Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/8d58b5-4f13-47b2-a57e-283bb0923817/1/bBAkoL37rZXwEGTVGM9uqWa0SIo.mft
File: bBAkoL37rZXwEGTVGM9uqWa0SIo.mft (raw, json)
Hash identifier: Yt3t8w5zYbMokT/7hYX/Es0W5TrPTitpWHaZzs1O3To=
Subject key identifier: 5B:00:7E:17:CF:99:F9:BC:70:45:9C:93:61:CE:93:04:0E:7D:ED:69
Authority key identifier: 6C:10:24:A0:BD:FB:AD:95:F0:10:64:D5:18:CF:6E:A9:66:B4:48:8A
Certificate issuer: /CN=6c1024a0bdfbad95f01064d518cf6ea966b4488a
Certificate serial: 01987DC1049870DCD091E91806618EF75762
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bBAkoL37rZXwEGTVGM9uqWa0SIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/8d58b5-4f13-47b2-a57e-283bb0923817/1/bBAkoL37rZXwEGTVGM9uqWa0SIo.mft
Manifest number: 1620
Signing time: Wed 06 Aug 2025 05:00:58 +0000
Manifest this update: Wed 06 Aug 2025 05:00:58 +0000
Manifest next update: Thu 07 Aug 2025 05:00:58 +0000
Files and hashes: 1: 2jz_GVg3tc2PAmVfZM229I9y7DM.roa (hash: a4U4fdO6/HHzhz/D1fQJsN+9NOOESB95lRB1mTGoD/4=)
2: bBAkoL37rZXwEGTVGM9uqWa0SIo.crl (hash: Hmgexg/E1FDZ2NONSsxYCwzWonj8oJQG+VW9mD2NGvg=)
3: qjQqwaE98pw-Tsc3qccVON2SJQg.roa (hash: y4z4CZUi94ZRWjv9y7p8MUe6n4UJbAQ8c5NqooIEDx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/8d58b5-4f13-47b2-a57e-283bb0923817/1/bBAkoL37rZXwEGTVGM9uqWa0SIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/8d58b5-4f13-47b2-a57e-283bb0923817/1/bBAkoL37rZXwEGTVGM9uqWa0SIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/bBAkoL37rZXwEGTVGM9uqWa0SIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 05:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:c1:04:98:70:dc:d0:91:e9:18:06:61:8e:f7:57:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c1024a0bdfbad95f01064d518cf6ea966b4488a
Validity
Not Before: Aug 6 05:00:58 2025 GMT
Not After : Aug 7 05:00:58 2025 GMT
Subject: CN=5b007e17cf99f9bc70459c9361ce93040e7ded69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:bb:2e:39:21:01:50:37:f2:9d:78:e0:0c:fe:
47:1a:87:b1:8d:0d:84:72:cf:67:5d:50:5b:eb:fe:
0c:73:25:f1:cc:46:cd:d5:f9:75:61:cb:25:7a:77:
bc:bc:54:45:56:03:0c:0b:5a:a1:73:28:c1:2f:ce:
6b:4f:45:b7:ba:37:6d:c4:28:8a:04:49:11:59:45:
52:a1:9b:4f:a0:15:84:b4:a7:77:9a:32:00:cb:36:
92:d7:e4:96:25:e2:37:3b:30:57:e1:ee:57:56:32:
c3:5d:dd:fd:c6:54:cf:3d:7c:cd:8f:9b:98:fd:67:
3f:52:6d:3b:c1:bd:8b:50:25:4c:bd:67:5c:71:7b:
f0:c6:9a:ed:35:f7:df:be:42:37:2b:eb:e8:8c:4c:
bf:82:5c:ca:c6:3c:52:cb:62:1f:d4:b8:49:f4:55:
a2:da:01:02:2c:b7:e1:6f:bc:e6:44:13:6d:1a:a9:
b3:c8:6d:92:de:6b:45:bd:05:b3:29:2d:17:cf:64:
e7:97:ec:12:77:29:32:08:63:1c:55:a8:1b:e0:1d:
30:84:66:b0:67:0b:52:56:8d:1c:4a:50:c7:36:9c:
31:42:2e:b7:7f:27:2e:b8:fe:20:f9:af:f4:d3:b7:
1d:31:73:0a:24:46:8a:2e:aa:4f:58:86:6f:b7:0e:
ff:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:00:7E:17:CF:99:F9:BC:70:45:9C:93:61:CE:93:04:0E:7D:ED:69
X509v3 Authority Key Identifier:
keyid:6C:10:24:A0:BD:FB:AD:95:F0:10:64:D5:18:CF:6E:A9:66:B4:48:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bBAkoL37rZXwEGTVGM9uqWa0SIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8d58b5-4f13-47b2-a57e-283bb0923817/1/bBAkoL37rZXwEGTVGM9uqWa0SIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8d58b5-4f13-47b2-a57e-283bb0923817/1/bBAkoL37rZXwEGTVGM9uqWa0SIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:ee:3c:ff:77:14:ed:ba:ab:6a:29:95:47:a0:b7:ba:38:53:
0d:d5:af:28:db:2b:b7:a5:5c:92:c6:45:9e:61:16:9e:b3:c8:
73:a7:9d:f3:f7:3c:47:d9:84:8c:e6:82:1e:f4:a8:e3:77:2e:
94:ac:b2:e3:c7:88:be:2e:6f:68:9f:8e:ea:10:23:34:58:95:
a1:bc:2e:0d:f8:2e:ec:5a:1b:4b:7a:9e:72:e7:6b:52:91:21:
06:d0:b4:a2:13:9d:58:95:62:3f:36:c1:aa:26:51:82:bf:e2:
6c:82:1e:88:dc:e0:83:75:af:ac:2d:4c:3a:74:a4:ea:2d:9e:
69:5e:6f:28:c7:19:b3:ab:1c:64:65:f3:a4:c5:e9:d3:be:aa:
e6:4a:dd:bb:7e:ce:42:f4:f7:45:b5:bd:68:3c:64:63:b0:3f:
25:0c:85:0e:33:be:77:6e:c4:08:7f:36:da:bb:88:9c:3c:b3:
5a:09:01:6c:8b:41:87:59:bf:aa:29:1b:ed:c7:7d:ee:b1:ec:
5b:2e:48:e4:d2:05:e1:f7:45:20:77:7c:e5:ab:83:07:06:22:
ff:31:20:ec:a3:cd:77:e9:a9:10:90:e7:a6:96:5f:b6:4b:8a:
b6:40:07:e3:40:1d:f5:9a:5a:8f:01:c9:4d:fe:c0:1f:7e:06:
92:1b:6e:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 13:11:56 2025 by rpki-client