Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/c6e217-03ff-4396-adfe-255f0c51bbe0/1/BDaS8qHRvHb_f50pCRvtoIt7yWw.mft
File: BDaS8qHRvHb_f50pCRvtoIt7yWw.mft (raw, json)
Hash identifier: j+vIAIDpbB7By6jK0sJS1EXH3B1O1e7xBz3tCvrhLO0=
Subject key identifier: 72:D2:FC:02:46:92:FB:A1:B2:82:8C:D6:FE:43:52:C5:35:90:C2:F4
Authority key identifier: 04:36:92:F2:A1:D1:BC:76:FF:7F:9D:29:09:1B:ED:A0:8B:7B:C9:6C
Certificate issuer: /CN=043692f2a1d1bc76ff7f9d29091beda08b7bc96c
Certificate serial: 01987D1C44D60F583B744F31788EF9FB5F98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BDaS8qHRvHb_f50pCRvtoIt7yWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/c6e217-03ff-4396-adfe-255f0c51bbe0/1/BDaS8qHRvHb_f50pCRvtoIt7yWw.mft
Manifest number: 161C
Signing time: Wed 06 Aug 2025 02:01:01 +0000
Manifest this update: Wed 06 Aug 2025 02:01:01 +0000
Manifest next update: Thu 07 Aug 2025 02:01:01 +0000
Files and hashes: 1: BDaS8qHRvHb_f50pCRvtoIt7yWw.crl (hash: qOuwXCD3FZ9I7m/wfw1TrKP4dwQN005BNnl28gwuVXc=)
2: F5ASQ_x2NzqLG2YPK-IJMnC68oA.roa (hash: rL17KB2ZeYz5uA3Maczd8dyCWpJw7h3YziKqc9PF9RM=)
3: fKRgm3J38CdqPYWraPnwaBHZfSw.roa (hash: faZcv/HNNKoTcf9eyD+mOEilysgTYS2fYEJ0tHKXiUk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/c6e217-03ff-4396-adfe-255f0c51bbe0/1/BDaS8qHRvHb_f50pCRvtoIt7yWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/c6e217-03ff-4396-adfe-255f0c51bbe0/1/BDaS8qHRvHb_f50pCRvtoIt7yWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BDaS8qHRvHb_f50pCRvtoIt7yWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:1c:44:d6:0f:58:3b:74:4f:31:78:8e:f9:fb:5f:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=043692f2a1d1bc76ff7f9d29091beda08b7bc96c
Validity
Not Before: Aug 6 02:01:01 2025 GMT
Not After : Aug 7 02:01:01 2025 GMT
Subject: CN=72d2fc024692fba1b2828cd6fe4352c53590c2f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ed:95:89:d6:13:56:6f:1b:1f:f1:4f:5f:80:
9f:99:9c:29:a9:e9:46:db:fc:6a:a4:3c:ba:e8:06:
a6:33:3a:fb:80:ff:1c:66:85:f0:ff:39:ca:80:0e:
be:da:3d:34:0e:78:ba:fb:95:83:b7:9e:4b:ca:d5:
c2:9c:e1:13:86:97:8a:18:e0:d0:cf:b6:bb:73:22:
84:5a:5a:a2:8e:6f:df:18:92:ef:44:8d:1a:a5:fb:
22:65:52:44:cd:c4:e5:9c:49:ae:0f:e3:b1:3d:c6:
2e:1e:e6:04:8a:20:e5:87:23:96:53:aa:48:b5:03:
b8:1a:40:d6:a9:05:32:b0:ff:06:79:b5:38:f3:2e:
ee:4e:5f:d9:17:08:1f:58:45:c4:55:ad:36:d7:2d:
e3:0b:45:d2:99:97:ca:32:f8:97:b9:9a:32:fd:16:
55:0b:3a:94:61:e0:e3:1c:08:42:83:bc:43:78:e7:
11:0b:46:99:c8:43:39:d0:95:6d:d1:05:a4:68:57:
2e:00:15:da:57:8c:dd:c0:8c:77:b4:32:17:d0:da:
89:b5:1b:83:30:d5:3d:61:88:83:8f:99:cd:20:c3:
5a:ca:01:a7:66:93:03:69:f0:48:f7:89:88:32:ef:
24:2e:52:a2:6e:f0:b4:88:f2:34:e9:a9:45:d0:39:
55:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:D2:FC:02:46:92:FB:A1:B2:82:8C:D6:FE:43:52:C5:35:90:C2:F4
X509v3 Authority Key Identifier:
keyid:04:36:92:F2:A1:D1:BC:76:FF:7F:9D:29:09:1B:ED:A0:8B:7B:C9:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BDaS8qHRvHb_f50pCRvtoIt7yWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c6e217-03ff-4396-adfe-255f0c51bbe0/1/BDaS8qHRvHb_f50pCRvtoIt7yWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c6e217-03ff-4396-adfe-255f0c51bbe0/1/BDaS8qHRvHb_f50pCRvtoIt7yWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:43:44:cd:1b:98:50:3f:63:b5:5d:b2:c4:cf:f1:ba:1e:5b:
b2:bf:de:53:11:44:15:c0:8e:76:00:e9:22:78:0b:c7:cd:48:
c9:81:b8:c6:b0:c4:7f:0b:eb:9b:76:a8:ba:15:37:3a:14:f2:
4e:33:86:97:d0:73:cb:c6:06:20:f2:b7:60:7f:17:eb:58:b1:
36:b8:02:db:c4:99:47:2d:db:3c:45:dc:b2:5b:11:9f:00:02:
87:b7:2e:a2:40:b0:df:c5:b9:f6:a5:0d:05:f2:48:57:9f:bf:
0e:7f:82:7c:8b:63:02:d8:e0:f6:e2:66:b4:2f:94:8b:5c:34:
47:6b:0b:9a:b4:cf:3f:51:36:2b:31:a2:0a:34:cd:4c:cc:10:
21:20:e9:39:5c:89:7a:e7:0c:68:f8:4e:fe:27:d1:53:9a:33:
6a:f7:9f:e6:1f:e8:99:45:ec:11:a3:83:67:a5:c5:67:fe:2c:
2c:02:a7:7f:f9:07:a7:67:41:e2:48:8d:19:3d:29:02:9f:be:
fc:cb:35:71:89:32:55:97:ae:11:73:fd:26:9d:77:ba:2d:f6:
08:5c:bd:10:8c:06:6b:95:64:e7:6a:9a:27:89:68:b5:34:14:
6f:b9:fa:65:1c:68:d0:b5:5e:00:75:67:47:32:49:47:77:24:
48:8f:41:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 07:48:14 2025 by rpki-client