Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.mft
File: bFN3u52kHKoRdvQyJi3KqZxHb5o.mft (raw, json)
Hash identifier: wHEp2hvi+b2/SR+ErJN++idK2Vfw5huSufL3t/9yMwo=
Subject key identifier: CE:B0:63:5A:22:BA:23:2C:EB:82:35:9F:CF:14:9C:1C:30:6F:7C:B7
Authority key identifier: 6C:53:77:BB:9D:A4:1C:AA:11:76:F4:32:26:2D:CA:A9:9C:47:6F:9A
Certificate issuer: /CN=6c5377bb9da41caa1176f432262dcaa99c476f9a
Certificate serial: 01987450A8A62DF89EE21D4DFEF7507FF6A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bFN3u52kHKoRdvQyJi3KqZxHb5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.mft
Manifest number: 0785
Signing time: Mon 04 Aug 2025 09:01:39 +0000
Manifest this update: Mon 04 Aug 2025 09:01:39 +0000
Manifest next update: Tue 05 Aug 2025 09:01:39 +0000
Files and hashes: 1: 02ZPMrkxrv9TSRNG7JSudAlDYd8.roa (hash: 1pjHbb+bmeJiA9CJ5xGCBjxXea42uVA7wH4sLUyonyA=)
2: 3L6JAHHrLKqNS5i1HV40c9xyyEM.roa (hash: qyyZT9D9IGcDrviVnxZxLdBd6LOM1Me+aqwZJ6D1tPM=)
3: bFN3u52kHKoRdvQyJi3KqZxHb5o.crl (hash: 4RlIC17ELfGFWCZWVQoWHeq1Ouo3e3eVU9ZPb8pC+Oo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/bFN3u52kHKoRdvQyJi3KqZxHb5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:a8:a6:2d:f8:9e:e2:1d:4d:fe:f7:50:7f:f6:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c5377bb9da41caa1176f432262dcaa99c476f9a
Validity
Not Before: Aug 4 09:01:39 2025 GMT
Not After : Aug 5 09:01:39 2025 GMT
Subject: CN=ceb0635a22ba232ceb82359fcf149c1c306f7cb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ec:db:7e:34:2f:59:68:6e:0b:a2:67:5d:2f:
6a:0d:25:6e:38:70:5d:fa:4d:d6:7a:9f:19:50:df:
58:76:29:69:a0:7f:06:19:94:62:d8:2a:86:eb:bb:
96:fd:2b:ef:35:ef:ca:04:dc:87:49:7b:e0:62:78:
7f:ca:88:4d:36:f6:7a:5b:96:e7:3c:b0:28:db:7c:
df:e6:34:58:2a:5e:e3:b6:d2:16:2a:86:4e:fe:68:
bc:4d:40:74:eb:40:72:79:d8:7c:14:be:ad:0c:03:
88:9e:59:79:ec:e8:9b:0c:e5:cf:f7:65:36:5f:5e:
60:2b:c7:5a:59:b7:cd:66:8b:e9:a0:d3:21:24:1d:
b3:8c:48:98:f4:16:86:3e:76:bb:72:42:97:6b:df:
10:ac:de:24:8d:3f:69:15:87:22:f6:bc:96:c9:bd:
45:6c:11:ae:b7:97:df:53:38:0b:0b:de:49:72:df:
77:95:79:76:39:c2:b5:ca:f6:6a:d8:f9:54:db:b0:
d5:9e:76:70:bc:b0:c4:6e:cd:80:09:04:13:b7:76:
27:18:26:06:b3:03:84:ff:db:1b:81:7e:cb:fc:3a:
b6:e0:2d:fd:af:33:26:c1:92:00:3a:43:00:84:c1:
61:89:81:df:1b:7c:ab:27:39:ca:2d:0a:23:37:11:
9b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:B0:63:5A:22:BA:23:2C:EB:82:35:9F:CF:14:9C:1C:30:6F:7C:B7
X509v3 Authority Key Identifier:
keyid:6C:53:77:BB:9D:A4:1C:AA:11:76:F4:32:26:2D:CA:A9:9C:47:6F:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bFN3u52kHKoRdvQyJi3KqZxHb5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d6:03:85:bd:be:b2:08:32:55:5f:cd:4a:55:de:69:6b:8c:b8:
a5:e7:21:61:c8:95:31:07:ef:e9:54:25:f8:68:53:7f:d5:d1:
95:46:96:c7:32:d8:b4:c5:98:dd:7c:83:00:07:22:87:2f:8d:
42:e9:41:f7:4d:db:d9:c4:79:a8:49:e2:7c:8b:aa:f7:2e:1b:
69:42:1c:77:4f:7a:d2:87:ff:d9:88:ba:13:cd:fe:88:ac:64:
8d:ed:e2:60:5f:7d:03:05:22:77:ae:18:9b:8a:42:95:3c:be:
03:6f:eb:56:e4:8d:4c:a9:ad:13:75:5f:fb:59:66:9e:1f:6a:
87:ba:75:e4:c7:f9:bd:09:92:0b:17:34:e0:f1:40:cb:20:45:
04:94:3d:9a:d1:9e:be:7a:6e:d3:2a:95:cb:7f:b4:56:13:82:
0b:0a:e8:be:96:84:d8:ed:0e:19:17:a3:6e:4a:64:91:5d:e5:
7b:1d:67:a0:5a:83:23:f3:ab:be:51:cf:32:54:98:fc:b1:0d:
5c:db:df:8d:47:5e:53:23:35:3b:22:4d:f2:36:e4:ae:05:29:
6c:b8:89:27:80:6b:70:ee:75:4b:78:88:d0:2f:e7:55:80:e1:
0f:cd:62:b7:bc:ae:bb:1f:b9:3d:59:f1:c8:81:9a:b5:c2:96:
35:52:61:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:25:26 2025 by rpki-client