Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/316c8f-5e36-471f-9555-f6297a77a37b/1/bd2PHjjJH1sXw9GnI05JyccNwyQ.mft
File: bd2PHjjJH1sXw9GnI05JyccNwyQ.mft (raw, json)
Hash identifier: 8TToecBhacjtdUCnU37LSSPSsQY9mR3IXQMOaCVhw9o=
Subject key identifier: FB:F3:B5:6C:B7:C9:67:C1:2E:2D:D9:4B:4F:35:AA:BA:A4:67:07:15
Authority key identifier: 6D:DD:8F:1E:38:C9:1F:5B:17:C3:D1:A7:23:4E:49:C9:C7:0D:C3:24
Certificate issuer: /CN=6ddd8f1e38c91f5b17c3d1a7234e49c9c70dc324
Certificate serial: 019896A61C08C9B4B777167796519E512A2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bd2PHjjJH1sXw9GnI05JyccNwyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/316c8f-5e36-471f-9555-f6297a77a37b/1/bd2PHjjJH1sXw9GnI05JyccNwyQ.mft
Manifest number: 162A
Signing time: Mon 11 Aug 2025 01:02:05 +0000
Manifest this update: Mon 11 Aug 2025 01:02:05 +0000
Manifest next update: Tue 12 Aug 2025 01:02:05 +0000
Files and hashes: 1: BKts92Cgp762t7JNofBM7L5uftM.roa (hash: WTNLkBIvgvxJFEXIWZr47BOElViaMRJym9HooD5Dr3Q=)
2: bd2PHjjJH1sXw9GnI05JyccNwyQ.crl (hash: sup7Mmr1I92wgrk1YKO0pv5OQfchoPe4wqlJSQwdiko=)
3: jypSqMvt2NprsB0DoEFG-cYXk3g.roa (hash: 20GE86V+BpBjF8cWsWZrxYRlzb0k0GNnTKWyu1nZsto=)
4: z53iYrx_shu0WdCaV4v6ZXfJyfA.roa (hash: ySckjx3fnBbjiCnJf7c10h+wH/jcKQr5e8Rmhk0EXE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/316c8f-5e36-471f-9555-f6297a77a37b/1/bd2PHjjJH1sXw9GnI05JyccNwyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/316c8f-5e36-471f-9555-f6297a77a37b/1/bd2PHjjJH1sXw9GnI05JyccNwyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/bd2PHjjJH1sXw9GnI05JyccNwyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 01:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:a6:1c:08:c9:b4:b7:77:16:77:96:51:9e:51:2a:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddd8f1e38c91f5b17c3d1a7234e49c9c70dc324
Validity
Not Before: Aug 11 01:02:05 2025 GMT
Not After : Aug 12 01:02:05 2025 GMT
Subject: CN=fbf3b56cb7c967c12e2dd94b4f35aabaa4670715
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:db:4a:c6:22:de:d0:08:ac:3a:03:3c:1a:f5:
39:84:46:32:3f:bb:54:4b:ff:1f:cc:08:66:27:e6:
45:6d:08:f7:c0:67:cc:96:33:8a:d6:81:5c:70:fc:
b5:2e:2e:6d:eb:99:b3:82:ee:2a:4c:32:86:13:2b:
3c:30:cc:3c:fe:61:3b:fe:0b:7d:b5:39:cd:f0:04:
b0:7f:aa:34:88:27:e6:33:7f:87:fd:d0:1c:f6:71:
52:69:25:e4:a3:b3:37:c7:cd:6a:74:c4:1f:ce:26:
b9:7b:0f:ff:d9:5e:34:76:3d:33:1e:9a:c1:cf:32:
cd:b2:ef:2f:55:26:e0:8b:65:18:7d:6b:91:b4:74:
6d:be:b0:6c:42:87:89:34:69:61:70:3f:7f:0c:c1:
31:5f:60:03:48:19:a8:2d:4d:44:f4:c9:98:77:46:
dc:9d:4a:f8:c8:93:20:2b:1c:98:36:ad:6b:f9:28:
83:94:d4:f7:58:c0:e4:3b:c8:dd:e5:87:6f:10:0d:
4d:1d:61:96:79:e0:a0:9d:cc:8d:b3:f2:c0:79:ff:
43:f8:5e:a3:7a:23:8d:53:fd:84:d4:57:61:ac:ca:
c7:ea:64:09:32:20:3b:3b:24:8c:b4:69:64:b6:c5:
be:8e:dd:a2:5d:3f:53:c7:fc:17:8f:2f:f4:bc:7c:
38:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:F3:B5:6C:B7:C9:67:C1:2E:2D:D9:4B:4F:35:AA:BA:A4:67:07:15
X509v3 Authority Key Identifier:
keyid:6D:DD:8F:1E:38:C9:1F:5B:17:C3:D1:A7:23:4E:49:C9:C7:0D:C3:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd2PHjjJH1sXw9GnI05JyccNwyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/316c8f-5e36-471f-9555-f6297a77a37b/1/bd2PHjjJH1sXw9GnI05JyccNwyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/316c8f-5e36-471f-9555-f6297a77a37b/1/bd2PHjjJH1sXw9GnI05JyccNwyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:64:56:b2:e1:49:8e:b2:61:85:9c:26:b4:48:d0:cf:d5:4a:
ec:4c:be:57:33:0f:48:e8:f1:d5:72:60:0a:06:84:c8:d4:61:
6e:12:e6:1f:f5:43:2e:46:66:88:a7:2d:0e:10:ee:d7:92:e4:
18:e5:fc:b6:91:5d:4c:03:91:e0:56:e4:13:c0:c5:0a:5d:98:
41:2e:c1:00:7c:85:e1:f5:99:1b:d9:78:57:fc:c9:ef:51:a4:
be:d4:a2:10:69:af:83:5c:81:04:6b:7c:b2:96:ec:3e:46:fa:
54:57:9f:f7:cc:f9:17:63:31:03:a9:16:6e:cf:79:54:8c:1c:
23:bf:9c:40:bd:94:18:02:60:e8:d5:9b:d7:eb:83:d3:ee:f9:
7d:7b:4b:06:60:de:88:42:76:66:bc:d6:17:69:bb:20:c9:94:
b0:33:d5:c4:63:c2:f7:6e:23:ae:b3:2c:e9:f8:45:50:b6:02:
60:02:23:00:47:48:74:3f:73:81:9f:61:5d:74:52:99:53:f5:
4e:09:bd:cc:36:86:38:fb:ac:7b:a6:32:ff:73:5c:cb:57:41:
98:d6:45:ae:5a:69:4d:3f:1b:92:ee:4a:66:aa:1e:59:41:c9:
1c:28:1a:5b:3b:23:d5:78:41:1e:15:5c:24:8c:8f:2a:af:1a:
7c:b1:71:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 09:54:17 2025 by rpki-client