Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/dd7764-1a58-45e6-ad83-32a60912ef40/1/bG3bcucmgpjBcUWDExu-SuTvCRY.mft
File: bG3bcucmgpjBcUWDExu-SuTvCRY.mft (raw, json)
Hash identifier: A8D07wS0fukLuTQJu1E42g0aRd+xLtzTg8v5uesOMig=
Subject key identifier: 56:44:B1:2D:C1:22:EC:25:F0:5F:9F:4A:65:CC:26:D4:8F:90:1F:F6
Authority key identifier: 6C:6D:DB:72:E7:26:82:98:C1:71:45:83:13:1B:BE:4A:E4:EF:09:16
Certificate issuer: /CN=6c6ddb72e7268298c1714583131bbe4ae4ef0916
Certificate serial: 019881D50D4E52ED954D097471E86E4781EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bG3bcucmgpjBcUWDExu-SuTvCRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/dd7764-1a58-45e6-ad83-32a60912ef40/1/bG3bcucmgpjBcUWDExu-SuTvCRY.mft
Manifest number: 0A82
Signing time: Thu 07 Aug 2025 00:01:19 +0000
Manifest this update: Thu 07 Aug 2025 00:01:19 +0000
Manifest next update: Fri 08 Aug 2025 00:01:19 +0000
Files and hashes: 1: 29nd_dOa0jOSjO-BSVNW7WFQmeU.roa (hash: PQzBa+M3c2965MBEIUlCwMA/PPxb1gOFyUG0cf3P01E=)
2: bG3bcucmgpjBcUWDExu-SuTvCRY.crl (hash: aMwaTEcl4aT16s9tJlaFm1NxdbvS91O2FwGHsjm8IAY=)
3: zSoruqrv0RMRlvtEdSofVrHKUNM.roa (hash: zchVE5WsD0we5YnngEjVpAF61yVGUwwg3Aq8gS0jfiI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/dd7764-1a58-45e6-ad83-32a60912ef40/1/bG3bcucmgpjBcUWDExu-SuTvCRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/dd7764-1a58-45e6-ad83-32a60912ef40/1/bG3bcucmgpjBcUWDExu-SuTvCRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bG3bcucmgpjBcUWDExu-SuTvCRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:d5:0d:4e:52:ed:95:4d:09:74:71:e8:6e:47:81:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c6ddb72e7268298c1714583131bbe4ae4ef0916
Validity
Not Before: Aug 7 00:01:19 2025 GMT
Not After : Aug 8 00:01:19 2025 GMT
Subject: CN=5644b12dc122ec25f05f9f4a65cc26d48f901ff6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d7:d5:6c:a2:fc:3d:8a:4f:bd:30:9b:85:bf:
ef:84:6a:b0:ed:2f:0c:ea:72:d1:a6:86:5d:f4:4e:
1c:de:07:92:0e:2c:99:7d:36:f7:91:f9:45:c5:fe:
e0:51:77:9d:1c:23:07:7c:1f:8b:10:ea:fc:b7:38:
1f:71:79:23:bc:64:5e:3d:b7:8d:9a:c6:16:c6:b8:
04:9e:d2:24:fe:e5:1e:ac:3d:b5:5b:25:13:f6:ca:
2d:c9:5d:b0:61:75:0a:ae:92:62:5e:54:3c:96:20:
27:f9:3a:68:0b:84:1e:ba:82:79:93:33:e0:52:1f:
65:1e:0b:f6:86:38:16:c4:07:fd:dc:4f:e7:33:78:
20:34:bf:65:55:31:33:49:57:a4:7a:e2:4d:dc:9d:
36:cc:c3:15:b8:ad:31:8e:b7:b9:59:70:2d:90:aa:
63:ca:d4:49:15:5b:0e:1a:8e:9e:8e:82:24:1a:f1:
e6:80:8b:7c:92:1c:19:74:2c:94:e5:26:9d:ec:2d:
7f:52:2a:56:d2:6e:04:a9:3c:38:97:ca:d5:cd:a4:
00:bb:dd:49:3c:d6:5e:5c:45:e6:11:a1:3a:29:42:
61:67:01:b4:56:1d:e8:17:ad:81:01:d4:bb:ad:77:
7f:6c:0a:84:de:bd:f0:9f:2b:52:ce:f8:c0:b7:a4:
fd:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:44:B1:2D:C1:22:EC:25:F0:5F:9F:4A:65:CC:26:D4:8F:90:1F:F6
X509v3 Authority Key Identifier:
keyid:6C:6D:DB:72:E7:26:82:98:C1:71:45:83:13:1B:BE:4A:E4:EF:09:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bG3bcucmgpjBcUWDExu-SuTvCRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/dd7764-1a58-45e6-ad83-32a60912ef40/1/bG3bcucmgpjBcUWDExu-SuTvCRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/dd7764-1a58-45e6-ad83-32a60912ef40/1/bG3bcucmgpjBcUWDExu-SuTvCRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:09:2d:aa:cb:09:20:8b:ae:c4:53:63:3d:45:56:63:5a:ad:
3b:7d:27:dc:f1:c4:5f:69:12:17:96:38:77:de:e9:77:71:1a:
fd:3d:78:ef:97:21:bc:f9:30:ef:5a:ba:98:f3:ab:d6:87:d1:
8b:8d:ac:04:aa:e8:e5:4f:4b:82:39:04:48:ba:03:18:17:17:
94:ee:17:c5:06:ee:d7:18:6b:7f:c3:03:7f:92:dd:f8:d0:16:
0d:6e:c6:c7:45:6d:8c:1e:f2:20:75:dc:5a:aa:3f:13:8f:5f:
69:cf:94:9e:e0:5e:ee:5e:f9:91:e3:c7:d5:f3:2c:60:b2:66:
6f:7c:72:88:48:59:4f:96:54:cc:70:ac:d2:96:b1:d8:0f:1d:
a1:67:93:2c:31:ae:5a:d1:d5:be:36:19:00:6a:fa:b4:73:a2:
32:2f:33:e1:b2:99:7d:89:7c:c0:c7:fb:43:07:a9:c0:60:51:
89:93:ba:bf:bd:09:2c:da:df:87:32:ed:19:c3:6a:58:ec:bc:
f4:e9:a0:1e:7f:47:27:7a:d9:58:2e:5c:f7:41:1c:f7:89:38:
b6:3f:57:39:ab:ea:a6:23:f1:5e:a7:01:35:c2:96:c7:7f:35:
7d:bd:5a:ad:b2:23:58:d2:3b:07:c8:66:10:03:78:b8:dc:5a:
1b:11:0f:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:26:05 2025 by rpki-client