Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/cc77a6-2b0e-4cdd-8826-cdcc96607b9a/1/bcXjzvXaXn_fw2TF1aBALTpnhtw.mft
File: bcXjzvXaXn_fw2TF1aBALTpnhtw.mft (raw, json)
Hash identifier: K7s4kjD3sch8o1n9yKF8bFGsOMAe+zsGP3FyfC4ORq8=
Subject key identifier: 4A:AB:95:C7:A4:C8:65:62:C0:B0:69:E8:AC:41:A9:B0:41:83:9A:E0
Authority key identifier: 6D:C5:E3:CE:F5:DA:5E:7F:DF:C3:64:C5:D5:A0:40:2D:3A:67:86:DC
Certificate issuer: /CN=6dc5e3cef5da5e7fdfc364c5d5a0402d3a6786dc
Certificate serial: 019873742DDB51AF1C35EEAA0AC2600B0866
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bcXjzvXaXn_fw2TF1aBALTpnhtw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/cc77a6-2b0e-4cdd-8826-cdcc96607b9a/1/bcXjzvXaXn_fw2TF1aBALTpnhtw.mft
Manifest number: 0EB1
Signing time: Mon 04 Aug 2025 05:00:50 +0000
Manifest this update: Mon 04 Aug 2025 05:00:50 +0000
Manifest next update: Tue 05 Aug 2025 05:00:50 +0000
Files and hashes: 1: DoUsi8lBp24xgpF7Cj5k0M8Xf1k.roa (hash: 8DoQ+UjZ0y3DouoJyhRBNdxsuMKM8IPBGox8SgTwz/M=)
2: bcXjzvXaXn_fw2TF1aBALTpnhtw.crl (hash: wpzqTPSeSQudNQdLEaUQb93ceAot5GVpYV+dGL4L3c8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/cc77a6-2b0e-4cdd-8826-cdcc96607b9a/1/bcXjzvXaXn_fw2TF1aBALTpnhtw.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/cc77a6-2b0e-4cdd-8826-cdcc96607b9a/1/bcXjzvXaXn_fw2TF1aBALTpnhtw.mft
rsync://rpki.ripe.net/repository/DEFAULT/bcXjzvXaXn_fw2TF1aBALTpnhtw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:74:2d:db:51:af:1c:35:ee:aa:0a:c2:60:0b:08:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dc5e3cef5da5e7fdfc364c5d5a0402d3a6786dc
Validity
Not Before: Aug 4 05:00:50 2025 GMT
Not After : Aug 5 05:00:50 2025 GMT
Subject: CN=4aab95c7a4c86562c0b069e8ac41a9b041839ae0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2d:ad:09:e5:52:40:26:40:1c:dd:75:c5:bc:
14:cc:4f:a1:0a:3a:c5:be:40:f9:1d:f5:c6:08:1e:
e4:38:34:a7:6c:68:6c:d5:aa:f3:34:dd:59:22:fc:
a0:a4:08:3d:b9:34:9d:ca:41:f1:4b:67:e9:a5:aa:
7d:cf:66:d1:0d:5a:e4:a9:c2:dc:c2:af:a3:7b:7f:
12:5b:2a:c6:5a:75:2c:ac:3a:1e:1d:bb:ce:52:64:
13:73:ae:3a:77:05:0f:e7:b6:56:04:28:60:60:02:
b5:7f:09:0a:26:84:c4:31:44:d1:b4:01:97:63:e5:
1c:eb:a7:7f:89:f0:5d:9c:30:66:d0:ea:0a:b4:76:
c7:a2:f4:d4:b8:bd:d0:ea:aa:00:a0:c5:7a:98:19:
16:40:79:5d:22:74:35:6c:c9:09:af:d9:27:6e:78:
26:9d:16:af:e9:11:a6:38:29:88:9b:29:38:8d:e0:
d4:85:f9:84:e8:fa:16:4a:df:98:91:a0:85:43:c9:
e4:b2:66:6e:e4:91:e7:b5:a1:5a:f1:e3:ee:eb:20:
ab:16:35:61:cc:09:58:79:bf:28:84:9e:c5:41:cb:
b2:13:a6:3f:df:84:3a:64:9a:da:fd:21:3d:4d:b7:
a4:8d:ca:c7:f3:72:02:45:23:b4:4a:ad:88:6b:6d:
74:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:AB:95:C7:A4:C8:65:62:C0:B0:69:E8:AC:41:A9:B0:41:83:9A:E0
X509v3 Authority Key Identifier:
keyid:6D:C5:E3:CE:F5:DA:5E:7F:DF:C3:64:C5:D5:A0:40:2D:3A:67:86:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bcXjzvXaXn_fw2TF1aBALTpnhtw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/cc77a6-2b0e-4cdd-8826-cdcc96607b9a/1/bcXjzvXaXn_fw2TF1aBALTpnhtw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/cc77a6-2b0e-4cdd-8826-cdcc96607b9a/1/bcXjzvXaXn_fw2TF1aBALTpnhtw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:05:bf:86:b4:7b:04:0b:3f:48:c6:53:af:01:fa:61:5b:1a:
b5:08:00:27:ba:27:ed:3e:38:f7:c1:21:04:b8:cb:ab:e1:72:
53:f8:06:0b:58:f7:a5:63:d4:3c:2d:df:28:0d:7e:52:d9:bf:
ea:44:0a:24:61:20:d7:21:39:fc:2e:4e:be:d9:0a:93:59:4b:
5b:d1:12:74:b3:ae:c9:b2:99:57:75:f6:ac:0f:fd:ef:14:c0:
5c:97:f9:39:fc:1b:f5:53:2d:30:5c:0c:38:40:8f:03:f6:ba:
bc:55:be:51:51:1a:0a:43:e5:42:f7:07:2d:ec:6d:cb:da:2a:
61:8e:b0:54:74:03:54:eb:6a:d8:4d:00:e4:c4:f1:a7:6c:18:
34:23:7b:a2:8d:60:60:5f:42:9a:f0:9f:a6:96:51:c0:0e:db:
e5:31:c0:a6:11:bc:35:96:8e:ab:80:49:c4:c2:33:48:e6:fc:
07:13:e1:e9:ed:0f:5c:87:f9:d2:1c:dd:54:41:2d:60:25:30:
0c:71:3d:4c:4f:3d:e8:7e:47:9e:4d:ba:58:15:30:b6:8e:62:
94:73:26:a6:85:e5:12:cb:da:c8:f8:53:0e:6f:08:76:28:7b:
4b:99:2a:24:67:98:f8:ec:af:42:43:1c:42:d2:fc:45:6f:3c:
da:e7:bc:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:20:01 2025 by rpki-client