Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/8648bf-804e-4e42-a212-b5a4c22432ef/1/bYjGZIW7YDRBdFdG-fiGoqahWjY.mft
File: bYjGZIW7YDRBdFdG-fiGoqahWjY.mft (raw, json)
Hash identifier: crVFjnviB0oPZMVj35ya4aLZ5n+pqFhhfNcsNMoNqes=
Subject key identifier: CC:B2:C7:BA:A5:7A:58:29:E3:27:84:DC:4A:AB:07:2D:FE:9F:D7:1D
Authority key identifier: 6D:88:C6:64:85:BB:60:34:41:74:57:46:F9:F8:86:A2:A6:A1:5A:36
Certificate issuer: /CN=6d88c66485bb603441745746f9f886a2a6a15a36
Certificate serial: 01987B9D65297545A1DF7B24FED160344285
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bYjGZIW7YDRBdFdG-fiGoqahWjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/8648bf-804e-4e42-a212-b5a4c22432ef/1/bYjGZIW7YDRBdFdG-fiGoqahWjY.mft
Manifest number: 27
Signing time: Tue 05 Aug 2025 19:02:49 +0000
Manifest this update: Tue 05 Aug 2025 19:02:49 +0000
Manifest next update: Wed 06 Aug 2025 19:02:49 +0000
Files and hashes: 1: bYjGZIW7YDRBdFdG-fiGoqahWjY.crl (hash: MUGQVKIdIvV/atitgEs77tkeuIs5tGa1zFHCf5rLcaU=)
2: vVkyUmQN7HdcpsUcb8vGlb1AoX8.roa (hash: hBBSLiQPwZXdQ6tacJUbrKCCkro+stGhMuBkdpWBaAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/8648bf-804e-4e42-a212-b5a4c22432ef/1/bYjGZIW7YDRBdFdG-fiGoqahWjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/8648bf-804e-4e42-a212-b5a4c22432ef/1/bYjGZIW7YDRBdFdG-fiGoqahWjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bYjGZIW7YDRBdFdG-fiGoqahWjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 19:02:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:9d:65:29:75:45:a1:df:7b:24:fe:d1:60:34:42:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d88c66485bb603441745746f9f886a2a6a15a36
Validity
Not Before: Aug 5 19:02:49 2025 GMT
Not After : Aug 6 19:02:49 2025 GMT
Subject: CN=ccb2c7baa57a5829e32784dc4aab072dfe9fd71d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ba:91:bc:92:ef:56:f2:23:33:d0:e8:a2:77:
2f:51:2f:ee:f4:0a:00:f1:e6:15:02:2e:d9:d9:0f:
ec:6f:31:4b:35:ae:9c:3a:bf:d9:cc:e4:bd:31:23:
6d:fd:0f:a2:ad:65:10:b3:91:13:fb:48:b9:0e:3d:
7e:3a:c0:4d:3f:44:bb:40:0f:6b:2a:24:34:e7:2d:
22:6a:1b:62:5e:5a:51:28:ab:d6:f1:91:ad:48:28:
48:16:3d:b1:ab:ac:90:a8:fa:73:c6:ce:10:3b:ae:
75:cf:b6:5e:1f:94:2d:ad:a6:91:8c:a4:ab:13:0c:
5a:30:0a:6f:b6:f1:ae:7a:b8:d7:6b:1b:d6:5d:10:
6c:e7:d4:f0:fc:6d:08:c7:5a:31:d5:04:4d:65:fc:
d6:df:22:41:06:97:58:4c:e1:71:5f:fc:ff:52:d4:
1a:b4:ce:fb:b5:bf:d9:ee:df:95:0c:7b:01:75:73:
cf:89:70:d0:f1:00:fa:68:02:07:46:35:19:d7:48:
70:88:0e:63:a0:41:75:8d:2d:35:92:40:aa:e6:12:
d3:c6:e3:3a:37:54:de:82:b0:53:a0:28:23:71:e7:
d6:23:b4:20:65:f9:35:2c:8d:02:d9:cd:6c:0c:0c:
f7:a4:ea:53:77:12:4f:dd:28:2d:2c:5a:59:f7:6d:
77:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:B2:C7:BA:A5:7A:58:29:E3:27:84:DC:4A:AB:07:2D:FE:9F:D7:1D
X509v3 Authority Key Identifier:
keyid:6D:88:C6:64:85:BB:60:34:41:74:57:46:F9:F8:86:A2:A6:A1:5A:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bYjGZIW7YDRBdFdG-fiGoqahWjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/8648bf-804e-4e42-a212-b5a4c22432ef/1/bYjGZIW7YDRBdFdG-fiGoqahWjY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/8648bf-804e-4e42-a212-b5a4c22432ef/1/bYjGZIW7YDRBdFdG-fiGoqahWjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:ae:40:72:15:cf:53:e9:50:5d:1d:00:d5:ee:70:39:89:f5:
a5:4d:ff:ef:fb:a6:49:e3:5f:f7:6b:10:7c:d0:69:d9:e5:4f:
ac:39:36:19:67:4b:f6:73:24:77:f4:a2:6a:d9:ac:18:df:54:
1d:a1:c4:75:f1:a4:4a:63:3a:f6:92:a5:2b:64:35:fc:d6:f8:
2c:46:a7:41:64:ba:b2:72:7c:ff:70:80:b1:96:52:88:46:fe:
e7:b7:52:24:70:75:17:27:9c:8c:1d:76:c1:d2:69:c8:fb:bf:
a2:7b:c2:6c:e3:77:15:21:c4:67:1a:39:6e:30:b0:4b:5e:c4:
b0:69:d8:07:7a:07:28:ca:01:a7:4b:1d:80:86:20:5e:4f:bd:
b8:e3:61:a6:4d:a8:b9:f4:a5:86:3e:c6:ef:50:8d:30:25:1a:
44:85:10:88:b8:e2:d7:ae:0a:4d:2b:55:d0:2c:34:0c:2c:55:
89:57:4f:18:9b:be:39:42:ab:af:8c:c9:b1:dc:9f:1d:53:97:
7c:1f:9b:22:59:f7:aa:22:48:19:8e:43:d7:f4:71:15:d3:2a:
a3:7b:9a:08:39:a8:4d:64:50:53:48:07:02:69:2c:db:01:ae:
4d:53:26:16:2c:16:95:d4:f8:2f:0c:3e:67:1f:53:ea:76:54:
42:0f:12:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:14:31 2025 by rpki-client