Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/7f997c-07cf-44c2-bdf0-66a329b6afad/1/bXcB1YUEkfUCme-T8tdAm3jNbJY.mft
File: bXcB1YUEkfUCme-T8tdAm3jNbJY.mft (raw, json)
Hash identifier: OHkli8CtCBi2BAEAWYjhHBkIg535t5g0jFLYtHd7OF8=
Subject key identifier: 26:A0:61:89:EE:DC:3F:C2:49:DD:55:47:C0:9A:04:D8:2D:31:D6:D6
Authority key identifier: 6D:77:01:D5:85:04:91:F5:02:99:EF:93:F2:D7:40:9B:78:CD:6C:96
Certificate issuer: /CN=6d7701d5850491f50299ef93f2d7409b78cd6c96
Certificate serial: 0198892064FA93BCB7FE80A686805062BD31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXcB1YUEkfUCme-T8tdAm3jNbJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/7f997c-07cf-44c2-bdf0-66a329b6afad/1/bXcB1YUEkfUCme-T8tdAm3jNbJY.mft
Manifest number: 148F
Signing time: Fri 08 Aug 2025 10:00:58 +0000
Manifest this update: Fri 08 Aug 2025 10:00:58 +0000
Manifest next update: Sat 09 Aug 2025 10:00:58 +0000
Files and hashes: 1: 2KIRExbLtGmhtukhHSshDYZqZYU.roa (hash: e/XJlDAv9fIgfof/gpzNCtKITxsPIC/gKrF0rJCVeE8=)
2: F_jHPU3_A3NtfG3Ak3x69UFaxVY.roa (hash: VOxoNM7Ut17hlIuVaKSt03PbZmGteVPLxGUSpYz/b7g=)
3: bXcB1YUEkfUCme-T8tdAm3jNbJY.crl (hash: Ag33QH6pQ4BS1N5xaQcm1hSh7BucBoeYtDm9EYA5ZEY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/7f997c-07cf-44c2-bdf0-66a329b6afad/1/bXcB1YUEkfUCme-T8tdAm3jNbJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/7f997c-07cf-44c2-bdf0-66a329b6afad/1/bXcB1YUEkfUCme-T8tdAm3jNbJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bXcB1YUEkfUCme-T8tdAm3jNbJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 10:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:20:64:fa:93:bc:b7:fe:80:a6:86:80:50:62:bd:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d7701d5850491f50299ef93f2d7409b78cd6c96
Validity
Not Before: Aug 8 10:00:58 2025 GMT
Not After : Aug 9 10:00:58 2025 GMT
Subject: CN=26a06189eedc3fc249dd5547c09a04d82d31d6d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:22:68:98:cc:f8:d5:f5:f7:27:0f:67:6f:50:
95:2d:10:2a:2e:5a:92:38:b6:04:16:30:df:de:f2:
ac:18:ed:a6:1c:28:42:d7:2d:5d:1a:61:ae:3c:a4:
7f:99:fd:0f:be:74:87:a5:0a:4f:d3:e4:5e:1e:46:
9b:91:97:1b:5e:0b:2e:93:e2:36:a0:5c:e0:95:7d:
99:c7:75:aa:06:06:9a:cf:18:ff:ad:82:49:e9:df:
4c:43:5c:df:ad:f0:56:19:79:c0:82:d2:d4:06:30:
a3:25:30:cb:e3:f0:cf:98:ff:bc:8d:1b:d5:ea:41:
71:3a:b7:78:60:c7:3a:94:2d:ce:f6:a5:52:87:df:
45:fa:74:12:ee:1f:08:69:30:6a:a1:ac:50:92:cd:
b4:07:85:f4:a8:a6:ac:18:29:75:1e:ad:03:25:fc:
66:e3:a6:25:bd:86:78:16:59:86:86:96:29:ac:f7:
c8:19:e0:af:11:0c:75:39:21:16:2f:2a:83:72:29:
f1:aa:96:6a:2a:fc:2a:58:f3:44:73:56:21:6a:a3:
23:dd:90:ea:72:c9:b5:62:f9:0b:99:07:ca:f5:75:
0a:cc:03:48:19:81:d9:3d:82:02:fb:a9:22:32:4c:
80:e1:95:22:1f:7c:e0:1f:d9:08:d3:14:5b:1f:69:
64:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:A0:61:89:EE:DC:3F:C2:49:DD:55:47:C0:9A:04:D8:2D:31:D6:D6
X509v3 Authority Key Identifier:
keyid:6D:77:01:D5:85:04:91:F5:02:99:EF:93:F2:D7:40:9B:78:CD:6C:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXcB1YUEkfUCme-T8tdAm3jNbJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/7f997c-07cf-44c2-bdf0-66a329b6afad/1/bXcB1YUEkfUCme-T8tdAm3jNbJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/7f997c-07cf-44c2-bdf0-66a329b6afad/1/bXcB1YUEkfUCme-T8tdAm3jNbJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:2d:40:ef:3c:61:62:5f:53:e2:82:b7:75:ed:0a:6d:39:94:
4f:d3:a8:f1:96:13:52:2f:73:a7:1a:e9:a0:84:50:8e:83:6f:
e8:f5:21:81:d2:76:b6:ae:af:69:59:aa:f3:a4:8c:e1:34:f8:
df:2c:6f:2d:18:13:05:ac:a2:96:2c:d0:9d:50:f9:69:e1:68:
90:26:a4:62:aa:c3:09:b9:5a:4d:a2:f7:61:f0:08:e4:da:2d:
a2:fb:71:31:9f:bc:d5:d9:5c:b7:ca:21:87:3f:dc:69:16:7c:
42:06:4a:a4:b6:6f:d1:91:7d:bd:e8:c3:e1:e2:c2:a5:76:ea:
a8:86:eb:f4:df:2f:d4:61:f8:8e:85:9a:0a:d3:92:8e:8a:5a:
ef:74:7d:c6:51:4f:22:4f:25:c2:8e:94:61:99:01:d3:db:2b:
e6:f2:c3:30:26:92:cc:b9:84:8e:9f:50:c8:cc:20:cd:56:dc:
56:cf:5c:d0:36:35:97:df:b7:7f:98:6c:bc:02:d1:19:81:51:
9b:b0:9b:3c:f4:e3:da:ad:0a:6f:02:eb:ae:77:ac:71:94:d9:
9a:6c:55:a6:95:00:1f:30:22:75:0e:12:2e:03:9c:47:1b:53:
bb:b6:be:56:41:ba:b0:fc:26:ec:68:ed:77:0d:45:83:6b:a4:
cb:c0:30:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 8 13:03:14 2025 by rpki-client