Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/822dc4-78e8-4801-b734-f1e55f537c87/1/b9qzLf1uW8aZ57826Bgpjcf7skY.mft
File: b9qzLf1uW8aZ57826Bgpjcf7skY.mft (raw, json)
Hash identifier: FRbP6MkvlxPAUtw6B5KC5majEgPjY1W614EnDQ4BsQI=
Subject key identifier: 19:05:28:03:A3:D3:6B:B3:C1:DD:63:0D:BC:91:08:7C:10:10:E5:B5
Authority key identifier: 6F:DA:B3:2D:FD:6E:5B:C6:99:E7:BF:36:E8:18:29:8D:C7:FB:B2:46
Certificate issuer: /CN=6fdab32dfd6e5bc699e7bf36e818298dc7fbb246
Certificate serial: 019891B642778552F5946A412A83FD89D892
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b9qzLf1uW8aZ57826Bgpjcf7skY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/822dc4-78e8-4801-b734-f1e55f537c87/1/b9qzLf1uW8aZ57826Bgpjcf7skY.mft
Manifest number: 0699
Signing time: Sun 10 Aug 2025 02:01:37 +0000
Manifest this update: Sun 10 Aug 2025 02:01:37 +0000
Manifest next update: Mon 11 Aug 2025 02:01:37 +0000
Files and hashes: 1: b9qzLf1uW8aZ57826Bgpjcf7skY.crl (hash: /uKECHrNxX7Bs4wSLLSRR/XuA1rYDmcBxuAk/d3fe9w=)
2: jDb6CVt7LMESu9TedWHpv82vXzQ.roa (hash: zvLg2bIhHSdnpMeV4b2spjUGOYu0nN5hkdLuTlMfXXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/822dc4-78e8-4801-b734-f1e55f537c87/1/b9qzLf1uW8aZ57826Bgpjcf7skY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/822dc4-78e8-4801-b734-f1e55f537c87/1/b9qzLf1uW8aZ57826Bgpjcf7skY.mft
rsync://rpki.ripe.net/repository/DEFAULT/b9qzLf1uW8aZ57826Bgpjcf7skY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 02:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:91:b6:42:77:85:52:f5:94:6a:41:2a:83:fd:89:d8:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fdab32dfd6e5bc699e7bf36e818298dc7fbb246
Validity
Not Before: Aug 10 02:01:37 2025 GMT
Not After : Aug 11 02:01:37 2025 GMT
Subject: CN=19052803a3d36bb3c1dd630dbc91087c1010e5b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:7d:e7:93:67:e5:d8:a4:42:75:c6:ae:d0:61:
86:c8:47:38:3c:ab:e1:09:40:23:99:37:4a:9a:39:
44:d7:44:f4:17:17:12:93:2d:34:d8:94:54:7a:70:
36:a1:35:12:a9:5f:86:73:33:73:82:68:8c:3c:4a:
04:a5:40:9b:5c:b0:63:14:56:5c:b4:56:3b:23:7e:
f1:01:41:27:ad:13:c6:55:43:da:7e:59:d7:44:d1:
03:2d:13:50:6b:13:04:7b:b2:ed:1c:55:76:04:07:
b3:c4:98:25:2c:52:b8:43:a0:05:fa:66:68:87:6c:
3a:04:d4:2e:a1:7a:84:6a:f9:6e:b1:00:b7:6a:a4:
44:24:fd:88:5a:3d:79:94:52:50:06:d5:15:4e:a4:
6f:a2:31:9f:77:41:10:ae:87:bb:e6:4b:54:33:d6:
30:b9:44:24:a8:a2:68:ca:30:b2:f2:d4:88:e8:12:
0d:63:d0:73:7f:16:69:67:ed:8e:22:7d:13:f7:b6:
6e:10:fe:54:46:ae:a4:1b:4c:ae:df:c0:e1:4a:72:
d6:20:f1:af:61:04:98:1d:4d:99:55:c5:9f:1b:b0:
e4:cc:fc:62:14:84:2f:da:7e:b8:b7:31:3e:74:81:
c2:37:b5:70:55:49:bb:cd:02:b8:ad:5d:f2:1a:19:
2e:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:05:28:03:A3:D3:6B:B3:C1:DD:63:0D:BC:91:08:7C:10:10:E5:B5
X509v3 Authority Key Identifier:
keyid:6F:DA:B3:2D:FD:6E:5B:C6:99:E7:BF:36:E8:18:29:8D:C7:FB:B2:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9qzLf1uW8aZ57826Bgpjcf7skY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/822dc4-78e8-4801-b734-f1e55f537c87/1/b9qzLf1uW8aZ57826Bgpjcf7skY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/822dc4-78e8-4801-b734-f1e55f537c87/1/b9qzLf1uW8aZ57826Bgpjcf7skY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:0a:eb:4f:85:25:95:ec:5e:58:6c:ae:b0:a8:7b:32:af:e2:
eb:f7:79:75:a6:a9:cf:d7:89:c9:11:e9:ae:d8:c6:f8:82:49:
b5:53:a6:42:96:da:08:c3:eb:bd:ee:dd:a7:e2:bc:a7:08:5c:
7b:85:c4:78:ef:88:68:c1:d8:1f:3d:ce:c3:45:94:95:ad:97:
05:cd:00:10:15:4f:a1:af:ef:35:34:17:cd:f0:24:89:7a:80:
86:79:27:46:1e:96:1d:42:ad:ef:27:97:a6:17:9f:7d:2e:44:
a0:e5:8e:9b:8d:b5:e1:ac:1d:c9:ca:86:f6:44:70:82:02:5f:
f9:2a:17:87:84:ee:73:e6:b1:9b:e2:b9:14:d8:0b:da:88:dd:
d3:f1:fc:eb:7d:b0:58:53:ed:2c:38:43:ea:2a:dd:a9:e5:07:
c6:bc:b8:db:8c:60:cc:0c:14:33:08:e6:c8:a7:1c:47:4a:a7:
cf:7a:c1:b5:39:76:f7:f4:74:63:c9:da:e0:ec:71:03:33:70:
63:d6:39:1c:f5:a2:33:30:87:12:5a:e2:be:0c:dd:32:90:b1:
4b:c4:f7:bc:1e:37:ea:3d:1b:59:d1:dd:1a:67:67:02:67:b4:
91:d1:b6:11:37:6b:27:58:7f:23:a2:70:69:39:6b:d1:40:d4:
b7:dd:b7:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 10:47:46 2025 by rpki-client