Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/BA3T08UtTG-lG3qDNXjO-zqyZkk.mft
File: BA3T08UtTG-lG3qDNXjO-zqyZkk.mft (raw, json)
Hash identifier: gK8hdZxXZ5gThVqHMIGXQq0NtHHc/y/fwCWPuby+pfs=
Subject key identifier: F6:C7:D2:96:30:D0:CA:49:E7:C9:69:85:17:51:43:BC:AA:26:FB:A0
Authority key identifier: 04:0D:D3:D3:C5:2D:4C:6F:A5:1B:7A:83:35:78:CE:FB:3A:B2:66:49
Certificate issuer: /CN=040dd3d3c52d4c6fa51b7a833578cefb3ab26649
Certificate serial: 01987AF6CDFA8B357861F503B83E6C54FF09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BA3T08UtTG-lG3qDNXjO-zqyZkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/BA3T08UtTG-lG3qDNXjO-zqyZkk.mft
Manifest number: 161E
Signing time: Tue 05 Aug 2025 16:00:51 +0000
Manifest this update: Tue 05 Aug 2025 16:00:51 +0000
Manifest next update: Wed 06 Aug 2025 16:00:51 +0000
Files and hashes: 1: BA3T08UtTG-lG3qDNXjO-zqyZkk.crl (hash: N/GRliQssHtkz7rGowUTcKRqtVVoFRbaETlzpYINioU=)
2: CZQw40ubgHVu1Jof03ClaqRzNO0.roa (hash: ryau3A+d+gfpE7i1EIyrHi9oMGq0/6OLOcTA/JPeZzo=)
3: MR_mra2KXDxOhSmirjUVkdnLe2A.roa (hash: XKtS3itRVqfOpu81ikpDBZ+IyS8k+qng+AJNKrqJmHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/BA3T08UtTG-lG3qDNXjO-zqyZkk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/BA3T08UtTG-lG3qDNXjO-zqyZkk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BA3T08UtTG-lG3qDNXjO-zqyZkk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7a:f6:cd:fa:8b:35:78:61:f5:03:b8:3e:6c:54:ff:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=040dd3d3c52d4c6fa51b7a833578cefb3ab26649
Validity
Not Before: Aug 5 16:00:51 2025 GMT
Not After : Aug 6 16:00:51 2025 GMT
Subject: CN=f6c7d29630d0ca49e7c96985175143bcaa26fba0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:84:d9:2d:4f:71:b9:bb:31:ca:33:a1:bd:f9:
b7:a1:4e:4e:f3:c4:6b:d8:0a:3a:80:7b:67:a6:88:
3e:50:1a:e3:5a:1f:b2:06:2c:38:52:cb:f1:fc:aa:
9f:4f:0e:20:f8:6b:b3:59:f6:b7:59:c9:13:a1:8a:
e1:11:c8:56:df:e4:d1:6f:bd:8e:a7:03:ae:5e:3e:
df:32:ea:85:3f:46:13:b1:a4:c9:33:2c:33:27:5f:
0a:b0:ed:04:f8:e9:0d:4f:95:e1:27:96:9f:7a:86:
44:ab:e2:20:4f:20:7e:dd:a6:43:4b:9b:86:b5:a3:
26:0e:dd:f5:9a:21:ac:c3:95:9e:04:52:78:87:41:
00:cc:c8:58:1f:e9:6b:bf:a0:7d:9a:69:aa:a5:4d:
cd:a2:81:fc:15:0a:f6:dd:b9:40:f5:ab:94:33:b4:
20:d4:3b:5f:69:02:aa:c5:03:81:79:4a:68:49:d1:
c7:6c:c5:e6:7a:34:6f:64:4c:12:e7:5a:23:c5:ab:
e6:4a:f6:e2:49:a7:54:ba:d1:1b:95:fe:5a:13:e4:
54:1a:02:9a:63:63:1f:90:20:00:7b:8d:5b:7a:26:
a1:ad:b0:50:d5:9b:1d:2a:e1:cf:28:5d:56:07:23:
40:9b:95:96:a3:67:24:1a:76:51:d1:42:b5:a3:1a:
bb:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:C7:D2:96:30:D0:CA:49:E7:C9:69:85:17:51:43:BC:AA:26:FB:A0
X509v3 Authority Key Identifier:
keyid:04:0D:D3:D3:C5:2D:4C:6F:A5:1B:7A:83:35:78:CE:FB:3A:B2:66:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BA3T08UtTG-lG3qDNXjO-zqyZkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/BA3T08UtTG-lG3qDNXjO-zqyZkk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/BA3T08UtTG-lG3qDNXjO-zqyZkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:6e:41:b8:b0:ea:cf:c4:29:e9:2b:2d:6e:93:bf:19:47:2b:
cf:a6:76:43:2f:23:e5:fc:4c:13:86:44:6e:59:bf:28:fb:6c:
e3:5d:f5:f9:2c:8a:dc:a3:c8:7d:b7:b1:4f:ff:3f:03:a2:cf:
c4:79:4b:60:e3:61:b1:c9:73:a8:7f:35:c0:a3:e3:72:3a:00:
af:a1:56:aa:cd:16:27:56:41:76:30:2d:06:46:f0:47:10:dd:
1a:29:48:c8:d5:92:93:80:9c:ea:bf:e4:2c:aa:f9:2b:31:92:
9d:40:a3:94:2e:7a:16:ac:1a:e3:59:ea:40:9a:d2:a3:b4:31:
4b:00:8f:bb:b6:ff:44:87:22:75:69:cf:b8:88:53:2f:66:9d:
4f:c4:31:3a:8e:71:86:56:58:f4:be:44:c1:c5:9e:a8:9a:41:
05:9f:5b:aa:c4:de:c4:81:4f:9f:5a:13:1b:0b:44:3b:54:0b:
d9:69:a5:78:be:f7:14:5a:51:16:1d:be:8b:f2:28:8f:18:3b:
c5:ff:8a:df:49:28:f7:cf:1e:b2:49:b7:79:24:13:d3:a9:3a:
ec:6c:7e:b0:92:d5:96:02:b0:35:f0:27:92:95:ae:4e:6b:36:
bf:cc:ad:5f:da:21:24:92:9f:10:93:0b:4a:44:b3:59:4d:38:
ad:b0:d7:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 20:19:15 2025 by rpki-client