Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/ebf169-be17-4ce9-9275-081786ab0748/1/bchbZ4jkUMBUE0row2V0iyP3Qmc.mft
File: bchbZ4jkUMBUE0row2V0iyP3Qmc.mft (raw, json)
Hash identifier: mWV5lUufvtUGxAmCgFhg/cFiTDb1iO0KS2or/ZKUSbs=
Subject key identifier: 2A:19:9E:17:79:BE:AF:74:51:1F:91:0B:12:23:F2:7C:7A:3B:90:54
Authority key identifier: 6D:C8:5B:67:88:E4:50:C0:54:13:4A:E8:C3:65:74:8B:23:F7:42:67
Certificate issuer: /CN=6dc85b6788e450c054134ae8c365748b23f74267
Certificate serial: 01987DC0B0538FC28D57239231F5B77B60EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bchbZ4jkUMBUE0row2V0iyP3Qmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/ebf169-be17-4ce9-9275-081786ab0748/1/bchbZ4jkUMBUE0row2V0iyP3Qmc.mft
Manifest number: 0796
Signing time: Wed 06 Aug 2025 05:00:36 +0000
Manifest this update: Wed 06 Aug 2025 05:00:36 +0000
Manifest next update: Thu 07 Aug 2025 05:00:36 +0000
Files and hashes: 1: HuuruuJUnyizGG7iC01ujDUd5zE.roa (hash: zJUuXbnFQXiP5Cz81qdrVSNYrr0dHAG+T0ZkZ/sUgdY=)
2: bchbZ4jkUMBUE0row2V0iyP3Qmc.crl (hash: H/6fRSEA1P/MRP9tMUlvpOmJQ988bZa5MZ7orKkFXAk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/ebf169-be17-4ce9-9275-081786ab0748/1/bchbZ4jkUMBUE0row2V0iyP3Qmc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/ebf169-be17-4ce9-9275-081786ab0748/1/bchbZ4jkUMBUE0row2V0iyP3Qmc.mft
rsync://rpki.ripe.net/repository/DEFAULT/bchbZ4jkUMBUE0row2V0iyP3Qmc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:c0:b0:53:8f:c2:8d:57:23:92:31:f5:b7:7b:60:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dc85b6788e450c054134ae8c365748b23f74267
Validity
Not Before: Aug 6 05:00:36 2025 GMT
Not After : Aug 7 05:00:36 2025 GMT
Subject: CN=2a199e1779beaf74511f910b1223f27c7a3b9054
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:4a:6e:2a:3e:d2:f3:d3:d4:9b:1e:5b:39:a4:
c5:32:0c:f3:5b:0b:28:02:9f:fd:fc:e2:8f:05:f5:
e3:ac:ed:1d:80:89:c2:9d:56:c8:a3:f0:78:eb:5d:
5f:3c:fd:33:26:a2:72:71:d2:da:fc:1d:e8:0a:3a:
d2:b5:aa:e5:5f:f9:f1:eb:d4:4e:2c:fb:3a:80:e5:
e2:01:8f:2e:90:9e:c1:cf:3d:d3:e0:ee:70:ba:45:
86:d2:bd:2c:17:02:09:14:5c:92:d4:59:4f:06:d0:
00:88:49:f1:29:e2:15:39:9c:e9:da:30:be:7e:ee:
ad:0e:6c:c1:f8:41:2e:fa:74:93:78:e6:cd:1e:58:
e0:90:c3:a8:95:89:59:c9:95:7b:51:17:42:7c:f3:
a7:93:50:d7:ce:0f:33:46:6d:1b:b6:07:01:ec:f9:
08:4a:7d:11:e7:38:9b:39:73:b7:fe:35:c7:d6:a0:
15:9c:3a:37:13:23:80:74:22:1a:0c:ae:39:01:5e:
87:86:f6:b0:d8:b8:19:a7:c5:49:e1:14:79:8b:35:
6e:a5:13:56:12:0f:7f:98:9e:09:69:d4:3f:f7:a6:
01:53:83:82:a6:fe:17:bc:4f:cb:33:67:97:94:02:
bf:3c:89:75:49:f5:db:51:e5:27:78:f2:1d:4f:60:
59:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:19:9E:17:79:BE:AF:74:51:1F:91:0B:12:23:F2:7C:7A:3B:90:54
X509v3 Authority Key Identifier:
keyid:6D:C8:5B:67:88:E4:50:C0:54:13:4A:E8:C3:65:74:8B:23:F7:42:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bchbZ4jkUMBUE0row2V0iyP3Qmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ebf169-be17-4ce9-9275-081786ab0748/1/bchbZ4jkUMBUE0row2V0iyP3Qmc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ebf169-be17-4ce9-9275-081786ab0748/1/bchbZ4jkUMBUE0row2V0iyP3Qmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:d9:d9:0b:1a:65:8c:7a:2f:36:dc:c6:03:5e:00:d5:55:26:
cb:ac:13:35:84:62:2b:e9:95:63:19:39:bc:d0:92:4a:10:19:
8d:75:11:2b:56:2a:c4:cd:f4:dd:72:41:16:83:50:92:bf:4a:
32:28:e1:9a:a2:52:fe:5c:b3:a6:13:fe:bc:b1:c9:ec:d7:8e:
5e:58:89:79:bc:57:03:83:4b:68:3e:45:19:d3:48:a4:35:62:
18:86:d0:62:ad:48:3d:57:97:0e:fe:cc:2b:39:4b:7f:84:b3:
8c:43:0c:ab:18:a0:e8:4f:23:32:79:1a:d1:82:d7:8c:d3:24:
40:13:0e:8f:90:c5:63:f1:77:f0:42:7a:9a:be:98:3f:54:31:
bf:ef:bf:84:b9:2e:33:db:3b:64:dc:63:d7:b0:ba:4e:7a:95:
b4:3a:9e:34:22:11:5a:8f:21:a8:2d:f3:51:fc:b5:83:20:da:
18:ae:97:b5:12:26:42:89:34:dd:dd:07:98:cc:5c:cb:c1:64:
fb:95:dc:13:e4:cb:af:19:25:69:da:40:4c:15:09:a3:05:83:
8c:cc:e6:81:49:50:e8:3c:1b:05:4c:3b:51:df:38:4d:30:09:
0f:4e:28:3f:58:11:10:f2:3a:53:d6:9b:29:49:1d:75:ef:96:
f3:22:26:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 11:09:17 2025 by rpki-client