Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/c8dc11-90ef-487e-a073-df2bbc9d0473/1/bAlGwIGzK-hIywDY2TLowfcXlmg.mft
File: bAlGwIGzK-hIywDY2TLowfcXlmg.mft (raw, json)
Hash identifier: KsPj+IOfGj2tlB60k848hiZX1ppHQBeRc/6W4EXsm7g=
Subject key identifier: CC:90:57:77:EC:A4:FA:FE:88:9D:AE:68:44:C8:5E:9C:D0:2F:FC:8A
Authority key identifier: 6C:09:46:C0:81:B3:2B:E8:48:CB:00:D8:D9:32:E8:C1:F7:17:96:68
Certificate issuer: /CN=6c0946c081b32be848cb00d8d932e8c1f7179668
Certificate serial: 01987D8BB5230CB894A9A0F6B07D05774ECD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bAlGwIGzK-hIywDY2TLowfcXlmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/c8dc11-90ef-487e-a073-df2bbc9d0473/1/bAlGwIGzK-hIywDY2TLowfcXlmg.mft
Manifest number: 161B
Signing time: Wed 06 Aug 2025 04:02:44 +0000
Manifest this update: Wed 06 Aug 2025 04:02:44 +0000
Manifest next update: Thu 07 Aug 2025 04:02:44 +0000
Files and hashes: 1: bAlGwIGzK-hIywDY2TLowfcXlmg.crl (hash: 1HT08P9lms4atzsxjiBR/cRb00OeiDDd9UNGzazQ/PM=)
2: zcbK2VYAm9mMFJWXJQ7evncTyKY.roa (hash: IlkFU9F+u30MyRO9adAYRJd3agbOfEkk4M3dko//XTI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/c8dc11-90ef-487e-a073-df2bbc9d0473/1/bAlGwIGzK-hIywDY2TLowfcXlmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/c8dc11-90ef-487e-a073-df2bbc9d0473/1/bAlGwIGzK-hIywDY2TLowfcXlmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/bAlGwIGzK-hIywDY2TLowfcXlmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:8b:b5:23:0c:b8:94:a9:a0:f6:b0:7d:05:77:4e:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c0946c081b32be848cb00d8d932e8c1f7179668
Validity
Not Before: Aug 6 04:02:44 2025 GMT
Not After : Aug 7 04:02:44 2025 GMT
Subject: CN=cc905777eca4fafe889dae6844c85e9cd02ffc8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:6b:59:b8:43:01:27:5a:f4:fe:65:0e:76:fb:
96:87:0b:8f:e7:75:38:ec:90:60:db:ee:cb:40:2b:
3c:b3:7b:a4:2b:46:a2:82:51:4b:24:78:06:90:bd:
f8:95:90:2a:a0:8f:bf:0e:04:55:ea:d0:4f:36:9b:
8a:51:24:6f:4d:14:ea:e9:e5:bc:dc:8b:9a:15:d7:
6b:fc:27:8f:b5:a7:16:8a:41:54:32:5b:66:67:7f:
35:c0:a4:37:ae:36:35:03:2f:2c:48:d9:47:03:ea:
8f:06:22:e9:c2:17:ac:16:97:dc:bd:f5:dd:ef:03:
55:3e:3c:7f:34:f6:5d:af:af:0b:82:1c:a5:37:8c:
5c:e2:35:b9:97:de:3f:8a:dd:ba:ad:f9:a9:01:1c:
46:4a:2f:a5:1d:ca:db:2e:60:05:58:da:fb:ee:31:
2f:3c:2e:26:59:a3:5a:12:81:14:3a:ef:f4:85:7a:
1d:9f:17:93:40:28:b7:38:22:78:1c:b1:42:84:09:
f9:a8:5e:93:58:b9:27:83:df:7d:0f:25:24:78:77:
2d:a8:7d:dd:ed:4a:d7:61:3a:c9:e1:2a:3b:cf:d5:
1e:b1:e0:62:21:fe:4c:42:cd:9b:48:cd:40:3c:ec:
1f:cd:63:27:83:55:43:51:6f:ea:37:af:30:f4:e9:
6b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:90:57:77:EC:A4:FA:FE:88:9D:AE:68:44:C8:5E:9C:D0:2F:FC:8A
X509v3 Authority Key Identifier:
keyid:6C:09:46:C0:81:B3:2B:E8:48:CB:00:D8:D9:32:E8:C1:F7:17:96:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bAlGwIGzK-hIywDY2TLowfcXlmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c8dc11-90ef-487e-a073-df2bbc9d0473/1/bAlGwIGzK-hIywDY2TLowfcXlmg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c8dc11-90ef-487e-a073-df2bbc9d0473/1/bAlGwIGzK-hIywDY2TLowfcXlmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:32:9d:6b:01:0e:b1:84:56:cf:74:88:f0:17:ef:c6:c3:e9:
a8:76:4e:1c:d2:6a:9b:ac:14:8b:8e:2f:73:7d:34:b3:6f:2b:
da:d0:47:8f:9f:06:c1:dd:bf:ad:71:3d:e6:03:d4:9b:4d:c1:
08:d7:46:d3:c2:d2:72:37:61:7f:01:30:ed:69:ee:6e:88:6a:
f3:7c:eb:ad:2b:4e:62:9d:c1:25:ba:13:3a:40:dc:5c:a8:44:
28:c4:a3:6f:f6:bd:6a:1d:bc:5d:09:ee:91:da:5f:95:3f:34:
21:d9:8f:24:fa:2f:bb:de:21:93:0e:68:b8:fc:76:e4:66:47:
16:f0:a3:c3:db:29:a4:dd:3b:d0:9d:2b:c5:3c:66:b5:66:cd:
df:c2:16:69:ad:bc:7e:0e:e7:94:50:3f:4d:92:f6:af:2a:9a:
51:06:14:4b:cb:94:78:1d:58:aa:ef:32:35:52:41:e6:46:e8:
8f:8c:28:0a:ec:2c:a7:0a:7f:10:e4:d5:6a:33:0d:86:a7:45:
2d:23:71:ff:9b:f1:b8:c4:05:d9:cd:3b:f3:16:a4:92:d5:c9:
c7:ae:93:68:77:d4:e2:ea:5e:d1:4b:67:4f:0c:d0:c2:f2:ef:
a3:c9:a2:80:13:5c:b4:d4:b9:c7:d2:fa:a5:5c:ad:23:da:b8:
14:8c:78:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 07:59:34 2025 by rpki-client