Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/9db87f-a31a-4b4d-8624-280f5a4b5e03/1/bLyEAvCSNDucA9OGBpco-Jg-YAg.mft
File: bLyEAvCSNDucA9OGBpco-Jg-YAg.mft (raw, json)
Hash identifier: pXFAR5eUsMEgpQZzwVYUqo6NqogsRKOjMzZwLNuTp3Q=
Subject key identifier: 0A:E4:93:CA:55:F5:A9:24:4C:3D:BE:8C:34:A9:51:B1:D2:5A:64:9D
Authority key identifier: 6C:BC:84:02:F0:92:34:3B:9C:03:D3:86:06:97:28:F8:98:3E:60:08
Certificate issuer: /CN=6cbc8402f092343b9c03d386069728f8983e6008
Certificate serial: 01987C099AAAB16852279700CDB33E5F2DD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bLyEAvCSNDucA9OGBpco-Jg-YAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/9db87f-a31a-4b4d-8624-280f5a4b5e03/1/bLyEAvCSNDucA9OGBpco-Jg-YAg.mft
Manifest number: 0E84
Signing time: Tue 05 Aug 2025 21:01:00 +0000
Manifest this update: Tue 05 Aug 2025 21:01:00 +0000
Manifest next update: Wed 06 Aug 2025 21:01:00 +0000
Files and hashes: 1: bLyEAvCSNDucA9OGBpco-Jg-YAg.crl (hash: dp0Qq/HnETCnJbjqiq+PZIZF8j15HCioEIfoFg++zCU=)
2: cdM459bUqR9CDHxK6hkgW3z_lyI.roa (hash: yGuDalXNxH1KMB1e5SARV7XMjke+R1A0tgbxBSQwq0g=)
3: gDWc6H7uj9ibkrZP4t2rHY2dAjc.roa (hash: kA5V7O8+i9I2snnuaBTFlKTpJopDxBn7UIT61zUY590=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/9db87f-a31a-4b4d-8624-280f5a4b5e03/1/bLyEAvCSNDucA9OGBpco-Jg-YAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/9db87f-a31a-4b4d-8624-280f5a4b5e03/1/bLyEAvCSNDucA9OGBpco-Jg-YAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/bLyEAvCSNDucA9OGBpco-Jg-YAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 21:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:09:9a:aa:b1:68:52:27:97:00:cd:b3:3e:5f:2d:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cbc8402f092343b9c03d386069728f8983e6008
Validity
Not Before: Aug 5 21:01:00 2025 GMT
Not After : Aug 6 21:01:00 2025 GMT
Subject: CN=0ae493ca55f5a9244c3dbe8c34a951b1d25a649d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:23:40:bf:6d:85:0c:23:e5:c2:50:a7:95:36:
f4:fc:4d:fc:ff:52:b9:20:9f:d1:51:dc:34:fd:4c:
d2:d3:a4:fc:f2:d2:7d:35:3b:c4:15:69:39:68:89:
bf:d9:1d:ae:56:ae:9e:4c:e5:63:cd:24:b7:65:cd:
7a:13:04:c6:8d:f0:4d:43:2b:7d:bb:6f:89:ec:bc:
8b:d4:11:d7:b4:e0:1c:51:71:cb:e8:c3:9f:07:c2:
ec:e9:dd:82:7b:9d:b4:90:a4:ea:e7:bd:83:73:a4:
fa:37:7a:69:44:c4:48:c5:7e:55:ae:9a:d9:bc:92:
00:06:57:96:92:45:36:72:48:6a:cd:99:a8:2e:7e:
97:1e:93:59:5b:2b:5f:20:ca:7b:af:97:ea:14:d9:
c1:6b:ba:ec:8f:61:b6:53:0e:30:1f:ac:e2:b1:8f:
3b:66:de:f2:59:a3:fc:e0:66:c5:96:38:51:d0:81:
78:56:49:55:45:e8:e5:5e:19:1c:d8:4f:a8:69:49:
01:d8:64:27:2b:98:06:5c:b1:0d:2f:18:ed:81:18:
36:58:be:90:62:e0:da:5a:81:22:76:dd:12:6f:5e:
7b:d4:44:b2:8d:d7:40:ea:11:9b:fa:c2:fe:dd:c0:
20:99:3b:fc:a6:0a:74:2b:d7:9c:20:54:b3:60:c4:
32:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:E4:93:CA:55:F5:A9:24:4C:3D:BE:8C:34:A9:51:B1:D2:5A:64:9D
X509v3 Authority Key Identifier:
keyid:6C:BC:84:02:F0:92:34:3B:9C:03:D3:86:06:97:28:F8:98:3E:60:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bLyEAvCSNDucA9OGBpco-Jg-YAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/9db87f-a31a-4b4d-8624-280f5a4b5e03/1/bLyEAvCSNDucA9OGBpco-Jg-YAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/9db87f-a31a-4b4d-8624-280f5a4b5e03/1/bLyEAvCSNDucA9OGBpco-Jg-YAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
db:71:0c:0f:35:17:e0:35:83:f5:12:45:c5:95:8d:43:58:13:
fd:c6:48:04:60:de:1d:76:22:22:28:75:c8:99:f1:04:4a:fc:
af:fb:b4:40:e1:a6:55:e9:8e:f5:6e:7f:78:33:0a:49:a0:6c:
bf:1a:45:ce:a6:91:bc:d3:3b:da:63:35:09:0c:77:c1:26:e5:
34:23:2e:70:6b:48:fb:7f:fd:cb:c9:12:ea:ad:f6:68:9f:50:
86:64:92:71:2e:b6:09:1a:e0:f8:5d:e0:60:c0:3c:0e:5d:db:
2e:14:2b:a0:ea:e6:f6:7e:66:e0:81:e6:b6:f1:0d:2d:e2:b1:
48:a1:8a:cd:77:26:60:5b:5b:eb:6a:3c:49:a2:29:21:66:bd:
ab:b6:b7:22:f8:d2:7a:4f:17:d3:62:dd:67:29:13:8d:82:97:
8c:79:1b:ea:69:35:bf:d9:9c:e7:e3:9f:ca:18:f9:f3:ad:21:
68:42:b9:ac:3e:11:7f:dd:ef:5e:af:02:2e:e5:70:84:6a:e7:
b2:39:6a:3a:b2:94:33:48:53:c0:f2:d1:ab:09:34:cb:c0:3f:
0b:02:4f:89:d7:7c:c9:e2:74:56:bb:b3:c6:c5:92:13:ac:ff:
76:83:d7:aa:00:7a:a5:af:e7:23:4b:68:52:22:d6:65:5f:c4:
91:91:ea:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 05:52:38 2025 by rpki-client