ee:
ac:0c:b8:fc:9b:c5:6a:e2:f2:e3:7f:ff:05:ed:bd:
20:00:ec:dd:5e:ab:0e:42:c1:b2:bb:19:a8:d8:3a:
0a:0d:69:fe:14:ed:35:10:9e:13:8b:5d:c5:7d:a8:
ce:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:9A:7F:4F:97:19:C1:C0:0C:98:21:50:F4:61:6C:BE:A5:4C:52:89
X509v3 Authority Key Identifier:
keyid:6C:5E:4E:F5:51:67:99:FF:E0:BB:1B:83:93:17:DB:D3:55:BB:7A:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bF5O9VFnmf_guxuDkxfb01W7eps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:48:f9:cc:21:0e:ce:97:8d:7d:5c:76:dc:0e:00:06:18:84:
f4:ba:dd:ad:53:2c:15:fe:16:4d:ca:c1:21:2a:8d:ac:55:c9:
b2:88:06:ce:1d:10:e1:42:7b:c9:b0:9d:0e:7b:d0:7e:95:c2:
16:3f:97:12:e2:7e:35:86:81:3a:b8:94:e7:bc:7d:f3:26:d1:
fc:ac:4d:ec:7b:29:91:63:28:1c:51:a9:0e:1e:6f:ad:3d:9e:
02:d0:70:40:56:62:31:82:95:1b:e5:b0:1c:ac:99:8f:ef:ef:
59:6e:51:82:17:90:f6:d2:e2:be:99:c5:b5:21:b8:8a:57:f6:
4d:a6:1d:0d:ee:8a:4f:a9:15:2e:10:b1:87:17:f2:9b:64:97:
e1:00:70:12:f1:67:8c:b9:71:ec:f7:d9:75:9f:d6:b9:79:e6:
34:23:59:7c:9c:80:28:35:5b:67:8c:6e:20:9b:61:3c:fd:8d:
5a:27:7d:78:e3:c6:e3:ad:42:74:f2:67:f0:8d:b0:e1:0a:fc:
a9:84:b9:81:c6:11:e2:fb:e5:99:5b:17:67:c2:04:9b:0a:e1:
ef:39:bd:5b:a2:79:35:aa:51:42:28:1c:d0:a2:96:a3:47:f1:
5e:94:8a:38:63:46:fb:2e:7b:cd:e8:cc:a0:76:04:cf:f9:b6:
d0:a6:42:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:39:22 2025 by rpki-client