Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/9ca58e-9e32-428f-8411-1aeb6a4e45ad/1/bMacPXAwzsGfj7ZuVDveZVlXCKI.mft
File: bMacPXAwzsGfj7ZuVDveZVlXCKI.mft (raw, json)
Hash identifier: sDbJj+OHftrqo9jEduS/I9RO37lsgDZ0+5BFf3aAD/U=
Subject key identifier: 49:9D:F2:01:D4:55:66:8A:06:CF:52:32:D0:CA:EF:6D:43:7B:92:76
Authority key identifier: 6C:C6:9C:3D:70:30:CE:C1:9F:8F:B6:6E:54:3B:DE:65:59:57:08:A2
Certificate issuer: /CN=6cc69c3d7030cec19f8fb66e543bde65595708a2
Certificate serial: 0198808B36887516BE9327D361B048211407
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bMacPXAwzsGfj7ZuVDveZVlXCKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/9ca58e-9e32-428f-8411-1aeb6a4e45ad/1/bMacPXAwzsGfj7ZuVDveZVlXCKI.mft
Manifest number: 0718
Signing time: Wed 06 Aug 2025 18:01:03 +0000
Manifest this update: Wed 06 Aug 2025 18:01:03 +0000
Manifest next update: Thu 07 Aug 2025 18:01:03 +0000
Files and hashes: 1: LRy1Su2fWLwjRlXSpxKiN2HsmOE.roa (hash: VbIoxvhdv4Kz4zlYMs8a+1GTnDDa2PQSnpokMmTeNJI=)
2: MbTvipFbe-Fro7yGscX94j34OpQ.roa (hash: lGgg0U/FzBropaPivoqmUVqyNKPQ65NR2i0gu4fF2i0=)
3: bMacPXAwzsGfj7ZuVDveZVlXCKI.crl (hash: pcm5Q6Lo4+WFLqBajtOv3+RZXV8l5rppyoSUFT1jyGI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/9ca58e-9e32-428f-8411-1aeb6a4e45ad/1/bMacPXAwzsGfj7ZuVDveZVlXCKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/9ca58e-9e32-428f-8411-1aeb6a4e45ad/1/bMacPXAwzsGfj7ZuVDveZVlXCKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/bMacPXAwzsGfj7ZuVDveZVlXCKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 18:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:8b:36:88:75:16:be:93:27:d3:61:b0:48:21:14:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cc69c3d7030cec19f8fb66e543bde65595708a2
Validity
Not Before: Aug 6 18:01:03 2025 GMT
Not After : Aug 7 18:01:03 2025 GMT
Subject: CN=499df201d455668a06cf5232d0caef6d437b9276
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:1a:fc:6d:0d:28:d6:d3:18:33:48:79:a2:a3:
d4:20:97:6b:e7:50:97:01:35:65:34:56:fa:c6:ac:
a2:88:8a:62:7b:6e:9a:a9:ed:7c:36:f2:e9:7f:1e:
3a:15:02:eb:e9:4f:eb:8d:1e:a7:0d:3c:d8:7a:36:
d2:a7:bc:37:b9:a8:1c:04:ca:45:af:90:88:da:22:
56:89:60:75:6d:45:ee:af:05:94:b1:fb:e0:71:65:
9a:2d:40:63:60:b9:42:75:92:d8:d6:7c:2c:ca:df:
28:b0:66:79:66:34:56:00:50:f6:7c:eb:5a:9d:7f:
95:c3:cf:ce:e4:d7:13:9e:84:50:39:a7:fe:e2:0a:
77:17:ee:06:6f:b6:de:e7:a5:97:77:0e:f6:56:d0:
47:bd:15:c8:d1:97:7d:aa:e5:66:be:b0:f9:70:f5:
3c:5b:29:0b:8e:85:63:e7:a5:cb:4b:58:98:a2:d3:
0e:c8:f4:54:bd:da:e1:d1:60:42:f2:9d:ab:e4:31:
69:e8:4d:5e:8a:6f:49:86:a1:35:ca:87:06:c3:be:
e9:3c:2d:bf:0d:12:c9:c0:9f:e2:17:8c:f3:d0:54:
3c:59:e6:19:3c:a9:39:2a:a8:b0:83:e9:14:fa:8c:
56:f7:28:e8:f1:a3:c3:af:03:c7:bc:6b:b9:1c:72:
d8:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:9D:F2:01:D4:55:66:8A:06:CF:52:32:D0:CA:EF:6D:43:7B:92:76
X509v3 Authority Key Identifier:
keyid:6C:C6:9C:3D:70:30:CE:C1:9F:8F:B6:6E:54:3B:DE:65:59:57:08:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMacPXAwzsGfj7ZuVDveZVlXCKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9ca58e-9e32-428f-8411-1aeb6a4e45ad/1/bMacPXAwzsGfj7ZuVDveZVlXCKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9ca58e-9e32-428f-8411-1aeb6a4e45ad/1/bMacPXAwzsGfj7ZuVDveZVlXCKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:7e:bc:15:10:cb:c0:30:82:43:59:3a:7d:f6:27:fa:a0:56:
19:a2:d8:a4:46:fe:af:9f:b2:bb:4a:d8:44:fb:cb:fb:68:46:
a6:e4:b8:45:17:94:e8:af:68:36:d3:dc:0b:20:53:ba:c0:0e:
d3:82:77:af:92:b3:ad:f5:7e:8f:0c:b2:2f:47:24:2f:ed:48:
e2:d1:26:bb:05:4a:69:7c:e8:5b:8a:cd:3c:1f:03:a0:dc:27:
fa:a1:ca:11:8d:50:e1:c0:04:8a:95:20:d6:f9:7c:25:e8:dc:
38:f2:27:98:a2:71:bc:5d:05:78:85:0a:ee:b8:9d:14:8b:31:
34:72:fb:09:9e:e8:e4:81:0e:d5:e3:c7:e3:f2:2c:c7:71:98:
66:ff:cc:ec:87:33:e9:61:fd:8d:e8:7f:0b:02:77:31:23:ed:
5c:fd:ea:00:14:35:7f:d9:d7:fa:79:28:94:da:d1:e2:e1:3a:
f0:49:47:b7:94:aa:ce:ed:81:5d:32:c3:fc:c8:84:33:a9:7b:
d7:b8:38:20:32:e0:ee:22:29:76:78:c4:b6:62:1d:8f:9e:72:
53:3b:19:b0:2d:54:31:47:1c:4e:df:1f:08:d4:bb:fe:a9:ed:
eb:b8:c0:34:0f:44:4f:e2:6d:be:a3:71:fa:d5:2e:d4:ec:b3:
52:32:1f:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 01:11:44 2025 by rpki-client