Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.mft
File: bb1csplArCqFU7bsCozsfCCffOc.mft (raw, json)
Hash identifier: PCJrS6duFd5NeRqlB8C0GCTC3c+rqxYkNOeHRf1p29w=
Subject key identifier: 83:C3:82:80:5B:93:E5:A9:FA:DC:F7:B3:2D:6E:6B:34:00:4C:19:77
Authority key identifier: 6D:BD:5C:B2:99:40:AC:2A:85:53:B6:EC:0A:8C:EC:7C:20:9F:7C:E7
Certificate issuer: /CN=6dbd5cb29940ac2a8553b6ec0a8cec7c209f7ce7
Certificate serial: 019881D535516AB4FA406892BFB2491491ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bb1csplArCqFU7bsCozsfCCffOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.mft
Manifest number: 0F2C
Signing time: Thu 07 Aug 2025 00:01:30 +0000
Manifest this update: Thu 07 Aug 2025 00:01:30 +0000
Manifest next update: Fri 08 Aug 2025 00:01:30 +0000
Files and hashes: 1: SeGdw-NsjMC3xa1HTxnhlgnRFG0.roa (hash: 2DoSSeAY7zRuUc6N/EdrEbSmCJqRqnoNYJZ5rPcfON4=)
2: TlEgVdPwV6Gl0yxcaSKSOXS8BDk.roa (hash: rOzs3FdYqLMRuICzpdxO1YhRALyW7K6gs5XgNJ8pgZU=)
3: bb1csplArCqFU7bsCozsfCCffOc.crl (hash: AuQzU61byRDDrau8P/OrYAduam6I7Djy/pLYtzIlqi4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/bb1csplArCqFU7bsCozsfCCffOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:d5:35:51:6a:b4:fa:40:68:92:bf:b2:49:14:91:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dbd5cb29940ac2a8553b6ec0a8cec7c209f7ce7
Validity
Not Before: Aug 7 00:01:30 2025 GMT
Not After : Aug 8 00:01:30 2025 GMT
Subject: CN=83c382805b93e5a9fadcf7b32d6e6b34004c1977
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:8a:57:e7:45:45:90:b1:8b:ad:67:2f:a7:61:
b6:6c:7b:87:60:3c:f9:69:2e:b1:96:46:b0:8c:72:
f2:b5:8c:9e:67:84:e8:ee:d1:88:36:bf:15:c4:68:
ff:a3:dc:e9:7a:3c:de:b2:b5:03:15:83:77:a4:be:
50:aa:74:ba:61:98:99:d4:ed:21:83:95:3c:28:a4:
e6:e6:3b:d0:e8:14:84:47:84:ed:9d:d5:5e:97:14:
90:3c:71:3c:4b:c4:a1:55:f2:57:5c:0f:5c:6e:1b:
ec:33:57:89:69:1b:1e:86:f8:f5:ce:45:03:13:a8:
21:e3:19:e0:2c:b8:74:3b:27:36:d5:86:18:48:e3:
82:ec:de:ba:66:b5:f8:53:19:5d:a4:19:31:35:6f:
88:29:5d:9d:ed:ba:7b:38:01:27:47:be:5f:02:8c:
c2:11:a7:e6:bb:c2:e0:38:98:48:27:2b:21:83:f5:
da:f9:8d:25:50:b3:1b:50:cc:82:66:8d:2d:e6:fd:
ed:49:5d:f5:6a:66:60:9b:38:f9:93:d0:f9:b4:e5:
a4:b6:3c:6a:16:78:08:e3:30:84:6d:29:21:d1:37:
ab:01:26:36:15:46:03:9d:ec:a6:62:7d:46:1f:13:
98:1d:a7:ca:71:90:f8:b3:a8:9f:d0:a9:f7:d1:a4:
f3:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:C3:82:80:5B:93:E5:A9:FA:DC:F7:B3:2D:6E:6B:34:00:4C:19:77
X509v3 Authority Key Identifier:
keyid:6D:BD:5C:B2:99:40:AC:2A:85:53:B6:EC:0A:8C:EC:7C:20:9F:7C:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb1csplArCqFU7bsCozsfCCffOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/614b05-7445-4046-9fb1-2fde80435f4d/1/bb1csplArCqFU7bsCozsfCCffOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:a4:fb:5e:6d:2f:81:39:94:5b:95:41:5e:bc:f0:16:f4:d2:
28:f0:d1:6f:6c:58:d1:be:14:cf:db:33:84:03:4d:fb:fb:30:
74:58:2e:2b:f5:4c:d1:95:8f:5b:9f:d2:70:19:60:58:83:2f:
fd:17:92:5e:0d:be:40:bb:81:13:b3:05:6a:b9:e5:08:90:f4:
68:57:6c:13:04:22:27:71:3f:4a:c6:8f:85:ed:f9:6a:11:35:
f8:ae:50:04:eb:e7:58:8d:c2:a6:dc:59:b9:11:ce:e8:86:09:
ee:09:39:fb:4e:e0:41:79:a8:2a:76:79:26:2f:32:d8:50:56:
0f:a8:a4:1a:0a:ec:5a:d4:bf:c1:2b:9f:a5:ac:78:a4:fd:64:
c4:db:9f:62:f5:41:8e:67:46:4f:c5:1a:f7:4d:45:48:6e:97:
38:4c:89:13:ee:99:c7:e7:ef:6b:77:16:c2:8f:58:00:e8:94:
40:ec:f8:b0:3b:10:dc:e4:ac:a6:f0:f2:b6:ea:65:72:c2:ce:
61:be:0d:4c:e9:a1:96:bc:20:df:59:2d:b3:52:92:a8:37:1a:
14:c4:f0:c8:18:57:43:02:f8:1c:19:02:0e:1f:03:9f:6f:69:
a7:e2:d3:ea:9f:44:c8:fe:a6:14:87:d1:b2:5b:1c:9f:89:e4:
0e:d3:08:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:15:59 2025 by rpki-client