Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/9292c9-24ab-4dbf-bebe-8963d5271f9c/1/bA0n8NEw_uZ9gtWYL3yTT4eRzfA.mft
File: bA0n8NEw_uZ9gtWYL3yTT4eRzfA.mft (raw, json)
Hash identifier: 3tgqfHSwQoHpoFIhPLOrR9du/QDnzP0a02A1ocqLOcs=
Subject key identifier: 59:4C:0B:C4:24:32:9B:FA:22:B8:D7:22:5B:C7:D6:C8:B5:E5:98:21
Authority key identifier: 6C:0D:27:F0:D1:30:FE:E6:7D:82:D5:98:2F:7C:93:4F:87:91:CD:F0
Certificate issuer: /CN=6c0d27f0d130fee67d82d5982f7c934f8791cdf0
Certificate serial: 019873743DF38468E3C577A862C6BC2AF59B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bA0n8NEw_uZ9gtWYL3yTT4eRzfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/9292c9-24ab-4dbf-bebe-8963d5271f9c/1/bA0n8NEw_uZ9gtWYL3yTT4eRzfA.mft
Manifest number: 39
Signing time: Mon 04 Aug 2025 05:00:54 +0000
Manifest this update: Mon 04 Aug 2025 05:00:54 +0000
Manifest next update: Tue 05 Aug 2025 05:00:54 +0000
Files and hashes: 1: bA0n8NEw_uZ9gtWYL3yTT4eRzfA.crl (hash: 0iiN8Jq0kWwyDwc3XYH0+mGjktf3Cq3yimCI8nbYCx4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/9292c9-24ab-4dbf-bebe-8963d5271f9c/1/bA0n8NEw_uZ9gtWYL3yTT4eRzfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/9292c9-24ab-4dbf-bebe-8963d5271f9c/1/bA0n8NEw_uZ9gtWYL3yTT4eRzfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bA0n8NEw_uZ9gtWYL3yTT4eRzfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:74:3d:f3:84:68:e3:c5:77:a8:62:c6:bc:2a:f5:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c0d27f0d130fee67d82d5982f7c934f8791cdf0
Validity
Not Before: Aug 4 05:00:54 2025 GMT
Not After : Aug 5 05:00:54 2025 GMT
Subject: CN=594c0bc424329bfa22b8d7225bc7d6c8b5e59821
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d0:30:f8:12:b5:3d:3e:ef:71:98:c5:c6:c6:
72:3e:34:b8:3e:f0:ce:ab:bf:de:92:af:3d:8b:65:
59:6c:9e:7b:5d:11:8f:d6:c8:4a:4a:dd:32:94:b1:
d0:87:de:f3:3c:6d:48:ed:85:e4:72:ee:c3:92:7f:
a0:a7:e7:42:fc:cd:e4:73:df:5c:cb:65:09:c5:1f:
3f:a2:fc:7f:0b:5c:77:9c:6f:c7:a3:9b:59:f2:00:
ce:8d:91:5e:69:93:8b:d9:74:84:87:db:b6:8a:65:
e0:81:ae:60:03:d6:41:4c:43:17:2c:ae:d1:96:5c:
fb:89:b3:e6:b2:bd:09:52:98:34:2f:04:e0:5b:3e:
61:a9:6e:78:f8:e8:55:df:87:b3:6b:1a:e8:cb:c9:
30:d2:7e:34:aa:d2:b2:84:19:eb:22:57:34:84:52:
7b:0d:a7:0c:4d:a7:0e:43:63:e6:42:4e:68:43:e7:
f3:c3:4c:0e:e2:fb:45:18:1e:88:4e:16:00:89:6d:
33:79:91:64:ad:a9:8d:ca:8f:b3:ba:df:7e:8c:6a:
19:c9:cf:a7:59:cc:29:92:e9:9e:eb:41:e6:30:72:
2d:da:31:be:c1:34:4e:7c:26:1e:b0:89:85:a7:97:
70:34:bf:40:1d:05:1d:1b:e5:52:e7:42:a7:3d:5b:
f6:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:4C:0B:C4:24:32:9B:FA:22:B8:D7:22:5B:C7:D6:C8:B5:E5:98:21
X509v3 Authority Key Identifier:
keyid:6C:0D:27:F0:D1:30:FE:E6:7D:82:D5:98:2F:7C:93:4F:87:91:CD:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bA0n8NEw_uZ9gtWYL3yTT4eRzfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9292c9-24ab-4dbf-bebe-8963d5271f9c/1/bA0n8NEw_uZ9gtWYL3yTT4eRzfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9292c9-24ab-4dbf-bebe-8963d5271f9c/1/bA0n8NEw_uZ9gtWYL3yTT4eRzfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:5b:53:b8:9a:d4:9f:9c:5c:61:b9:7e:8a:4a:24:6d:20:66:
93:8e:6d:2d:98:9c:ca:1e:70:ef:2d:0b:e7:0d:7e:b0:a6:e2:
70:1c:35:3b:10:28:da:4e:18:73:f7:d5:fc:89:ab:f0:ca:4f:
a9:23:85:9c:df:a4:97:46:63:e2:c7:7e:04:bc:06:45:65:f8:
78:5f:e6:ec:a4:ed:cc:7d:bb:06:3e:07:93:ad:bd:18:d3:e6:
73:3d:3c:cf:21:7f:87:8d:da:fd:04:ad:cb:3e:e0:a7:d7:e0:
dc:dd:15:ec:09:0b:ff:70:e5:52:51:55:69:c7:6e:35:d6:61:
f0:54:da:56:40:ed:6e:a6:09:3b:9b:3b:23:7a:87:21:a7:55:
dd:5e:a1:66:1a:bd:5d:8d:09:3a:bb:2a:67:eb:42:38:77:ad:
47:d6:1d:e0:23:ce:25:45:69:77:e4:b9:c1:0b:d4:b7:1d:7e:
41:f4:e8:d5:3d:9b:df:2e:19:52:f9:59:38:31:42:75:56:4e:
96:28:03:15:54:fd:55:be:56:51:e0:a3:5b:ec:af:09:46:70:
16:58:96:77:07:e7:0d:91:48:63:d7:de:89:e0:ee:3a:b4:46:
8d:e1:45:57:fd:48:f1:94:39:78:33:a1:1c:fa:10:88:a5:ce:
98:3e:ea:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:08:38 2025 by rpki-client