Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.mft
File: Bk3NDucBTvsuO1VPu3BjhO8R0FE.mft (raw, json)
Hash identifier: G8K2YeFoxxuRE7napKeps2WlxeATRLfdw01c3qbx5JE=
Subject key identifier: 5F:45:F6:2A:B8:3F:4E:A3:0A:1A:75:00:98:D2:ED:04:45:30:15:07
Authority key identifier: 06:4D:CD:0E:E7:01:4E:FB:2E:3B:55:4F:BB:70:63:84:EF:11:D0:51
Certificate issuer: /CN=064dcd0ee7014efb2e3b554fbb706384ef11d051
Certificate serial: 01988BEA5404D0872B87FC28058E55232050
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bk3NDucBTvsuO1VPu3BjhO8R0FE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.mft
Manifest number: 1624
Signing time: Fri 08 Aug 2025 23:00:46 +0000
Manifest this update: Fri 08 Aug 2025 23:00:46 +0000
Manifest next update: Sat 09 Aug 2025 23:00:46 +0000
Files and hashes: 1: Bk3NDucBTvsuO1VPu3BjhO8R0FE.crl (hash: QfXOjpahDnf/FZmD1TWdJ8346z1R13Mn/f9vVclUl/c=)
2: GCU6ctyJbqAMhWQYVpX0QaP8Qy4.roa (hash: dW5jCxXLX0Q6KCT48fWLPtjZskUAawNAnNuHkyFw1ow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bk3NDucBTvsuO1VPu3BjhO8R0FE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:ea:54:04:d0:87:2b:87:fc:28:05:8e:55:23:20:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=064dcd0ee7014efb2e3b554fbb706384ef11d051
Validity
Not Before: Aug 8 23:00:46 2025 GMT
Not After : Aug 9 23:00:46 2025 GMT
Subject: CN=5f45f62ab83f4ea30a1a750098d2ed0445301507
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:42:e1:3b:3e:62:f2:e7:64:5b:f5:3c:ef:17:
87:e9:af:16:72:e1:c5:af:cb:3f:73:ab:ed:83:4f:
56:83:ce:c8:40:57:c4:0b:0a:a9:53:f9:ca:fd:d8:
70:1a:0a:83:f6:72:ce:64:64:17:7e:ab:c5:85:1c:
a2:8e:79:9f:16:40:59:16:f5:61:43:86:c7:e2:1b:
8a:28:03:27:ba:13:8f:47:a1:38:72:86:a1:c6:93:
8b:fe:bc:c2:66:be:fd:71:72:5d:3d:35:ba:3f:09:
d2:bd:25:12:51:0a:1d:d5:9a:b7:dd:2c:c0:21:72:
15:0b:c2:6e:b3:68:73:3d:45:af:f3:fd:29:42:69:
4d:05:c9:c9:b6:35:81:3c:d9:9a:bc:ec:8b:25:57:
86:85:9d:cb:f1:af:80:0c:5a:45:3c:64:a7:3f:15:
9a:bb:f8:64:a5:67:a5:8d:21:b5:8f:e9:14:e8:e0:
5a:39:37:b3:17:c8:1a:7b:fd:4e:4a:96:c6:56:c4:
15:b7:a8:0c:80:56:80:8b:ac:54:9d:9b:eb:53:17:
36:db:d6:63:8d:20:25:c1:55:b7:80:0e:75:91:0e:
bc:b4:0c:4a:09:62:85:d7:d7:88:c0:c5:4b:44:84:
9e:d6:e4:8b:f1:86:b8:9e:53:01:c9:65:37:5a:eb:
e4:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:45:F6:2A:B8:3F:4E:A3:0A:1A:75:00:98:D2:ED:04:45:30:15:07
X509v3 Authority Key Identifier:
keyid:06:4D:CD:0E:E7:01:4E:FB:2E:3B:55:4F:BB:70:63:84:EF:11:D0:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bk3NDucBTvsuO1VPu3BjhO8R0FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:47:20:95:5f:55:4c:d9:de:44:5a:94:93:c6:40:66:fa:06:
74:66:6e:2a:63:8d:4b:e0:b5:db:5d:98:19:90:8e:19:68:ab:
f3:c2:91:ff:41:78:7b:b1:34:4f:1c:90:2f:a9:c8:29:36:38:
c5:c2:8d:21:2e:87:6e:8a:f0:7c:cf:f2:d5:dc:11:69:37:6e:
0c:14:2a:20:ce:78:74:f9:da:df:3a:c8:b0:5b:00:73:02:f1:
96:2b:18:e0:72:69:82:65:4f:02:98:29:16:bd:1a:e9:8d:6c:
eb:5b:37:56:6f:d9:4e:f6:ae:3c:36:25:7e:6d:9a:a9:31:7f:
b3:ff:5b:23:44:86:d0:13:f3:b2:96:5e:28:5d:86:8e:3a:99:
5d:66:8e:2f:d1:55:d0:75:80:49:6f:66:07:ee:d2:33:b8:de:
9f:c4:54:4f:4e:64:3b:c3:d6:73:2c:34:5a:fc:0a:7f:9b:6a:
36:7e:d3:fd:e7:e2:15:32:d3:c8:e0:5c:48:c4:5c:78:85:5f:
50:f5:6c:20:26:78:a2:d3:ca:0d:0f:ba:8c:c7:de:af:29:2a:
c8:04:93:44:35:5a:80:7f:f7:8c:d0:a2:97:a9:bd:03:c9:e1:
16:e3:8f:13:05:0a:3e:58:56:49:f8:c2:35:ae:93:1f:77:1a:
d5:a8:e8:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:05:57 2025 by rpki-client