Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/d983cd-3f8e-4d6e-a38c-4d8d62b18e89/1/bFMRpXzPy1E1Jh_zm9GaEV7z588.mft
File: bFMRpXzPy1E1Jh_zm9GaEV7z588.mft (raw, json)
Hash identifier: 2I+mtNh5RBBch+ixAqT7dJGskAfuKIzYAO6zJGUAf8U=
Subject key identifier: 91:5C:52:A4:4C:45:F7:3B:81:7B:FC:EA:20:72:7A:A7:52:28:A8:57
Authority key identifier: 6C:53:11:A5:7C:CF:CB:51:35:26:1F:F3:9B:D1:9A:11:5E:F3:E7:CF
Certificate issuer: /CN=6c5311a57ccfcb5135261ff39bd19a115ef3e7cf
Certificate serial: 019872989AD168CDADB11F7556274411F973
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bFMRpXzPy1E1Jh_zm9GaEV7z588.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/d983cd-3f8e-4d6e-a38c-4d8d62b18e89/1/bFMRpXzPy1E1Jh_zm9GaEV7z588.mft
Manifest number: 1618
Signing time: Mon 04 Aug 2025 01:01:00 +0000
Manifest this update: Mon 04 Aug 2025 01:01:00 +0000
Manifest next update: Tue 05 Aug 2025 01:01:00 +0000
Files and hashes: 1: YJycfGdeJ164QrjQ89Pquxal_pc.roa (hash: fDEXe9y2Vppryd4ojiqVG2aN2es1Vh/q/2xftzkXWbQ=)
2: bFMRpXzPy1E1Jh_zm9GaEV7z588.crl (hash: WnVt8Q42Ravky60WCzBKYr93MqX/KREthngBunPckD4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/d983cd-3f8e-4d6e-a38c-4d8d62b18e89/1/bFMRpXzPy1E1Jh_zm9GaEV7z588.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/d983cd-3f8e-4d6e-a38c-4d8d62b18e89/1/bFMRpXzPy1E1Jh_zm9GaEV7z588.mft
rsync://rpki.ripe.net/repository/DEFAULT/bFMRpXzPy1E1Jh_zm9GaEV7z588.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 01:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:72:98:9a:d1:68:cd:ad:b1:1f:75:56:27:44:11:f9:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c5311a57ccfcb5135261ff39bd19a115ef3e7cf
Validity
Not Before: Aug 4 01:01:00 2025 GMT
Not After : Aug 5 01:01:00 2025 GMT
Subject: CN=915c52a44c45f73b817bfcea20727aa75228a857
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:23:5f:f0:8e:95:58:2f:b7:a3:40:12:8d:f1:
f1:c4:5f:95:03:77:66:2f:16:ce:2a:7e:78:02:ed:
ba:6c:e5:ed:ff:bd:f1:8d:ed:d3:a0:1b:04:30:16:
b3:cc:d9:88:c1:ce:fd:69:98:7a:60:c7:72:9d:ef:
8c:60:65:0f:4c:46:bc:ae:c3:2a:b6:cf:91:26:de:
07:91:6c:47:ef:92:0b:19:ec:83:a1:e9:15:a9:70:
11:7a:96:b4:42:f8:62:a2:48:20:f5:19:1c:9e:3d:
55:b7:fb:2f:fc:bf:73:b9:72:ae:9c:58:0d:79:04:
c3:43:b3:6f:8a:a6:e2:ec:2b:b0:fa:37:1b:e0:83:
f6:99:e1:f7:36:b3:74:fd:80:c7:c6:f1:84:4e:78:
7f:6e:22:e0:2d:3d:72:0f:bd:33:a4:69:58:c3:43:
b1:5d:07:57:72:40:41:a5:07:42:24:43:d6:6c:70:
be:f2:76:9f:e1:96:d6:7f:9b:29:2d:ce:c7:80:a8:
48:56:9f:3e:86:bf:28:93:83:0b:5a:02:7f:90:41:
e8:98:48:d7:42:e6:4d:9f:a8:32:49:ea:1f:c7:5f:
fc:cf:2b:a5:86:5c:83:02:ba:f1:64:8b:3b:19:3b:
e1:38:44:8c:73:25:17:36:69:0e:e4:39:e8:4a:78:
ef:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:5C:52:A4:4C:45:F7:3B:81:7B:FC:EA:20:72:7A:A7:52:28:A8:57
X509v3 Authority Key Identifier:
keyid:6C:53:11:A5:7C:CF:CB:51:35:26:1F:F3:9B:D1:9A:11:5E:F3:E7:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bFMRpXzPy1E1Jh_zm9GaEV7z588.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/d983cd-3f8e-4d6e-a38c-4d8d62b18e89/1/bFMRpXzPy1E1Jh_zm9GaEV7z588.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/d983cd-3f8e-4d6e-a38c-4d8d62b18e89/1/bFMRpXzPy1E1Jh_zm9GaEV7z588.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:bb:fb:85:e7:a4:f7:32:93:0d:5b:9e:17:5b:e5:14:45:77:
5b:98:2b:7f:29:48:50:ab:90:2b:87:d8:40:56:9f:14:94:cd:
df:ec:6b:73:2c:96:cd:b1:2c:a4:93:96:7f:22:34:d6:cf:e6:
a0:a5:f5:d7:58:cd:42:eb:9b:da:c7:c3:1e:af:30:95:17:76:
fc:24:99:c1:55:99:a5:02:77:d2:55:28:87:61:87:7b:5e:f2:
9a:10:28:0e:f6:ad:8e:c4:3f:a2:5a:10:bb:4a:06:78:82:e8:
bc:89:88:1a:9b:94:d6:8c:33:5a:7b:91:5d:8e:4e:2f:c5:f7:
89:8a:7b:f6:91:40:1c:ad:57:47:84:fc:b6:c6:ca:ec:e7:7a:
b6:13:37:f8:64:c2:aa:74:95:b8:55:43:47:86:6c:58:86:d0:
8f:2c:47:20:b0:9e:c1:68:0d:46:19:81:b4:e8:e1:71:ba:63:
f9:26:38:92:4b:5d:9a:e6:c9:81:c2:19:f3:59:dc:e1:0b:91:
02:69:a0:70:d5:b7:a0:99:b8:7b:3c:7d:d3:4d:a3:33:5e:52:
b3:72:a2:84:27:1e:34:d6:7a:ec:ef:5a:52:fa:02:0b:9e:70:
45:c8:14:47:84:bb:cd:fd:fd:8a:a7:2e:3d:48:6c:63:83:c7:
44:25:92:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:26:52 2025 by rpki-client