Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/42f54b-57c0-424a-acf5-4dd4d0f53849/1/bn8ivutSxuUaJCKxORQu6gP7XU0.mft
File: bn8ivutSxuUaJCKxORQu6gP7XU0.mft (raw, json)
Hash identifier: HwtlOeSz7POJdfQDYfrmIJeFbkzvnwX5FnmAEc2QfY4=
Subject key identifier: 7A:86:62:A1:DD:98:D8:7E:0C:5D:DF:61:31:FE:5E:F5:E9:88:AF:73
Authority key identifier: 6E:7F:22:BE:EB:52:C6:E5:1A:24:22:B1:39:14:2E:EA:03:FB:5D:4D
Certificate issuer: /CN=6e7f22beeb52c6e51a2422b139142eea03fb5d4d
Certificate serial: 01988BB3D3B39F9219722326C94D941A4587
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bn8ivutSxuUaJCKxORQu6gP7XU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/42f54b-57c0-424a-acf5-4dd4d0f53849/1/bn8ivutSxuUaJCKxORQu6gP7XU0.mft
Manifest number: 1622
Signing time: Fri 08 Aug 2025 22:01:14 +0000
Manifest this update: Fri 08 Aug 2025 22:01:14 +0000
Manifest next update: Sat 09 Aug 2025 22:01:14 +0000
Files and hashes: 1: bn8ivutSxuUaJCKxORQu6gP7XU0.crl (hash: XsHerj0GkPLHLZLh2vkwml6iYIF5jmzdufoz0UDHOYI=)
2: z4IVFfra9dO93PZl7xdhmVhqzoE.roa (hash: 90ivV2dV0BSclFTId5ah7Fo9mKfLvO9taEvtncU7b/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/42f54b-57c0-424a-acf5-4dd4d0f53849/1/bn8ivutSxuUaJCKxORQu6gP7XU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/42f54b-57c0-424a-acf5-4dd4d0f53849/1/bn8ivutSxuUaJCKxORQu6gP7XU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bn8ivutSxuUaJCKxORQu6gP7XU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 20:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:b3:d3:b3:9f:92:19:72:23:26:c9:4d:94:1a:45:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e7f22beeb52c6e51a2422b139142eea03fb5d4d
Validity
Not Before: Aug 8 22:01:14 2025 GMT
Not After : Aug 9 22:01:14 2025 GMT
Subject: CN=7a8662a1dd98d87e0c5ddf6131fe5ef5e988af73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:25:bb:e7:91:87:36:8f:7f:9e:6b:cd:23:93:
46:4f:29:82:81:84:e9:e6:89:6a:d4:2e:08:6a:87:
5b:20:1c:35:75:fb:72:ca:dc:db:21:c0:96:87:e8:
5e:50:fd:72:0e:de:ce:c1:93:19:93:6d:90:96:4d:
ff:4b:c0:7f:e0:2b:48:32:14:2b:3e:ed:5f:c2:a4:
db:df:bc:7e:c4:67:eb:6a:f8:19:32:05:1b:5b:b9:
50:4d:c3:40:72:87:24:3e:18:db:ec:7b:7f:fa:17:
53:86:f8:e9:68:8f:db:47:58:a8:9b:98:2b:b4:1a:
70:a8:db:02:e1:7c:b0:f8:dd:62:ab:aa:51:48:e7:
2c:d0:5c:6f:91:e5:b4:e6:38:b6:ac:8a:39:63:5f:
c1:e6:d6:b9:3b:07:be:6a:c8:b9:2b:3d:67:99:e1:
dd:66:ee:4f:69:0c:02:9c:c2:e8:3f:b2:79:94:88:
2d:5e:7c:b5:27:26:b2:5d:3d:e2:f4:20:2e:6a:62:
e4:25:0d:b5:55:68:db:1f:49:2d:c3:a6:09:29:e3:
d1:a4:40:39:37:47:d6:83:2d:73:1c:80:3c:1b:46:
93:9f:87:bc:0a:c0:46:6a:90:c2:37:c4:80:30:8e:
5a:27:71:e6:2c:c7:32:b5:53:87:e0:11:d7:61:61:
94:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:86:62:A1:DD:98:D8:7E:0C:5D:DF:61:31:FE:5E:F5:E9:88:AF:73
X509v3 Authority Key Identifier:
keyid:6E:7F:22:BE:EB:52:C6:E5:1A:24:22:B1:39:14:2E:EA:03:FB:5D:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bn8ivutSxuUaJCKxORQu6gP7XU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/42f54b-57c0-424a-acf5-4dd4d0f53849/1/bn8ivutSxuUaJCKxORQu6gP7XU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/42f54b-57c0-424a-acf5-4dd4d0f53849/1/bn8ivutSxuUaJCKxORQu6gP7XU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:0e:1f:ff:16:9b:2d:8d:bb:b5:62:a3:5c:95:9b:05:90:93:
d5:a3:b9:ac:fb:b1:02:3c:b7:3e:4e:f4:20:57:b1:0d:16:d4:
84:b0:e9:89:2f:46:b7:be:c2:fc:82:03:3c:2b:b2:8e:11:6a:
fb:23:88:2d:08:7f:da:2c:2e:d8:a3:89:62:85:5a:8c:84:7d:
4c:53:bf:c1:de:2f:d1:3d:ac:a6:ab:e9:64:a7:31:55:02:e9:
75:d1:d5:6d:c0:87:01:cc:49:1f:5d:bc:c7:ba:fb:56:ce:df:
63:3e:18:7a:e5:bd:b4:63:8a:21:a6:54:c9:1e:b7:7d:13:65:
db:38:22:38:1e:db:3a:ef:0c:50:ec:94:8f:55:26:91:5c:f0:
ff:95:d5:0e:0d:db:67:3b:bb:e2:e0:d8:9b:cc:ae:ce:c5:45:
2a:3d:93:ef:de:df:98:87:a6:d6:b7:4d:83:14:fe:1b:ae:a8:
7d:3d:49:3e:ad:d9:95:68:7a:de:30:44:dd:ff:9c:00:67:28:
4f:59:46:7d:49:2f:98:9c:dc:72:dd:c7:18:e6:96:de:95:bf:
83:78:f5:5e:69:d2:66:19:13:b1:d8:58:35:76:a9:8f:f8:ca:
86:66:35:78:95:fd:0c:19:54:ce:f2:de:62:09:04:a3:23:c0:
78:1a:ea:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 01:00:51 2025 by rpki-client