Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/12e679-856c-48ea-a062-959ebb905b3a/1/bBKrcGPIXf4i-nqZ2cb85eYWEDE.mft
File: bBKrcGPIXf4i-nqZ2cb85eYWEDE.mft (raw, json)
Hash identifier: tMNOmSKMeMZiOM5xnHHuWfsA9CUxbpEItxpCOOVYgfs=
Subject key identifier: 2D:79:F9:56:DF:26:FC:A0:11:06:F9:69:A7:D2:D2:ED:29:7E:92:76
Authority key identifier: 6C:12:AB:70:63:C8:5D:FE:22:FA:7A:99:D9:C6:FC:E5:E6:16:10:31
Certificate issuer: /CN=6c12ab7063c85dfe22fa7a99d9c6fce5e6161031
Certificate serial: 019873E2873EFCEB7C68C7667D4B11DAE7C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bBKrcGPIXf4i-nqZ2cb85eYWEDE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/12e679-856c-48ea-a062-959ebb905b3a/1/bBKrcGPIXf4i-nqZ2cb85eYWEDE.mft
Manifest number: 1617
Signing time: Mon 04 Aug 2025 07:01:21 +0000
Manifest this update: Mon 04 Aug 2025 07:01:21 +0000
Manifest next update: Tue 05 Aug 2025 07:01:21 +0000
Files and hashes: 1: 4ZrViR6MQ2LLwx-EpgYcmNOkhLU.roa (hash: CcPs0/7vgqCna/xx+mVGMJUsG3faAZo8Ob5SJoRyZWw=)
2: bBKrcGPIXf4i-nqZ2cb85eYWEDE.crl (hash: UrmMS54I8CPWLPiQ6jJlhaOhyHoKKeIKVS4Krgcwc0I=)
3: rUMFzM_6Km-2DqJ2YTtdSrWtUek.roa (hash: abXfjUUyhIhLutP9c/7/Y4Znd/9ps5Twdqn7uTEich0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/12e679-856c-48ea-a062-959ebb905b3a/1/bBKrcGPIXf4i-nqZ2cb85eYWEDE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/12e679-856c-48ea-a062-959ebb905b3a/1/bBKrcGPIXf4i-nqZ2cb85eYWEDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/bBKrcGPIXf4i-nqZ2cb85eYWEDE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 07:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:87:3e:fc:eb:7c:68:c7:66:7d:4b:11:da:e7:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c12ab7063c85dfe22fa7a99d9c6fce5e6161031
Validity
Not Before: Aug 4 07:01:21 2025 GMT
Not After : Aug 5 07:01:21 2025 GMT
Subject: CN=2d79f956df26fca01106f969a7d2d2ed297e9276
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:10:d0:03:e4:4f:d7:3c:e8:6a:35:e4:80:5c:
23:97:4d:35:e5:27:cc:65:e3:c3:49:4e:0f:18:53:
7a:ef:36:28:12:e5:cd:cb:33:ca:d4:2c:b9:ba:e1:
6e:58:52:bc:50:c3:a7:44:80:1f:a1:bc:12:9a:82:
0b:d0:4c:50:11:aa:07:2e:91:c2:39:d0:25:fb:e7:
f6:70:4a:78:ca:23:91:cf:29:11:b8:f7:d8:a2:11:
f4:a3:a0:50:79:87:bf:cc:04:2d:95:65:b7:42:cf:
9e:2b:2c:b4:22:08:19:09:50:8a:a7:23:55:ac:26:
ac:ed:0e:1b:d4:ca:ee:44:4c:4e:d9:1d:a0:0c:97:
90:21:4f:d8:84:0e:bb:38:48:19:35:de:90:39:c9:
de:8d:7c:4e:dd:32:b7:99:b1:65:8a:f3:03:e1:54:
85:23:10:f1:b9:12:ce:ac:08:d8:ce:05:cd:b7:64:
08:da:bb:79:af:a6:84:76:17:ad:8d:1a:74:ad:41:
4a:47:32:a4:87:1e:72:1c:43:f8:27:e8:9a:c6:3d:
b7:81:cb:b7:04:b1:7e:11:64:7d:5a:dc:b0:41:c0:
df:ee:b2:5c:22:b9:67:7e:7a:55:e6:bb:96:0a:2f:
b5:fa:6c:85:19:75:f0:77:7b:89:13:57:68:f8:47:
7d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:79:F9:56:DF:26:FC:A0:11:06:F9:69:A7:D2:D2:ED:29:7E:92:76
X509v3 Authority Key Identifier:
keyid:6C:12:AB:70:63:C8:5D:FE:22:FA:7A:99:D9:C6:FC:E5:E6:16:10:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bBKrcGPIXf4i-nqZ2cb85eYWEDE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/12e679-856c-48ea-a062-959ebb905b3a/1/bBKrcGPIXf4i-nqZ2cb85eYWEDE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/12e679-856c-48ea-a062-959ebb905b3a/1/bBKrcGPIXf4i-nqZ2cb85eYWEDE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:c6:8e:f2:b2:ad:b5:1e:94:cf:27:01:23:fe:79:19:f0:57:
5f:29:ee:b5:fe:8b:38:33:aa:20:a2:da:97:df:77:82:f1:8b:
5e:31:c5:36:30:b3:e9:d7:ae:15:ab:a7:46:3e:f6:58:d3:91:
2d:5f:e1:29:54:73:fe:e1:57:68:e6:24:34:cb:cb:0a:0c:39:
df:42:83:7f:6e:a3:0a:3d:45:03:27:51:e0:a8:e5:c9:86:14:
74:46:0d:45:bb:90:c4:85:c8:39:0f:10:95:c2:8f:12:13:15:
f3:45:21:98:58:f5:6f:50:09:e4:3c:9e:2b:fa:71:c7:aa:80:
a0:36:46:54:46:a7:4d:52:a8:cf:13:d7:7d:8d:24:b4:bd:16:
a4:df:46:b2:76:07:10:1d:98:0a:79:80:c7:ab:a7:89:89:48:
80:0a:b3:3c:04:e0:ba:37:f6:a6:a7:62:c2:93:12:93:84:ed:
f8:9f:8d:44:b3:c3:4b:9e:a9:f8:2f:6f:d7:89:ad:a5:dd:4e:
2a:85:b6:f7:ee:24:18:e1:b4:bb:44:d0:5b:04:81:e4:be:b5:
59:89:5d:52:ac:47:85:0e:26:cc:b8:0b:9c:0f:47:ae:da:1c:
a2:c4:5a:08:1b:a5:ff:b1:0e:89:84:6a:61:2f:7f:df:66:36:
02:d9:00:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:58:12 2025 by rpki-client