Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.mft
File: bRULQ4zGj2LcFdNZWTFh95neU68.mft (raw, json)
Hash identifier: +fM3cHsX5nsokQCwQ5PyGYBdyKVEXkWrkc4zyXCLbfE=
Subject key identifier: A0:55:35:A4:D7:23:5B:EF:04:65:2C:F2:91:65:C5:B4:25:D6:7F:09
Authority key identifier: 6D:15:0B:43:8C:C6:8F:62:DC:15:D3:59:59:31:61:F7:99:DE:53:AF
Certificate issuer: /CN=6d150b438cc68f62dc15d359593161f799de53af
Certificate serial: 0198737416D152C9F0694FCF95C311824498
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bRULQ4zGj2LcFdNZWTFh95neU68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.mft
Manifest number: 161C
Signing time: Mon 04 Aug 2025 05:00:44 +0000
Manifest this update: Mon 04 Aug 2025 05:00:44 +0000
Manifest next update: Tue 05 Aug 2025 05:00:44 +0000
Files and hashes: 1: bRULQ4zGj2LcFdNZWTFh95neU68.crl (hash: gKlZXxurFAyq3do8RLlSg+MIEeUjRw2y10mKEShaglo=)
2: eOJh9jPF2rg62QTnhjhlK1Lrg1w.roa (hash: r7IjyXmhMKmvdhLF1sofBUJOM+GxOvLawDA1jM5V0lA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.mft
rsync://rpki.ripe.net/repository/DEFAULT/bRULQ4zGj2LcFdNZWTFh95neU68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:74:16:d1:52:c9:f0:69:4f:cf:95:c3:11:82:44:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d150b438cc68f62dc15d359593161f799de53af
Validity
Not Before: Aug 4 05:00:44 2025 GMT
Not After : Aug 5 05:00:44 2025 GMT
Subject: CN=a05535a4d7235bef04652cf29165c5b425d67f09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:2c:33:c2:7f:05:c0:50:f3:77:f5:03:2e:bb:
f4:78:03:16:50:20:44:56:ee:c9:90:f1:66:ab:5b:
71:e1:2c:2a:5c:d4:e4:18:20:be:eb:d5:61:50:7e:
a1:a9:6b:19:59:22:8d:2a:42:da:75:f2:cb:ad:e2:
c9:88:a9:64:48:ce:bf:84:a1:6e:89:9a:b1:f1:9a:
75:34:ff:0d:51:26:2f:52:99:bc:23:11:97:06:00:
0e:be:64:58:95:26:ba:89:8b:5d:3a:02:a2:ce:ca:
7d:ce:c8:4f:e4:a3:8b:91:67:f6:fd:3d:ec:ae:2c:
30:27:71:73:4b:c3:ca:27:e1:5d:79:66:78:17:c6:
7d:56:80:3e:5a:f1:91:6e:d7:78:4c:bd:60:80:98:
2f:3e:1f:b1:6c:64:8a:56:ba:62:b0:94:54:8a:7e:
ef:7f:31:a5:9e:64:fc:37:be:1c:96:e6:7c:d9:f7:
f4:74:0d:89:58:e3:da:b9:ed:f4:ef:3f:87:00:4b:
06:70:48:b7:3a:9e:1a:a6:e1:75:3b:d7:54:83:b9:
22:8a:ce:9d:5e:3e:a3:e0:91:16:00:1e:a4:b7:48:
79:4f:5a:3c:1d:24:a5:ed:ae:20:46:6e:e4:2d:73:
82:55:ca:08:ca:81:00:32:e3:e1:80:41:dc:03:a2:
4a:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:55:35:A4:D7:23:5B:EF:04:65:2C:F2:91:65:C5:B4:25:D6:7F:09
X509v3 Authority Key Identifier:
keyid:6D:15:0B:43:8C:C6:8F:62:DC:15:D3:59:59:31:61:F7:99:DE:53:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bRULQ4zGj2LcFdNZWTFh95neU68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:ed:84:91:dd:fe:bc:cc:af:42:49:01:ab:b3:75:fe:9a:6a:
7b:2f:06:a0:79:dc:db:8c:cf:0d:65:ed:d8:1a:b9:9c:95:77:
e6:a7:2a:70:5a:e0:77:0d:87:9f:2c:db:b4:f8:30:28:3f:08:
57:cb:58:b9:16:f9:47:06:eb:36:25:07:7e:c0:9d:ba:dd:fb:
8d:2d:f8:98:d3:d3:a5:91:9f:2b:79:5f:80:e6:df:1b:eb:45:
9e:7e:dd:ab:fe:d7:9a:2f:ae:87:82:09:dc:cf:ec:83:38:9a:
5a:83:76:b0:e0:1d:a7:4a:e1:8b:09:c7:48:9d:58:99:19:99:
b5:9a:1e:5d:2b:5b:16:58:0a:4e:02:a8:12:ae:c8:37:fb:9b:
1a:10:4c:5b:2b:5c:2a:ae:98:22:f8:d9:06:f5:f6:2f:81:cb:
9e:b9:8e:d4:78:40:1d:7c:41:65:d0:95:50:6f:52:a0:04:1f:
3b:5a:a2:fc:80:9f:61:7a:2c:9d:77:da:72:6f:1c:6d:b5:3f:
c5:d0:c1:02:00:56:e4:ed:2e:10:bc:9b:9e:02:fa:32:35:24:
b1:ee:fc:1d:e2:30:be:47:97:a4:1c:9f:93:27:6b:70:c4:2d:
1c:f4:d3:a7:92:d1:30:39:64:3b:20:11:3a:80:c7:13:f8:3e:
98:de:be:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:26:52 2025 by rpki-client