Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/52554c-389d-4aea-a00c-741d0898da4e/1/b2oouFuReYIHK59PQG1-sJmROjE.mft
File: b2oouFuReYIHK59PQG1-sJmROjE.mft (raw, json)
Hash identifier: Aro+uDmQCtpXlKzdpKMm9I3MQBPPNgtRoS9u1leEvAI=
Subject key identifier: 40:02:C4:AB:78:6C:57:BC:1B:82:05:D0:E0:BA:30:B8:0B:88:48:64
Authority key identifier: 6F:6A:28:B8:5B:91:79:82:07:2B:9F:4F:40:6D:7E:B0:99:91:3A:31
Certificate issuer: /CN=6f6a28b85b917982072b9f4f406d7eb099913a31
Certificate serial: 0198744FC876AB3F26E3D0A159106A8D083B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b2oouFuReYIHK59PQG1-sJmROjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/52554c-389d-4aea-a00c-741d0898da4e/1/b2oouFuReYIHK59PQG1-sJmROjE.mft
Manifest number: 0648
Signing time: Mon 04 Aug 2025 09:00:42 +0000
Manifest this update: Mon 04 Aug 2025 09:00:42 +0000
Manifest next update: Tue 05 Aug 2025 09:00:42 +0000
Files and hashes: 1: ZwdlOhTaB9mfI0Lixy338yhL9bw.roa (hash: JhlKbHsGhRiWUq0ABUz1j/K5IY2i4ZC4XvyEDFpDUMk=)
2: b2oouFuReYIHK59PQG1-sJmROjE.crl (hash: K/FN6hQ+Fs3eJ9+ZhFx1H6E7WY+Gk0yiRJpm0U4+94E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/52554c-389d-4aea-a00c-741d0898da4e/1/b2oouFuReYIHK59PQG1-sJmROjE.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/52554c-389d-4aea-a00c-741d0898da4e/1/b2oouFuReYIHK59PQG1-sJmROjE.mft
rsync://rpki.ripe.net/repository/DEFAULT/b2oouFuReYIHK59PQG1-sJmROjE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 09:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:4f:c8:76:ab:3f:26:e3:d0:a1:59:10:6a:8d:08:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f6a28b85b917982072b9f4f406d7eb099913a31
Validity
Not Before: Aug 4 09:00:42 2025 GMT
Not After : Aug 5 09:00:42 2025 GMT
Subject: CN=4002c4ab786c57bc1b8205d0e0ba30b80b884864
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:35:45:c0:4c:ec:bf:04:fc:b5:3a:a7:98:9f:
16:25:aa:1f:27:70:90:c8:58:df:bb:fc:bc:6c:a9:
57:73:de:5f:9e:f6:a5:27:ef:a3:b7:89:e1:b9:07:
de:2e:32:cb:56:35:e9:45:8e:bd:f3:3a:8b:0c:81:
6e:42:22:6b:cd:ae:68:8b:54:3d:c8:4a:61:97:6a:
2a:06:95:66:cd:b4:db:ef:ed:d6:de:f8:05:1e:df:
c9:89:d9:d8:29:d6:64:e0:25:d6:cb:f2:63:3a:a4:
c6:01:b5:e9:74:74:1f:7e:bc:aa:18:e7:82:92:a5:
0b:90:d3:a1:b8:63:70:bf:f3:6a:ef:39:79:ec:3e:
11:23:07:7d:53:ec:8d:ac:a9:29:6a:be:a3:93:ce:
84:9b:d3:4c:5b:1d:99:f8:61:0b:cc:23:4d:2f:09:
a5:3e:ee:92:e9:18:51:f9:8f:8b:1a:a4:e5:d9:74:
62:3a:14:30:72:2d:32:bd:a4:5e:d3:c4:01:00:e0:
51:6e:78:06:f4:b3:23:c2:7e:8b:33:69:33:d0:c7:
5b:5e:77:9a:53:5f:7e:10:b3:8f:bf:c6:98:c3:8d:
38:f3:93:9e:1c:64:dd:cf:01:f8:f2:e4:61:d4:a1:
b3:ab:21:e5:fc:4b:2c:29:fb:ac:4a:92:32:4d:76:
e3:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:02:C4:AB:78:6C:57:BC:1B:82:05:D0:E0:BA:30:B8:0B:88:48:64
X509v3 Authority Key Identifier:
keyid:6F:6A:28:B8:5B:91:79:82:07:2B:9F:4F:40:6D:7E:B0:99:91:3A:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2oouFuReYIHK59PQG1-sJmROjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/52554c-389d-4aea-a00c-741d0898da4e/1/b2oouFuReYIHK59PQG1-sJmROjE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/52554c-389d-4aea-a00c-741d0898da4e/1/b2oouFuReYIHK59PQG1-sJmROjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:cd:28:f9:ed:46:f9:6c:15:88:8f:06:c3:c2:da:24:d9:4c:
87:72:15:d6:d0:be:f5:0c:c5:47:3b:67:4e:f5:90:d7:36:86:
20:b2:97:58:cd:f9:10:e0:0b:28:ce:2e:de:8a:2c:2c:d6:31:
7f:2e:66:6d:6f:fa:3a:73:60:35:64:94:e8:68:3c:0a:c6:d3:
79:5f:b5:5b:87:1a:5e:27:7a:cf:f9:5c:cb:6b:58:e2:0a:68:
46:84:21:ef:7c:a2:a6:ef:1e:09:b3:1f:fe:11:78:f3:b9:f5:
57:45:04:85:83:1b:22:61:e6:21:4d:05:ec:02:e7:70:13:c1:
f7:5f:8c:5d:1f:e2:e4:c2:31:b4:21:d9:10:ac:a7:f5:5e:7e:
fb:65:ba:09:e2:51:ef:9f:d9:21:b5:51:b7:99:ca:d0:25:16:
5b:65:8e:a8:2a:09:a5:9c:41:48:9d:2e:a8:8f:44:59:58:68:
fa:2c:6b:4a:92:51:13:02:31:ef:65:48:03:2d:de:27:e7:65:
d8:88:e8:3d:9c:5d:04:b1:e9:bc:2b:0e:80:63:a4:ac:37:29:
50:49:6c:01:96:f5:52:65:93:b3:27:f4:09:82:83:42:a0:95:
09:2c:36:88:ce:85:ad:36:90:c2:45:7d:6f:0b:c7:54:c1:23:
b6:6e:20:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:37:18 2025 by rpki-client