Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/d63178-5d53-41e4-a70e-2a1e39dd633c/1/bWjTPT2hTTu8_PwuSS3BZzhJqmw.mft
File: bWjTPT2hTTu8_PwuSS3BZzhJqmw.mft (raw, json)
Hash identifier: thvfeGErnHk56U7zT/xAipHo8YzezCvu49tymjM7mX8=
Subject key identifier: 3D:1F:0E:9C:07:E6:80:1D:71:A6:22:0B:95:4C:29:D1:AE:F2:E1:E5
Authority key identifier: 6D:68:D3:3D:3D:A1:4D:3B:BC:FC:FC:2E:49:2D:C1:67:38:49:AA:6C
Certificate issuer: /CN=6d68d33d3da14d3bbcfcfc2e492dc1673849aa6c
Certificate serial: 0198936D40BE2A7E3E13653B5D2168F4795D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWjTPT2hTTu8_PwuSS3BZzhJqmw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/d63178-5d53-41e4-a70e-2a1e39dd633c/1/bWjTPT2hTTu8_PwuSS3BZzhJqmw.mft
Manifest number: 0A34
Signing time: Sun 10 Aug 2025 10:01:07 +0000
Manifest this update: Sun 10 Aug 2025 10:01:07 +0000
Manifest next update: Mon 11 Aug 2025 10:01:07 +0000
Files and hashes: 1: bWjTPT2hTTu8_PwuSS3BZzhJqmw.crl (hash: ENpmTDP6WhIbHlzc5xp1TjPP99qI52WUAnsNNIPqsmI=)
2: kYlX8uk50adCvLD80f5Fzepy0uA.roa (hash: ha3QcBHkgMvicsrTAgTGPAD+hk2VZnwH2+hSQHLSUdM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/d63178-5d53-41e4-a70e-2a1e39dd633c/1/bWjTPT2hTTu8_PwuSS3BZzhJqmw.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/d63178-5d53-41e4-a70e-2a1e39dd633c/1/bWjTPT2hTTu8_PwuSS3BZzhJqmw.mft
rsync://rpki.ripe.net/repository/DEFAULT/bWjTPT2hTTu8_PwuSS3BZzhJqmw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 10:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:6d:40:be:2a:7e:3e:13:65:3b:5d:21:68:f4:79:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d68d33d3da14d3bbcfcfc2e492dc1673849aa6c
Validity
Not Before: Aug 10 10:01:07 2025 GMT
Not After : Aug 11 10:01:07 2025 GMT
Subject: CN=3d1f0e9c07e6801d71a6220b954c29d1aef2e1e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b7:0a:29:bd:7d:80:21:3d:fb:5c:36:61:b6:
26:3a:21:f9:5d:06:25:d9:56:12:24:2e:8b:a8:c7:
b5:82:22:36:f8:6d:8a:d9:27:77:94:c4:32:27:09:
3e:a1:70:58:f2:eb:c5:29:d1:29:41:da:40:a5:e6:
c6:50:9e:bf:9b:93:57:dd:89:45:a2:2a:ed:34:6c:
99:db:da:60:3c:f7:55:80:55:36:62:b6:87:d5:23:
ad:a0:3a:77:e4:a1:47:17:74:2d:50:7a:c9:64:8c:
13:2c:3c:ce:60:15:45:6d:bb:fb:28:65:3d:b5:c6:
d2:b7:e9:73:51:37:0a:1a:92:ec:67:c0:0e:48:e3:
83:6c:60:a9:b4:45:c3:ff:8a:ab:c0:a3:e2:43:42:
66:6f:0c:e5:bc:4e:87:d9:d4:d6:90:15:0e:54:85:
c4:7d:ca:bb:d6:42:f3:47:c7:c3:97:e2:71:a3:8f:
7c:b9:a4:d6:03:81:98:af:29:3d:5d:3a:77:82:8c:
b2:bc:77:ca:aa:0f:ae:1a:dc:10:80:b3:cb:f3:35:
b6:d7:96:1c:38:03:92:a4:26:e1:33:f0:ca:10:18:
83:1a:12:c3:30:45:de:a5:2c:93:b7:47:80:22:60:
ec:58:4b:83:20:d8:61:87:d7:1d:3d:70:00:71:9e:
3f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:1F:0E:9C:07:E6:80:1D:71:A6:22:0B:95:4C:29:D1:AE:F2:E1:E5
X509v3 Authority Key Identifier:
keyid:6D:68:D3:3D:3D:A1:4D:3B:BC:FC:FC:2E:49:2D:C1:67:38:49:AA:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWjTPT2hTTu8_PwuSS3BZzhJqmw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/d63178-5d53-41e4-a70e-2a1e39dd633c/1/bWjTPT2hTTu8_PwuSS3BZzhJqmw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/d63178-5d53-41e4-a70e-2a1e39dd633c/1/bWjTPT2hTTu8_PwuSS3BZzhJqmw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:2f:98:4d:66:88:b5:05:54:13:ae:d7:5b:10:e5:50:29:bc:
ac:84:8c:5d:cf:0d:03:7c:63:61:37:89:d1:ad:82:d1:b7:4b:
2d:10:f0:79:4b:7b:ef:f1:97:56:9a:4c:87:6f:ff:c4:b9:4b:
86:9e:92:ec:21:83:b5:bb:6f:0a:7e:bd:c1:d2:de:21:6f:6d:
42:d3:d9:b6:92:51:42:15:78:ca:e7:ae:e9:78:43:60:62:26:
2f:5d:b9:06:cf:e8:f7:a6:75:8d:e5:65:a2:02:0d:a5:b6:c1:
27:0d:5b:e2:44:12:64:de:9d:95:86:b2:90:26:29:03:43:3b:
71:4e:bd:e0:07:c2:7e:91:77:59:b0:40:24:ee:65:49:4c:b6:
3f:14:17:f7:ff:7a:35:f2:b9:b3:ad:a6:bc:27:b0:6b:e9:c5:
cd:82:68:93:01:27:e1:f7:f2:f8:7b:68:e2:bf:92:5e:f8:51:
b1:ef:c1:5c:b2:86:a1:70:06:a3:9b:d1:74:78:c6:cb:ca:d0:
d4:51:c2:e8:41:b5:51:52:10:4a:c0:8b:48:43:b4:88:ea:23:
0f:fa:37:d1:37:33:b9:f8:f1:c3:68:d6:07:dd:1d:dd:05:f5:
de:df:5d:54:cd:99:a3:97:e7:26:e4:09:36:a7:ce:e1:94:20:
f4:c0:54:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 18:11:49 2025 by rpki-client