Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/61979a-ea83-4ee7-b7f7-e168db2c54b4/1/bZ_0pTo9sPQyggzXN9VD-Gepctg.mft
File: bZ_0pTo9sPQyggzXN9VD-Gepctg.mft (raw, json)
Hash identifier: 3lWDhRRXTATBP/rf/aRfA+Nlxvqqyd6A8IkHAzQBm3E=
Subject key identifier: 38:4E:78:56:D2:02:88:A3:FD:0D:9E:AC:AA:01:D3:4C:04:91:03:64
Authority key identifier: 6D:9F:F4:A5:3A:3D:B0:F4:32:82:0C:D7:37:D5:43:F8:67:A9:72:D8
Certificate issuer: /CN=6d9ff4a53a3db0f432820cd737d543f867a972d8
Certificate serial: 019891EC6469C3E34421153EB40704879906
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bZ_0pTo9sPQyggzXN9VD-Gepctg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/61979a-ea83-4ee7-b7f7-e168db2c54b4/1/bZ_0pTo9sPQyggzXN9VD-Gepctg.mft
Manifest number: 1629
Signing time: Sun 10 Aug 2025 03:00:45 +0000
Manifest this update: Sun 10 Aug 2025 03:00:45 +0000
Manifest next update: Mon 11 Aug 2025 03:00:45 +0000
Files and hashes: 1: BhpMJWOfusOQEVpOrd-46zXykZY.roa (hash: 0YBwZ2xZ2kE/oCS5ZASinXgiSDtB02PggMsq/vyRmUc=)
2: bZ_0pTo9sPQyggzXN9VD-Gepctg.crl (hash: p728DO7SIFEdGn1W3n0Vt5kJD/gUiqcNDSJbuQ997kw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/61979a-ea83-4ee7-b7f7-e168db2c54b4/1/bZ_0pTo9sPQyggzXN9VD-Gepctg.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/61979a-ea83-4ee7-b7f7-e168db2c54b4/1/bZ_0pTo9sPQyggzXN9VD-Gepctg.mft
rsync://rpki.ripe.net/repository/DEFAULT/bZ_0pTo9sPQyggzXN9VD-Gepctg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 03:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:91:ec:64:69:c3:e3:44:21:15:3e:b4:07:04:87:99:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d9ff4a53a3db0f432820cd737d543f867a972d8
Validity
Not Before: Aug 10 03:00:45 2025 GMT
Not After : Aug 11 03:00:45 2025 GMT
Subject: CN=384e7856d20288a3fd0d9eacaa01d34c04910364
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:ef:93:9b:13:5e:98:6e:da:b5:d9:d9:5b:6c:
9f:48:d2:df:41:e0:75:b1:93:19:7c:d9:00:42:28:
0c:6b:0a:e7:a0:9e:3a:6f:22:b5:60:a1:94:33:97:
12:84:33:cf:c5:7c:39:43:54:94:a8:05:a5:f2:f8:
25:1d:e9:ab:7e:05:dc:ec:cd:25:be:3e:68:c2:d6:
f2:3b:69:c7:f4:cd:06:fb:c7:e7:2a:22:32:fe:3c:
1a:f9:62:5c:a2:08:9e:f9:6c:12:f1:6c:a8:4f:32:
3d:3a:12:d1:f6:90:da:61:9b:aa:a0:8c:b2:c1:1d:
3f:a1:a5:1c:da:d4:8e:56:0e:12:26:da:12:0b:48:
97:73:ce:f4:35:3a:cb:25:02:4d:5f:04:a8:39:60:
6b:0b:de:1c:7a:e3:d0:ec:26:70:b8:50:dd:58:47:
f0:83:5e:a8:4f:a0:f1:96:f5:d2:c8:c3:8b:af:13:
e5:82:94:56:94:ba:2f:0e:0b:07:86:fc:c1:62:b3:
49:25:66:5c:1f:17:f5:5d:38:3d:24:f4:c7:75:aa:
ed:1f:58:4f:54:65:6c:4f:15:57:03:c2:3b:fa:33:
23:09:6f:95:ca:da:08:de:18:d2:53:2e:8e:17:60:
bd:f2:32:bf:84:09:4a:c9:47:f2:b4:82:84:9d:46:
fd:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:4E:78:56:D2:02:88:A3:FD:0D:9E:AC:AA:01:D3:4C:04:91:03:64
X509v3 Authority Key Identifier:
keyid:6D:9F:F4:A5:3A:3D:B0:F4:32:82:0C:D7:37:D5:43:F8:67:A9:72:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bZ_0pTo9sPQyggzXN9VD-Gepctg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/61979a-ea83-4ee7-b7f7-e168db2c54b4/1/bZ_0pTo9sPQyggzXN9VD-Gepctg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/61979a-ea83-4ee7-b7f7-e168db2c54b4/1/bZ_0pTo9sPQyggzXN9VD-Gepctg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:e0:b6:d4:b0:76:de:13:37:e5:e6:5c:d0:88:7d:f7:4a:18:
6c:f9:55:09:67:8c:e6:1d:7e:a5:f2:b5:a1:21:9e:63:3c:51:
54:12:e2:6d:0b:60:cf:5d:31:09:69:96:d0:94:6d:90:16:84:
5b:6c:98:2d:53:51:6b:a5:66:58:cc:b4:3f:3b:87:ff:20:b3:
69:66:7f:dd:2f:11:68:17:1c:7c:0b:e1:57:84:b5:9b:84:9d:
60:1f:b8:cb:84:ff:61:a7:29:99:45:d3:eb:62:6f:80:a8:56:
3b:ed:f8:e1:ba:2a:d3:6e:5c:d0:75:b9:c0:08:cb:0f:a3:9d:
a4:bb:24:e0:e5:6c:24:17:b4:06:49:e0:78:eb:13:24:c7:28:
f6:dc:bf:7b:5f:fd:e2:55:4d:ed:b9:09:6a:85:c0:0b:1e:49:
80:0f:7d:c9:f9:ae:5a:5c:b8:12:26:56:e8:f0:a8:9c:9a:03:
51:ed:95:4c:c3:b8:ea:26:fe:3b:df:03:54:d0:67:13:34:b6:
1b:2b:6f:c2:dd:6e:86:cb:9a:df:76:09:87:39:79:79:c2:3a:
57:29:b3:11:0e:0e:f9:94:55:c6:8e:63:f9:87:c8:4c:3a:1d:
fe:dc:a4:77:d3:70:a3:64:18:e1:fe:d5:8b:46:db:74:40:1f:
88:07:d4:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 10:33:21 2025 by rpki-client