Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/344e2c-1c56-43ab-8108-eaf68b59e599/1/bP02Bzbx-myXcPy0i-WUvmCeWz4.mft
File: bP02Bzbx-myXcPy0i-WUvmCeWz4.mft (raw, json)
Hash identifier: IYgUoA1N3DcbKR2+H1lB5LH7sFoQqZd3O1oHArOJL9Q=
Subject key identifier: 3C:3B:42:EF:0D:6E:60:B6:C1:77:A0:CE:0B:15:58:CE:D3:38:4C:B3
Authority key identifier: 6C:FD:36:07:36:F1:FA:6C:97:70:FC:B4:8B:E5:94:BE:60:9E:5B:3E
Certificate issuer: /CN=6cfd360736f1fa6c9770fcb48be594be609e5b3e
Certificate serial: 019873E2619090A2356DFCB905E1B3CF9A94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bP02Bzbx-myXcPy0i-WUvmCeWz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/344e2c-1c56-43ab-8108-eaf68b59e599/1/bP02Bzbx-myXcPy0i-WUvmCeWz4.mft
Manifest number: 1617
Signing time: Mon 04 Aug 2025 07:01:12 +0000
Manifest this update: Mon 04 Aug 2025 07:01:12 +0000
Manifest next update: Tue 05 Aug 2025 07:01:12 +0000
Files and hashes: 1: DC68jaJzKs4sWOyzS3O5wTgtZNE.roa (hash: 1O1Vjs/w38AlpgFvrtScFHTsBaANSIlvVfPi7Rtab9k=)
2: Pp9dfiM_MT5SdF1T82CtQd0OZJw.roa (hash: h3fdCt6Okubry0k+FISuRK++uR3zvuFiodlZnV6ykfI=)
3: bP02Bzbx-myXcPy0i-WUvmCeWz4.crl (hash: szBu3budF6CL4F8asfDZqNIGqCjICUuESWWV7sj+urs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/344e2c-1c56-43ab-8108-eaf68b59e599/1/bP02Bzbx-myXcPy0i-WUvmCeWz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/344e2c-1c56-43ab-8108-eaf68b59e599/1/bP02Bzbx-myXcPy0i-WUvmCeWz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/bP02Bzbx-myXcPy0i-WUvmCeWz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:61:90:90:a2:35:6d:fc:b9:05:e1:b3:cf:9a:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cfd360736f1fa6c9770fcb48be594be609e5b3e
Validity
Not Before: Aug 4 07:01:12 2025 GMT
Not After : Aug 5 07:01:12 2025 GMT
Subject: CN=3c3b42ef0d6e60b6c177a0ce0b1558ced3384cb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:98:3b:f7:a3:32:26:28:3f:01:2c:b7:d4:3e:
5c:ee:92:62:b0:35:ea:50:6d:9a:66:27:bc:13:9a:
45:fb:82:e9:30:dc:1d:74:0b:3f:81:f3:1c:55:5f:
cc:65:07:23:0f:c4:a9:5e:58:bd:92:75:ae:33:49:
6e:0d:0b:43:e3:19:e3:5b:d9:af:37:0f:d4:de:8a:
4e:d0:0e:bc:30:64:0a:98:13:35:74:f5:c3:25:e8:
2b:56:32:0b:d8:2d:ce:8b:4a:ea:c5:e1:c8:75:95:
9e:37:b8:dd:e2:1a:69:59:8c:8c:71:7a:ad:b3:52:
15:6b:95:a5:96:f5:16:3a:79:a5:61:db:87:29:db:
49:0c:07:ad:8b:81:38:fc:53:d7:8c:c9:05:05:2b:
bb:dd:32:c3:9d:f9:44:40:18:0e:ad:7a:fe:1e:c1:
b7:e6:e6:06:6d:6f:78:28:be:1a:da:4c:70:f2:d3:
db:32:b4:c7:93:30:59:87:91:be:2f:0d:24:97:64:
f3:85:52:6a:2e:ff:55:79:a1:29:07:51:28:03:d1:
65:fa:1e:dd:2a:e5:c2:f0:8d:10:02:a9:b1:bd:65:
f5:71:2c:50:f1:4f:a1:66:80:1e:3b:3d:5f:1c:9f:
d7:80:75:9f:94:97:e8:57:5e:c8:ee:81:e0:35:b0:
98:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:3B:42:EF:0D:6E:60:B6:C1:77:A0:CE:0B:15:58:CE:D3:38:4C:B3
X509v3 Authority Key Identifier:
keyid:6C:FD:36:07:36:F1:FA:6C:97:70:FC:B4:8B:E5:94:BE:60:9E:5B:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bP02Bzbx-myXcPy0i-WUvmCeWz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/344e2c-1c56-43ab-8108-eaf68b59e599/1/bP02Bzbx-myXcPy0i-WUvmCeWz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/344e2c-1c56-43ab-8108-eaf68b59e599/1/bP02Bzbx-myXcPy0i-WUvmCeWz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:ca:53:5d:c4:3b:aa:75:45:ea:7b:02:2d:22:79:4d:35:a2:
49:31:46:48:fd:03:0b:d6:66:5d:ea:7c:f6:27:75:22:8c:01:
50:8c:94:ff:f4:24:98:40:44:14:22:74:ca:7b:8e:12:52:84:
70:27:24:42:e4:c0:46:98:2f:36:3c:2a:09:ab:e6:3b:ec:67:
75:c8:5b:7a:de:52:cf:bf:63:56:3e:2d:46:08:c4:f5:9e:76:
5f:db:a9:54:af:0e:46:ee:d2:90:53:7e:ed:e5:90:13:62:a4:
70:5c:f5:92:ab:f8:b1:88:7d:58:5e:76:62:0d:6b:85:15:c4:
b9:af:45:f0:a5:56:cf:12:4c:c2:e0:32:fc:57:94:8c:5b:c1:
fa:9d:37:82:3e:0e:53:30:dc:f5:39:f1:15:c5:08:a1:b3:98:
57:01:6f:92:d1:ce:e9:ec:be:fa:78:52:5c:4d:c5:87:1d:c2:
14:40:2e:e3:63:16:cd:ef:57:57:ad:30:aa:e4:c9:af:3b:b0:
78:88:98:39:84:0a:ec:f8:d1:80:0f:96:dc:f3:5c:8a:ca:e5:
8c:72:71:3e:dd:77:b4:c2:5d:76:84:9d:f0:c0:ab:30:61:63:
d8:b0:de:68:f4:81:02:09:5a:90:42:0b:2b:0d:b1:c7:26:49:
01:cc:da:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:25:22 2025 by rpki-client