Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/f6fdc3-9cfc-47fd-bba8-79cbf395d726/1/b1dizVOgPjIkIEagGo4cyslGtt0.mft
File: b1dizVOgPjIkIEagGo4cyslGtt0.mft (raw, json)
Hash identifier: h99OP9uPJCNoDxwKtpz3FjYveZNt9REOWz0qV31OH5U=
Subject key identifier: B2:5B:5C:52:68:D6:D4:F1:07:5F:6E:CE:8C:DB:33:7E:8E:0A:8B:18
Authority key identifier: 6F:57:62:CD:53:A0:3E:32:24:20:46:A0:1A:8E:1C:CA:C9:46:B6:DD
Certificate issuer: /CN=6f5762cd53a03e32242046a01a8e1ccac946b6dd
Certificate serial: 01987BD282703045C0A35187C8354B812D3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b1dizVOgPjIkIEagGo4cyslGtt0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/f6fdc3-9cfc-47fd-bba8-79cbf395d726/1/b1dizVOgPjIkIEagGo4cyslGtt0.mft
Manifest number: 161A
Signing time: Tue 05 Aug 2025 20:00:50 +0000
Manifest this update: Tue 05 Aug 2025 20:00:50 +0000
Manifest next update: Wed 06 Aug 2025 20:00:50 +0000
Files and hashes: 1: 6BpgCrxCXZbdJqbyAxHujz06qK4.roa (hash: f/x5QoRJQO0akFB/+sOaWahUSMLdwrmuI7CYvjTppDI=)
2: b1dizVOgPjIkIEagGo4cyslGtt0.crl (hash: nhsS+2Wx35LHtRNS8iHPiFP8SIXz3XACYpTlWdb+gbQ=)
3: gLGnZHyxZ4IIbPZ5Ki6wiGCKWc0.roa (hash: 0298GG5PDrm0T8wMd30AmNaheumCEMviVlo74f76BNw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/f6fdc3-9cfc-47fd-bba8-79cbf395d726/1/b1dizVOgPjIkIEagGo4cyslGtt0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/f6fdc3-9cfc-47fd-bba8-79cbf395d726/1/b1dizVOgPjIkIEagGo4cyslGtt0.mft
rsync://rpki.ripe.net/repository/DEFAULT/b1dizVOgPjIkIEagGo4cyslGtt0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 14:37:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7b:d2:82:70:30:45:c0:a3:51:87:c8:35:4b:81:2d:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f5762cd53a03e32242046a01a8e1ccac946b6dd
Validity
Not Before: Aug 5 20:00:50 2025 GMT
Not After : Aug 6 20:00:50 2025 GMT
Subject: CN=b25b5c5268d6d4f1075f6ece8cdb337e8e0a8b18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:57:cc:ff:38:fd:ac:4e:8f:47:12:11:20:9b:
53:85:40:0a:39:aa:14:42:3a:da:10:c0:77:02:24:
9c:48:aa:94:a7:d2:f7:29:85:d9:87:cd:95:75:c4:
e6:50:0d:ad:41:e7:29:d9:8c:78:0e:2f:01:0d:50:
29:5a:46:68:42:94:07:9a:f7:9e:f1:5f:b3:aa:27:
c8:7c:ae:2d:5c:7e:5f:de:ea:3a:39:43:b5:6b:1f:
92:24:29:da:98:d0:e9:da:35:76:9a:71:8f:9f:1d:
67:82:2a:2d:ec:85:aa:f4:02:5a:32:95:f0:c3:fd:
be:bd:67:91:4d:d1:eb:a9:5e:5a:6d:4c:81:0d:c1:
4d:93:28:e8:8e:42:61:36:1c:20:2c:1a:64:29:07:
d2:30:4d:1d:64:93:ec:29:f2:2f:fa:c0:a6:f3:e4:
e3:cb:c0:a8:43:6f:1e:1e:ee:7d:48:ee:db:f4:86:
b7:2e:54:c5:e9:54:0d:3a:db:5a:05:36:04:95:3c:
50:f9:2a:0d:f9:6b:44:0e:cd:d3:f1:25:06:55:b6:
ac:a8:7b:bd:6a:57:a6:71:76:82:5a:fe:26:83:f2:
4d:1c:fc:5a:f5:c7:e1:d2:68:bf:82:24:25:cf:b9:
06:c3:08:a1:8a:c8:14:07:bc:3f:46:5c:ec:3e:10:
51:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:5B:5C:52:68:D6:D4:F1:07:5F:6E:CE:8C:DB:33:7E:8E:0A:8B:18
X509v3 Authority Key Identifier:
keyid:6F:57:62:CD:53:A0:3E:32:24:20:46:A0:1A:8E:1C:CA:C9:46:B6:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1dizVOgPjIkIEagGo4cyslGtt0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f6fdc3-9cfc-47fd-bba8-79cbf395d726/1/b1dizVOgPjIkIEagGo4cyslGtt0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f6fdc3-9cfc-47fd-bba8-79cbf395d726/1/b1dizVOgPjIkIEagGo4cyslGtt0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:11:ed:e0:c5:b5:96:d5:25:05:6f:1b:56:e7:2a:b9:00:28:
1f:c3:bc:c9:d3:11:33:08:07:7a:d4:f0:1e:4f:d4:71:62:ba:
d7:f5:4c:8f:5d:d2:09:95:33:aa:39:47:c6:a0:cf:3e:2a:8c:
a3:4f:78:a5:2b:7e:2f:b8:64:4f:d7:67:61:98:e4:4f:28:59:
fe:fc:be:a5:43:00:f8:b0:77:11:48:c6:14:59:f4:4a:93:65:
38:72:28:c2:aa:7f:3f:6b:99:a9:9f:94:e8:2b:43:e4:f5:70:
3f:11:39:7a:8a:08:0b:54:52:9d:30:09:ba:c4:33:8c:27:90:
fd:f0:22:8e:c3:c9:bd:aa:f0:89:fd:1d:ed:26:cb:5d:1f:27:
e3:58:86:0d:b8:da:10:b7:67:96:1d:ca:35:1d:e8:de:bc:71:
04:4e:57:f8:ac:57:9e:8a:d8:8c:30:30:26:34:02:49:26:a5:
62:94:2d:98:ac:4b:eb:b1:06:80:39:9b:c9:ca:2d:34:b6:dc:
a3:84:d5:1f:43:df:57:3d:fd:01:9a:5e:da:12:cf:1b:ec:4a:
c3:9c:79:89:3b:87:e5:00:c8:56:66:d3:90:cf:9b:88:a9:bc:
e9:5f:5d:1e:08:28:72:e2:31:19:ae:58:49:be:b8:37:0b:aa:
5b:26:4e:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 23:06:12 2025 by rpki-client