Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/aecb8a-d763-4642-8036-f400402b536c/1/bfKTIS0l1IY-OGucSA3cm-c4Ek8.mft
File: bfKTIS0l1IY-OGucSA3cm-c4Ek8.mft (raw, json)
Hash identifier: gt3zN332q0CHhKdAgvWnx1AYIh/8x5goZLtLCo03VjA=
Subject key identifier: 6E:0E:80:13:61:AA:E2:FE:AD:18:0C:03:B4:8B:E5:57:B3:11:6B:7C
Authority key identifier: 6D:F2:93:21:2D:25:D4:86:3E:38:6B:9C:48:0D:DC:9B:E7:38:12:4F
Certificate issuer: /CN=6df293212d25d4863e386b9c480ddc9be738124f
Certificate serial: 01988DA20B58DC21595B750F5C9B93021A03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bfKTIS0l1IY-OGucSA3cm-c4Ek8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/aecb8a-d763-4642-8036-f400402b536c/1/bfKTIS0l1IY-OGucSA3cm-c4Ek8.mft
Manifest number: 15B7
Signing time: Sat 09 Aug 2025 07:01:03 +0000
Manifest this update: Sat 09 Aug 2025 07:01:03 +0000
Manifest next update: Sun 10 Aug 2025 07:01:03 +0000
Files and hashes: 1: HoMgEifDpVQ65AHqBFCCx_7uMoE.roa (hash: MZgT/uxhPiKd1q/F+OrFW0KnU1po9n7PWWPZxZXmYvg=)
2: bfKTIS0l1IY-OGucSA3cm-c4Ek8.crl (hash: d03jPIvoMkGOVBEndVKYrg8lb3AwBrbCG5ZdixoYxHU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/aecb8a-d763-4642-8036-f400402b536c/1/bfKTIS0l1IY-OGucSA3cm-c4Ek8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/aecb8a-d763-4642-8036-f400402b536c/1/bfKTIS0l1IY-OGucSA3cm-c4Ek8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bfKTIS0l1IY-OGucSA3cm-c4Ek8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:a2:0b:58:dc:21:59:5b:75:0f:5c:9b:93:02:1a:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6df293212d25d4863e386b9c480ddc9be738124f
Validity
Not Before: Aug 9 07:01:03 2025 GMT
Not After : Aug 10 07:01:03 2025 GMT
Subject: CN=6e0e801361aae2fead180c03b48be557b3116b7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e5:9f:48:5b:cc:4f:a3:8e:3b:13:1e:c5:99:
36:04:96:57:26:43:36:67:51:99:4d:49:a1:1e:87:
a8:4b:e4:88:c9:f9:19:17:be:24:ad:4b:5e:57:4f:
63:2b:2d:75:99:1f:8f:53:7b:c2:43:01:b8:72:e5:
94:11:45:cf:8c:05:c4:ca:af:53:0e:34:8b:46:c3:
3b:eb:f0:d0:90:95:ba:c8:36:da:e2:e6:de:82:51:
05:89:c3:c6:fa:ec:73:41:44:a2:04:a3:39:29:1a:
14:ff:3f:5e:9a:02:cb:98:b2:2d:64:21:f5:6c:23:
52:52:86:37:6f:00:f6:40:d6:7d:15:30:9e:ed:95:
df:79:f4:9f:43:68:10:98:da:43:92:da:ad:b6:3f:
6f:a0:0a:ce:cd:4a:50:8f:e7:5d:fc:b9:16:1d:bf:
7f:75:73:4a:4f:04:b9:ec:6f:7c:81:d8:43:78:a1:
b3:ae:1d:2e:96:fb:09:35:86:1a:52:e3:5a:31:96:
6c:14:1e:15:66:b4:5a:b7:fc:fe:47:62:a7:de:34:
15:06:2a:69:c1:83:30:91:55:f8:4d:76:ba:26:8f:
05:eb:df:20:4f:bb:d4:af:43:55:ce:7b:81:9c:29:
a9:c1:4d:2b:54:ab:68:2b:2c:e4:67:81:06:58:b3:
46:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:0E:80:13:61:AA:E2:FE:AD:18:0C:03:B4:8B:E5:57:B3:11:6B:7C
X509v3 Authority Key Identifier:
keyid:6D:F2:93:21:2D:25:D4:86:3E:38:6B:9C:48:0D:DC:9B:E7:38:12:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bfKTIS0l1IY-OGucSA3cm-c4Ek8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aecb8a-d763-4642-8036-f400402b536c/1/bfKTIS0l1IY-OGucSA3cm-c4Ek8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aecb8a-d763-4642-8036-f400402b536c/1/bfKTIS0l1IY-OGucSA3cm-c4Ek8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:98:fe:d1:cd:2d:e6:85:0e:e1:65:af:4e:db:e1:b8:23:8e:
b4:a5:f4:18:31:e4:1b:42:9f:ca:6b:9e:30:36:79:c1:f1:45:
7d:3f:6d:72:0f:4e:c4:79:a1:cc:1d:89:71:de:25:77:8c:cd:
8b:bd:a7:6c:4c:d7:b6:a2:c3:ee:f1:0b:a2:fb:c6:9b:f1:3e:
75:38:51:53:cc:df:ca:13:cf:e7:a3:26:f9:f0:ee:d4:79:9a:
c4:3f:8e:ec:b6:93:80:ed:c8:10:f3:94:78:4e:5f:34:08:a9:
47:4e:ce:c4:e9:5d:eb:55:f2:18:3a:b4:96:ac:8a:9c:40:1d:
8e:5f:39:e6:19:10:37:1b:a1:d2:14:b7:74:81:4c:15:ad:ad:
ef:cc:0f:9a:b6:a5:ff:78:27:b6:c9:03:ab:34:14:68:92:de:
41:a7:75:11:3f:76:8c:46:1a:1b:ee:a7:1a:cc:7f:12:cd:e9:
b2:ca:9d:87:c1:32:e6:2e:e6:11:9f:b4:8c:7e:2a:fd:fc:a7:
17:9c:d9:71:60:1b:34:59:e1:df:b3:f0:25:18:c8:ea:37:02:
a0:c8:e3:25:bf:96:08:e4:0f:3c:56:d1:78:12:b0:e9:7e:3e:
57:e5:fc:a9:d4:23:c4:2b:0c:8f:2f:01:2d:d1:a0:ba:1a:9d:
c9:1b:18:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 14:29:29 2025 by rpki-client