Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/198df7-7992-44df-a6ca-bec0e9ee4a25/1/bEU8CR9sDKSwKxxMoXu2XR3haJU.mft
File: bEU8CR9sDKSwKxxMoXu2XR3haJU.mft (raw, json)
Hash identifier: +sQkI4I3mQgTSB+R5VR5LRNuDJ9cUXOdDvQMnOHxd/Y=
Subject key identifier: 5C:96:49:CE:58:6D:70:04:D5:7B:A3:9C:DE:59:31:0D:6F:CB:91:D6
Authority key identifier: 6C:45:3C:09:1F:6C:0C:A4:B0:2B:1C:4C:A1:7B:B6:5D:1D:E1:68:95
Certificate issuer: /CN=6c453c091f6c0ca4b02b1c4ca17bb65d1de16895
Certificate serial: 019887D6A12138FB674B11095B24684CAFE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bEU8CR9sDKSwKxxMoXu2XR3haJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/198df7-7992-44df-a6ca-bec0e9ee4a25/1/bEU8CR9sDKSwKxxMoXu2XR3haJU.mft
Manifest number: 1623
Signing time: Fri 08 Aug 2025 04:00:46 +0000
Manifest this update: Fri 08 Aug 2025 04:00:46 +0000
Manifest next update: Sat 09 Aug 2025 04:00:46 +0000
Files and hashes: 1: NQq8etUndTjVgxrhy44nBmqGCOM.roa (hash: j7zhzvWt94q6NzpdciEQjpp4LDZ9qKJXwX2H3/CEMus=)
2: bEU8CR9sDKSwKxxMoXu2XR3haJU.crl (hash: KRZCg//2Ylk7mxw3MTVd+F7fVpBiCDBko9QZ67B29UM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/198df7-7992-44df-a6ca-bec0e9ee4a25/1/bEU8CR9sDKSwKxxMoXu2XR3haJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/198df7-7992-44df-a6ca-bec0e9ee4a25/1/bEU8CR9sDKSwKxxMoXu2XR3haJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/bEU8CR9sDKSwKxxMoXu2XR3haJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:87:d6:a1:21:38:fb:67:4b:11:09:5b:24:68:4c:af:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c453c091f6c0ca4b02b1c4ca17bb65d1de16895
Validity
Not Before: Aug 8 04:00:46 2025 GMT
Not After : Aug 9 04:00:46 2025 GMT
Subject: CN=5c9649ce586d7004d57ba39cde59310d6fcb91d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:64:b7:a8:36:05:6f:1e:40:f5:b1:2c:5c:78:
06:20:01:b5:4a:d0:34:3e:5c:e7:58:37:c7:61:0c:
69:4f:82:ea:07:bc:21:a7:31:c2:99:11:e8:ef:89:
3a:4c:d3:0d:7a:4a:39:02:f8:0d:5d:b4:70:76:63:
02:1e:f5:b4:7f:90:4b:03:cc:82:8f:48:9b:93:fb:
ec:82:5f:7a:b8:c3:00:d4:b6:8e:af:5f:48:09:46:
16:5a:59:d6:40:e3:04:5c:7d:8e:8e:c2:e7:4b:da:
dc:3e:c8:cd:aa:f8:de:6f:20:42:92:95:95:f8:6c:
7f:5a:fd:53:20:f5:38:b2:72:cb:bd:01:90:f4:ae:
f9:00:af:90:73:3c:83:0d:b2:ee:9c:ea:f4:ea:eb:
d3:5a:e4:7d:56:c4:4d:89:17:80:ac:9d:22:73:cf:
d6:9d:7a:12:9d:e3:43:1d:16:99:a2:a6:0d:56:26:
8e:77:b2:a3:61:b4:64:0c:05:69:36:b9:5b:2a:d3:
26:57:76:7e:77:63:81:d9:5c:af:9a:60:11:d3:05:
59:d1:dc:8f:75:a9:92:89:56:3c:09:69:ef:15:8e:
c7:37:de:43:83:91:18:fb:84:00:7a:3a:bc:c3:e2:
ec:64:7a:d4:22:a4:56:e8:26:32:3e:23:5e:88:7c:
ab:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:96:49:CE:58:6D:70:04:D5:7B:A3:9C:DE:59:31:0D:6F:CB:91:D6
X509v3 Authority Key Identifier:
keyid:6C:45:3C:09:1F:6C:0C:A4:B0:2B:1C:4C:A1:7B:B6:5D:1D:E1:68:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bEU8CR9sDKSwKxxMoXu2XR3haJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/198df7-7992-44df-a6ca-bec0e9ee4a25/1/bEU8CR9sDKSwKxxMoXu2XR3haJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/198df7-7992-44df-a6ca-bec0e9ee4a25/1/bEU8CR9sDKSwKxxMoXu2XR3haJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:85:59:4a:5e:09:9a:b5:df:52:03:f6:21:4e:b9:b2:44:06:
80:2f:77:af:70:05:81:61:fb:ad:21:bd:1f:5f:44:44:b9:42:
a5:f2:cb:cb:cf:6a:64:e5:46:b8:ab:3a:d1:ae:3c:79:e0:d2:
3b:e5:88:04:08:e2:e5:79:cc:fe:99:4d:fb:d9:67:8e:71:f4:
2a:69:6e:7e:50:72:7d:48:2e:b9:9c:9a:2d:33:d6:4a:da:7d:
b2:5f:b5:43:79:6a:35:52:93:9f:0b:06:36:25:5f:bb:16:08:
cd:23:90:ec:e0:7a:8d:14:9e:6f:c6:d6:ec:9c:0f:92:6b:e0:
85:27:28:97:1f:58:39:d1:05:ac:98:bd:17:c6:90:ee:e0:a1:
74:68:4b:f5:3f:29:37:83:f8:b9:46:52:c4:13:4e:61:d5:ba:
11:c0:d3:2d:29:81:be:87:f8:ed:fd:ab:22:15:91:6a:ee:cc:
39:c3:c6:ac:c7:ec:a6:8f:8a:43:82:6d:bb:5f:f5:bb:7d:b4:
8c:28:24:d2:ed:2d:1f:48:11:2d:5d:6c:1f:64:98:e3:45:6f:
18:9d:f0:cb:f7:4d:f7:82:b9:1e:9e:54:fd:f9:e2:7f:12:94:
4c:e1:04:f7:9a:a3:93:b3:a0:75:6f:b8:04:b3:2e:2e:fc:1d:
99:21:df:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 10:18:03 2025 by rpki-client