Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/521788-e4bd-4889-a597-12d0b632e5e8/1/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.mft
File: Bb0Pru3nOtPPxHeLgjjGCOQOmEE.mft (raw, json)
Hash identifier: usdaqVIYWDcJTE0fMCXfxEY7Huf96LVPNTa8Zwc0jKo=
Subject key identifier: 14:D4:3A:C8:7A:E6:9C:0F:88:49:E9:71:70:B1:FE:C4:56:50:F3:49
Authority key identifier: 05:BD:0F:AE:ED:E7:3A:D3:CF:C4:77:8B:82:38:C6:08:E4:0E:98:41
Certificate issuer: /CN=05bd0faeede73ad3cfc4778b8238c608e40e9841
Certificate serial: 01987D1C611846F2F095FD886F8D6587F213
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/521788-e4bd-4889-a597-12d0b632e5e8/1/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.mft
Manifest number: 161C
Signing time: Wed 06 Aug 2025 02:01:08 +0000
Manifest this update: Wed 06 Aug 2025 02:01:08 +0000
Manifest next update: Thu 07 Aug 2025 02:01:08 +0000
Files and hashes: 1: Bb0Pru3nOtPPxHeLgjjGCOQOmEE.crl (hash: H9lLwnOTdOmtRWCAlIAvXsmgV4+b6JSbzPkMey6wPN0=)
2: ifWZmIX4SXkuGkJP6QgKSkmuMBc.roa (hash: nU4OGwo7QVYE2TFfLmXken2fHAzhkJ4DtS2BG5Z6bzw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/521788-e4bd-4889-a597-12d0b632e5e8/1/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/521788-e4bd-4889-a597-12d0b632e5e8/1/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 02:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:1c:61:18:46:f2:f0:95:fd:88:6f:8d:65:87:f2:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05bd0faeede73ad3cfc4778b8238c608e40e9841
Validity
Not Before: Aug 6 02:01:08 2025 GMT
Not After : Aug 7 02:01:08 2025 GMT
Subject: CN=14d43ac87ae69c0f8849e97170b1fec45650f349
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:8b:33:fb:59:60:3f:38:77:92:27:0f:83:c7:
be:81:55:64:f5:d7:f4:78:2a:51:9b:db:44:31:e9:
39:ef:bc:07:b2:cd:60:a8:0c:85:b5:4f:bf:75:3c:
75:87:9b:35:99:5e:68:2f:1e:f6:4a:b3:4a:9b:31:
ba:eb:31:bf:3d:87:09:cb:ed:dc:24:95:89:bc:29:
87:0f:c7:6a:44:bf:25:fc:11:d3:44:4f:77:c6:e4:
4e:74:7d:92:1c:f5:5e:97:d0:5c:9b:1a:dc:7e:ff:
22:e5:34:2e:e2:b8:c3:78:a0:af:ee:3d:2e:84:24:
9c:c6:ce:cc:f0:8d:88:08:27:b7:bc:65:56:6a:26:
ae:ab:06:2f:bc:62:be:aa:7e:35:24:09:59:2d:8b:
33:d5:fc:da:b6:b0:e7:09:01:8b:0c:89:ad:dc:ad:
a8:ca:70:9a:56:db:f6:1c:24:79:57:93:ff:80:e2:
62:bf:d7:24:5e:d2:f0:7e:93:d1:fb:bc:52:96:c2:
a0:7c:85:1a:fe:21:c4:ce:74:90:7e:b5:b5:f4:dd:
6e:4f:23:b0:1f:9c:4e:76:91:06:02:c6:af:95:63:
13:16:e3:15:45:4d:7e:ef:51:70:8d:1c:07:82:e4:
08:e2:ef:50:c5:95:f2:13:e9:48:fa:5e:b1:0d:ae:
95:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:D4:3A:C8:7A:E6:9C:0F:88:49:E9:71:70:B1:FE:C4:56:50:F3:49
X509v3 Authority Key Identifier:
keyid:05:BD:0F:AE:ED:E7:3A:D3:CF:C4:77:8B:82:38:C6:08:E4:0E:98:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/521788-e4bd-4889-a597-12d0b632e5e8/1/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/521788-e4bd-4889-a597-12d0b632e5e8/1/Bb0Pru3nOtPPxHeLgjjGCOQOmEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:8f:3f:50:3a:eb:65:b1:3e:c8:9a:2f:df:1a:de:3c:20:96:
04:42:e5:ee:57:ef:77:32:f7:86:2e:9d:7b:35:a2:07:69:80:
1c:f9:40:69:62:05:9f:2b:40:52:03:8e:ea:2c:36:75:6c:69:
1b:3a:93:e5:e3:3f:e8:4b:47:e3:85:3b:00:08:ca:ed:2c:ab:
fb:c9:ea:73:8d:21:ec:99:62:e0:d7:32:35:13:1b:5a:68:20:
46:41:31:5e:68:f5:bc:74:6c:0a:9d:ea:0e:03:5d:91:71:9a:
66:82:a1:89:2a:68:5d:05:9e:27:2a:42:9a:51:b4:02:43:e5:
f2:e7:9f:ae:2e:65:0f:df:ef:45:03:51:70:67:5d:8b:c0:58:
f6:35:e5:15:37:e2:b6:5b:5b:0d:14:4f:c0:20:f1:32:14:80:
d4:27:8f:33:44:3f:f9:c8:cc:d5:f4:fa:f5:79:6f:8f:15:c7:
8d:8b:41:5b:e1:51:32:5e:98:b2:d9:81:c2:3c:4a:c6:6f:17:
74:5f:69:07:6d:b4:3a:68:b9:67:ed:3b:0c:4a:67:5d:d6:c5:
e2:b6:5d:5a:3f:26:2e:d9:19:9d:84:b1:43:e6:df:2c:dd:ab:
19:ad:0f:23:94:b6:90:e1:a2:22:95:da:95:f7:e6:31:97:1c:
7e:9d:c3:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:23:04 2025 by rpki-client