Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/ac8587-db0d-4fe1-a39d-452ef6abe00f/1/BPD3XK7T8miFrGVjD_qu53pw69k.mft
File: BPD3XK7T8miFrGVjD_qu53pw69k.mft (raw, json)
Hash identifier: saKIbT/2tcS5D5yFdBdFiki/dJVkYeJ18g6GWHnAKhk=
Subject key identifier: 9E:82:F4:8A:15:A4:62:48:F9:4D:05:B5:97:E0:8C:22:8F:19:A0:3B
Authority key identifier: 04:F0:F7:5C:AE:D3:F2:68:85:AC:65:63:0F:FA:AE:E7:7A:70:EB:D9
Certificate issuer: /CN=04f0f75caed3f26885ac65630ffaaee77a70ebd9
Certificate serial: 019873744589FB630520A90983FB011B4F36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BPD3XK7T8miFrGVjD_qu53pw69k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/ac8587-db0d-4fe1-a39d-452ef6abe00f/1/BPD3XK7T8miFrGVjD_qu53pw69k.mft
Manifest number: 13B6
Signing time: Mon 04 Aug 2025 05:00:56 +0000
Manifest this update: Mon 04 Aug 2025 05:00:56 +0000
Manifest next update: Tue 05 Aug 2025 05:00:56 +0000
Files and hashes: 1: BPD3XK7T8miFrGVjD_qu53pw69k.crl (hash: 60SA47YR7FewR+FVcrJZwDnPcNUlISqLBOCx23Xv64M=)
2: ilRpOqqhCRrukRL5kvILbezdwjw.roa (hash: 09XWT+P0AZf+EnMM2PlCmZMY0UVdVh5S35frUm5Llew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/ac8587-db0d-4fe1-a39d-452ef6abe00f/1/BPD3XK7T8miFrGVjD_qu53pw69k.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/ac8587-db0d-4fe1-a39d-452ef6abe00f/1/BPD3XK7T8miFrGVjD_qu53pw69k.mft
rsync://rpki.ripe.net/repository/DEFAULT/BPD3XK7T8miFrGVjD_qu53pw69k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:74:45:89:fb:63:05:20:a9:09:83:fb:01:1b:4f:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04f0f75caed3f26885ac65630ffaaee77a70ebd9
Validity
Not Before: Aug 4 05:00:56 2025 GMT
Not After : Aug 5 05:00:56 2025 GMT
Subject: CN=9e82f48a15a46248f94d05b597e08c228f19a03b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:52:0c:77:f8:0f:ef:d4:4f:21:10:76:c7:d7:
35:28:7c:6d:7b:63:76:62:ed:28:9c:36:7f:f6:48:
3c:31:36:f4:69:ff:b4:e8:e4:b8:0b:6e:99:7d:cc:
3a:09:5a:e3:17:74:11:3c:4f:4c:3a:f4:37:be:4a:
aa:ed:f4:af:30:14:1d:34:65:98:a3:8c:1c:78:85:
e8:39:56:ed:f6:1c:0e:fb:78:10:28:65:97:cd:7e:
52:46:5e:91:4c:eb:6c:78:f7:fb:44:bb:86:01:aa:
c6:7d:66:cf:90:dc:f1:35:36:a2:49:81:46:a0:bd:
ea:c3:ea:0f:45:4f:19:f8:21:33:97:a9:3e:da:eb:
e0:3d:38:4f:de:ab:4c:b8:bb:3a:b8:51:59:37:f7:
a6:ca:ab:e2:38:19:7d:21:c0:33:2b:84:5d:07:e4:
d5:7f:b6:e2:60:05:c5:be:3c:53:f9:84:16:7e:77:
5b:44:99:35:ae:ac:43:c8:d9:cb:e1:79:77:a4:b4:
4f:b1:15:67:a8:c6:a9:55:dd:77:03:68:bb:ba:9b:
d6:39:d5:66:97:8a:f1:e7:9a:b7:6c:af:8f:36:65:
fd:8e:2f:4d:d8:15:b3:3f:65:40:bc:f3:bd:58:22:
4e:c3:7a:d3:ab:07:e8:63:07:6c:c7:81:55:95:7b:
fc:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:82:F4:8A:15:A4:62:48:F9:4D:05:B5:97:E0:8C:22:8F:19:A0:3B
X509v3 Authority Key Identifier:
keyid:04:F0:F7:5C:AE:D3:F2:68:85:AC:65:63:0F:FA:AE:E7:7A:70:EB:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BPD3XK7T8miFrGVjD_qu53pw69k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ac8587-db0d-4fe1-a39d-452ef6abe00f/1/BPD3XK7T8miFrGVjD_qu53pw69k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ac8587-db0d-4fe1-a39d-452ef6abe00f/1/BPD3XK7T8miFrGVjD_qu53pw69k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:60:b1:58:06:d4:fa:7d:cb:cd:e3:25:b6:ea:89:85:e8:22:
80:f0:0d:95:74:b5:5f:93:68:83:be:42:73:bf:66:a3:76:bb:
4c:18:ae:a8:e0:5c:8d:53:8c:df:e0:3f:5f:b9:78:b8:ad:9c:
c4:5e:dc:5b:16:17:fa:28:28:4d:f3:76:76:7d:75:7b:17:f2:
2b:f7:4f:b0:ea:79:9c:cf:c3:e4:92:88:80:5e:b2:a0:1d:95:
e0:2b:e7:de:db:81:82:c1:10:7c:44:f5:dc:bc:63:04:d6:7c:
1e:3a:4a:97:dc:71:67:f9:e3:8e:60:0e:d0:e9:34:1b:88:0d:
0b:5c:6f:a3:66:30:3b:27:8f:8c:76:c3:db:41:9b:85:3e:5e:
7a:a3:aa:13:50:6e:d8:0c:14:8c:9e:db:a7:14:31:fe:b1:3f:
47:0a:02:03:da:9e:00:d3:1c:72:1f:e8:d4:a7:89:11:e9:00:
c8:c4:b8:e7:3e:c4:87:59:c4:7f:f2:11:b3:5f:f5:39:e5:ea:
99:40:9e:37:37:16:d4:be:bb:63:ae:c8:ea:32:1f:bc:18:19:
b4:80:aa:d9:7d:2a:1e:89:92:f6:be:f1:ea:01:f7:92:c2:ab:
6f:76:50:11:e0:dc:70:08:de:ed:56:c3:19:d4:4a:cb:d5:7b:
74:c3:5c:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 13:56:00 2025 by rpki-client