Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/bb520c-cd0d-48d8-96a8-0fbe7bd76ffb/1/bBzlMVpD1WYc3NzBudfarPppkPc.mft
File: bBzlMVpD1WYc3NzBudfarPppkPc.mft (raw, json)
Hash identifier: WamfDEF7F7ZpIPp21rAKJWZr7acl5AKxU80tvPz2NGw=
Subject key identifier: BD:78:B1:68:72:F8:7D:C5:B4:A1:17:01:B8:C2:D7:61:68:5C:1C:34
Authority key identifier: 6C:1C:E5:31:5A:43:D5:66:1C:DC:DC:C1:B9:D7:DA:AC:FA:69:90:F7
Certificate issuer: /CN=6c1ce5315a43d5661cdcdcc1b9d7daacfa6990f7
Certificate serial: 01987374074919325FE66BF0C5482D0E3F5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bBzlMVpD1WYc3NzBudfarPppkPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/bb520c-cd0d-48d8-96a8-0fbe7bd76ffb/1/bBzlMVpD1WYc3NzBudfarPppkPc.mft
Manifest number: 1617
Signing time: Mon 04 Aug 2025 05:00:40 +0000
Manifest this update: Mon 04 Aug 2025 05:00:40 +0000
Manifest next update: Tue 05 Aug 2025 05:00:40 +0000
Files and hashes: 1: JhjtDeKwWD1t7W9hpKjAKZnoMY8.roa (hash: Ff16XMN/6UD92K3+Zia2rMAz2XhJeIEHmUVTQSXayaU=)
2: bBzlMVpD1WYc3NzBudfarPppkPc.crl (hash: /Ui7BDnRVsnh9murdJSvT7QHSMNLxo9rUJgAl/5+tik=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/bb520c-cd0d-48d8-96a8-0fbe7bd76ffb/1/bBzlMVpD1WYc3NzBudfarPppkPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/bb520c-cd0d-48d8-96a8-0fbe7bd76ffb/1/bBzlMVpD1WYc3NzBudfarPppkPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/bBzlMVpD1WYc3NzBudfarPppkPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:74:07:49:19:32:5f:e6:6b:f0:c5:48:2d:0e:3f:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c1ce5315a43d5661cdcdcc1b9d7daacfa6990f7
Validity
Not Before: Aug 4 05:00:40 2025 GMT
Not After : Aug 5 05:00:40 2025 GMT
Subject: CN=bd78b16872f87dc5b4a11701b8c2d761685c1c34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0e:d2:05:f3:c3:ab:86:46:d8:1d:b1:c9:98:
59:30:ab:a4:67:28:86:2a:4b:00:9d:a8:63:a3:0f:
1e:d0:f7:9c:14:7b:72:b3:9a:db:34:5a:70:7d:9b:
6b:74:8d:60:f7:39:1f:85:33:fd:c8:da:9c:36:39:
cf:ac:e1:a8:47:a8:99:aa:a3:09:da:94:24:4e:45:
a8:36:c6:56:20:e5:31:87:db:df:37:0b:dd:d2:eb:
ce:fa:41:b4:9f:ef:0f:cd:e1:c0:a5:f9:5f:00:b5:
14:4b:4a:64:ab:85:25:0a:44:81:62:94:03:e6:20:
29:d9:84:50:13:fc:71:dd:b9:8e:52:fa:0c:a6:07:
f5:da:85:5b:b0:8a:09:4d:96:09:45:87:75:6e:eb:
aa:33:18:84:7e:29:ae:94:c3:73:52:76:aa:45:91:
7b:f1:3a:f5:04:33:81:37:f4:cf:5b:61:bb:34:b4:
8d:bf:d5:61:b2:d5:cb:22:0a:b7:0b:12:a6:1a:3a:
d9:da:5e:4d:e2:e5:e6:86:5d:17:58:2f:54:80:54:
33:83:dd:c4:1b:ea:28:21:45:55:b1:90:2b:df:d9:
ff:57:8e:7e:8f:8e:37:d4:4c:ed:8a:d5:aa:02:eb:
c8:67:a6:6f:91:0a:94:bd:c5:dc:f9:f6:2d:36:59:
91:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:78:B1:68:72:F8:7D:C5:B4:A1:17:01:B8:C2:D7:61:68:5C:1C:34
X509v3 Authority Key Identifier:
keyid:6C:1C:E5:31:5A:43:D5:66:1C:DC:DC:C1:B9:D7:DA:AC:FA:69:90:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bBzlMVpD1WYc3NzBudfarPppkPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/bb520c-cd0d-48d8-96a8-0fbe7bd76ffb/1/bBzlMVpD1WYc3NzBudfarPppkPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/bb520c-cd0d-48d8-96a8-0fbe7bd76ffb/1/bBzlMVpD1WYc3NzBudfarPppkPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:61:8e:a2:f0:2a:64:9b:a9:eb:74:2f:ef:d9:43:07:3d:6b:
dc:04:40:18:b7:aa:e5:57:6e:0d:d2:7a:fc:b2:ff:e1:85:9a:
d6:d3:c4:a8:b6:45:9c:5f:24:74:43:cc:78:d0:f9:82:fa:0c:
e9:62:fe:2d:ba:2c:e1:0d:bb:7b:c0:23:24:2b:28:f2:ca:16:
18:b0:35:58:37:9c:65:3b:26:8c:2d:f1:ac:40:48:6f:b3:90:
5c:b7:1f:b2:23:ac:c8:3b:8c:ea:9b:75:8d:44:ee:4f:20:91:
23:3c:b2:8f:8e:15:06:ac:d7:01:09:70:87:fe:e4:db:27:c2:
e1:d5:66:a9:42:37:99:25:03:fd:a8:0e:b6:c5:51:74:fe:b9:
90:03:84:d0:3a:77:38:1e:a8:d7:62:b2:48:b5:e5:02:09:21:
62:42:67:9d:66:67:9a:9a:aa:e9:bf:69:a1:9e:73:1c:e2:6b:
e8:fc:83:5e:5c:0b:1d:95:e1:42:a7:5e:e1:2c:f3:ae:d3:de:
99:13:9e:42:ef:13:93:4d:ea:b8:65:12:f7:0d:8a:4b:c2:73:
8e:3f:9e:b0:12:18:fe:f5:0e:ac:93:0b:8a:76:59:f8:f8:fb:
27:11:68:88:53:71:4a:c9:c1:f6:49:8b:c9:78:0b:9e:7f:0a:
78:e7:05:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:22:51 2025 by rpki-client