Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.mft
File: BdTUnaPhSFWnuINgP_FIwbsh9pA.mft (raw, json)
Hash identifier: /F+RG435GyCakRnLCQbcq6+FfsTEnyoo9Aw6Uvx6OWA=
Subject key identifier: 2A:C8:CE:48:B2:53:8A:20:09:9A:A4:10:18:93:45:14:21:79:C6:B5
Authority key identifier: 05:D4:D4:9D:A3:E1:48:55:A7:B8:83:60:3F:F1:48:C1:BB:21:F6:90
Certificate issuer: /CN=05d4d49da3e14855a7b883603ff148c1bb21f690
Certificate serial: 0198966DB60A245C365D086CE81C2DD46467
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BdTUnaPhSFWnuINgP_FIwbsh9pA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.mft
Manifest number: 010E
Signing time: Mon 11 Aug 2025 00:00:29 +0000
Manifest this update: Mon 11 Aug 2025 00:00:29 +0000
Manifest next update: Tue 12 Aug 2025 00:00:29 +0000
Files and hashes: 1: BdTUnaPhSFWnuINgP_FIwbsh9pA.crl (hash: uAVD4pBTRYiQ3h6MWNulj5YCDj9dFaBfhcqAWT34m0Q=)
2: Mmrr_XQ_x4BmANs7gCo-KqYTJm4.roa (hash: WNj9dn+QKBH33dHyCXrqaGnhqfpAS/VW6cjp/ENdP7Y=)
3: eAr-aAj7uWMuBz66qsxEYuZsKRU.roa (hash: upDaP9emSBMltrR9yq3F/Qw8IFTio9ABAVUioXIvrx4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BdTUnaPhSFWnuINgP_FIwbsh9pA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 00:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:6d:b6:0a:24:5c:36:5d:08:6c:e8:1c:2d:d4:64:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05d4d49da3e14855a7b883603ff148c1bb21f690
Validity
Not Before: Aug 11 00:00:29 2025 GMT
Not After : Aug 12 00:00:29 2025 GMT
Subject: CN=2ac8ce48b2538a20099aa410189345142179c6b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:52:47:ef:da:ee:1a:68:9b:ce:f5:f3:54:8d:
bd:ed:e8:69:bf:da:d3:d9:21:dd:bc:63:65:ff:1b:
53:29:96:08:3a:da:7e:a9:45:f5:25:9f:10:ac:75:
fa:b6:a1:37:32:37:73:87:ca:f7:b8:c6:46:6e:be:
cf:88:b3:04:e3:9a:7f:8d:e9:c3:b8:49:1d:48:8a:
96:12:2a:92:d6:93:7a:c4:a3:f2:42:44:91:32:0b:
49:48:04:86:cb:e9:b5:00:cf:7b:77:69:1c:8d:b0:
46:32:94:bb:9f:50:52:06:fa:b4:e8:23:1c:23:84:
b4:55:57:db:4d:f7:0a:28:14:91:08:9f:b9:12:e9:
19:98:70:bb:19:25:03:17:7f:e6:d3:d8:c9:5a:79:
d6:23:d0:5a:42:ca:72:af:c5:ed:94:17:93:30:45:
36:ee:8f:68:a9:22:69:23:e8:c4:e8:25:b6:44:65:
7e:c3:e7:47:c4:ef:58:b4:46:f7:3d:49:9d:a5:cb:
64:4b:80:96:13:bd:23:27:c5:63:43:f7:d4:75:2e:
b3:41:8e:e0:27:ad:3a:80:d0:b5:07:8f:78:2b:15:
72:da:18:3b:6b:a0:ad:a5:2f:0f:c4:45:21:c1:14:
02:ac:24:c6:68:7a:eb:a3:de:d2:b0:52:9b:af:78:
b4:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:C8:CE:48:B2:53:8A:20:09:9A:A4:10:18:93:45:14:21:79:C6:B5
X509v3 Authority Key Identifier:
keyid:05:D4:D4:9D:A3:E1:48:55:A7:B8:83:60:3F:F1:48:C1:BB:21:F6:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BdTUnaPhSFWnuINgP_FIwbsh9pA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/1a3f91-15bc-4eb8-97dd-58f1cbf3cac3/1/BdTUnaPhSFWnuINgP_FIwbsh9pA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:0f:2c:81:0d:ef:00:ec:7f:a2:5f:42:2c:35:4a:5b:e1:c0:
ae:21:9c:98:5c:99:7c:c8:d5:7e:f0:21:ac:d9:be:98:1d:4c:
47:cf:b3:26:7b:d5:18:84:2e:45:71:7d:8f:49:36:d9:b8:95:
83:77:f0:20:4b:82:23:76:1c:3e:c1:d1:6d:bf:0b:83:bc:44:
b0:cf:c1:cb:f8:2e:be:94:d1:32:b6:b8:1b:54:c3:8b:e1:5f:
4c:d5:f2:66:46:d8:ef:d5:17:6f:ea:ee:13:bd:99:3a:e6:0b:
ae:f2:2e:1b:bf:e3:fd:0d:e9:ce:e8:e5:62:e6:10:ae:16:81:
4e:56:ce:eb:c7:91:14:0f:9f:8f:ef:8f:48:9e:0f:90:3f:30:
bb:18:60:09:3a:02:d7:0d:2b:a5:ff:56:ea:2d:9d:ec:90:b8:
4d:22:5c:86:cd:e1:fd:dc:5a:74:91:05:28:2d:c1:9b:98:9a:
43:39:55:f0:26:dd:25:d2:72:63:40:9c:a1:bb:43:e0:ee:55:
ff:10:a7:50:26:2b:66:66:f3:13:d9:38:31:54:96:bd:66:ee:
27:54:20:45:fb:74:28:e6:da:d4:20:d8:d6:73:cb:ad:80:58:
99:c0:7b:74:fb:b9:32:ad:6a:08:db:9d:81:f9:0f:04:f2:e8:
a2:f3:e8:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 10:30:36 2025 by rpki-client