Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/29cb2e-4680-4a36-b0a5-985182001e92/1/Bn3PV3ZU3KF6YQua9PLKdCHcu4E.mft
File: Bn3PV3ZU3KF6YQua9PLKdCHcu4E.mft (raw, json)
Hash identifier: 8Gt+fMyL/uz0Rchn5knrLfKDMKhqqLCQ+xSBEsh1S3k=
Subject key identifier: 74:16:DC:BF:C7:79:5C:33:95:88:0F:F4:95:6C:A8:05:9C:B3:DD:9E
Authority key identifier: 06:7D:CF:57:76:54:DC:A1:7A:61:0B:9A:F4:F2:CA:74:21:DC:BB:81
Certificate issuer: /CN=067dcf577654dca17a610b9af4f2ca7421dcbb81
Certificate serial: 01987D1BF5B2FC5940AC1602011883102B10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bn3PV3ZU3KF6YQua9PLKdCHcu4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/29cb2e-4680-4a36-b0a5-985182001e92/1/Bn3PV3ZU3KF6YQua9PLKdCHcu4E.mft
Manifest number: 11AA
Signing time: Wed 06 Aug 2025 02:00:40 +0000
Manifest this update: Wed 06 Aug 2025 02:00:40 +0000
Manifest next update: Thu 07 Aug 2025 02:00:40 +0000
Files and hashes: 1: 1GqtXlpLHOQrMWA32pTa86lAWYQ.roa (hash: tnU3CSzBIjcvcUTrt2DgQBxjNJjtnLH3C2y91tIJFC8=)
2: Bn3PV3ZU3KF6YQua9PLKdCHcu4E.crl (hash: gEAQkfsxoEydSNxLgYItonK4hMu8MqAWjITkMvBUaRk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/29cb2e-4680-4a36-b0a5-985182001e92/1/Bn3PV3ZU3KF6YQua9PLKdCHcu4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/29cb2e-4680-4a36-b0a5-985182001e92/1/Bn3PV3ZU3KF6YQua9PLKdCHcu4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bn3PV3ZU3KF6YQua9PLKdCHcu4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 02:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:1b:f5:b2:fc:59:40:ac:16:02:01:18:83:10:2b:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=067dcf577654dca17a610b9af4f2ca7421dcbb81
Validity
Not Before: Aug 6 02:00:40 2025 GMT
Not After : Aug 7 02:00:40 2025 GMT
Subject: CN=7416dcbfc7795c3395880ff4956ca8059cb3dd9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:8f:02:16:9e:8c:fd:25:30:0a:24:2e:ad:bb:
8c:a2:14:0b:70:09:07:83:b7:88:39:69:45:5e:bb:
93:89:99:b4:5c:b7:f5:70:b5:7b:37:88:39:8d:32:
03:c7:6f:6b:ed:01:fb:92:4d:fa:35:1f:96:40:2e:
8d:7a:89:93:60:67:a2:8c:8a:94:aa:1a:5e:c5:1a:
59:4a:25:f8:9c:cf:02:89:e7:70:f1:44:d4:7b:55:
df:1d:d1:6d:af:15:f7:5c:63:95:47:90:3d:4b:ff:
e7:1a:10:b8:20:e4:fb:cf:59:8a:fe:c8:99:c2:64:
93:fb:c2:80:28:64:c1:57:42:cd:ac:46:12:61:73:
91:24:9e:c4:94:3f:f8:20:bd:e2:d9:67:33:a1:c3:
72:2d:80:25:c8:eb:f9:cd:5f:df:18:db:0b:d0:a3:
94:33:55:b4:bb:8b:49:60:3c:97:34:5a:cf:9c:8f:
3b:43:2d:ce:23:da:31:21:0a:da:17:a2:57:2f:28:
d3:64:f7:04:6b:35:71:92:eb:5e:ae:30:0a:ef:b9:
9d:c3:f4:03:15:7e:92:e4:58:82:5c:71:e5:34:13:
b9:b7:38:7b:24:95:e9:9f:73:f4:50:8a:b1:83:42:
06:45:7f:da:14:06:52:cc:b5:ee:c9:9a:56:bf:46:
c2:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:16:DC:BF:C7:79:5C:33:95:88:0F:F4:95:6C:A8:05:9C:B3:DD:9E
X509v3 Authority Key Identifier:
keyid:06:7D:CF:57:76:54:DC:A1:7A:61:0B:9A:F4:F2:CA:74:21:DC:BB:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bn3PV3ZU3KF6YQua9PLKdCHcu4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/29cb2e-4680-4a36-b0a5-985182001e92/1/Bn3PV3ZU3KF6YQua9PLKdCHcu4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/29cb2e-4680-4a36-b0a5-985182001e92/1/Bn3PV3ZU3KF6YQua9PLKdCHcu4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:bd:4e:f3:d2:8f:ee:bf:5a:64:c2:b3:2e:f0:a9:6a:99:e3:
f7:45:bb:84:e7:ab:bd:ca:0d:4a:14:fa:4f:fa:51:70:74:9c:
2f:fa:f1:b5:eb:31:98:1f:e9:af:c9:54:fa:db:f2:50:9d:15:
b8:c5:6b:13:8b:1c:19:b8:46:73:c8:0a:ee:08:2a:ed:08:f7:
a1:3d:e0:28:ee:35:36:8d:6e:ab:87:01:34:11:4d:c0:0e:49:
d8:fd:bb:2b:c2:94:8f:e2:71:85:8d:61:e6:8f:e1:bf:2f:81:
30:7f:32:47:8a:07:d7:9b:4d:d9:ba:f9:9c:8a:41:76:a9:18:
e6:64:54:bd:5d:6a:85:03:2d:6d:21:15:64:99:dc:c8:ab:7e:
cb:b2:8d:31:1a:bd:12:7b:cf:40:bc:51:bc:a4:09:08:45:3b:
40:3b:19:50:d0:c6:ed:70:37:f9:23:27:3e:dd:4b:08:b3:27:
8c:0e:f7:53:f6:2a:82:03:2e:f7:76:55:5f:6b:62:0c:19:e4:
ab:2f:e2:a1:3b:bc:6f:cf:e1:29:33:f1:db:6e:47:c9:96:5a:
40:45:5e:c7:7a:97:e2:92:8e:84:a1:00:48:35:90:b3:df:1c:
81:86:11:5e:21:14:76:38:10:d4:43:8d:e4:2b:87:6d:6b:74:
56:9b:12:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 6 10:20:33 2025 by rpki-client