Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/ae5e6c-c70f-40f2-890d-575cf5d335e4/1/bgC7pk9Ra41jNaAc8wS4It7hrtA.mft
File: bgC7pk9Ra41jNaAc8wS4It7hrtA.mft (raw, json)
Hash identifier: phUnmycT4OUQfBAhZdNsPd7wEa7pvKe0LjZXKNvgFIw=
Subject key identifier: F2:8D:D9:32:8A:00:FA:77:5C:6D:DE:5D:63:E6:33:26:B4:8A:88:57
Authority key identifier: 6E:00:BB:A6:4F:51:6B:8D:63:35:A0:1C:F3:04:B8:22:DE:E1:AE:D0
Certificate issuer: /CN=6e00bba64f516b8d6335a01cf304b822dee1aed0
Certificate serial: 0198D54E3951432ABB9559742FD1A0B3EF84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bgC7pk9Ra41jNaAc8wS4It7hrtA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/ae5e6c-c70f-40f2-890d-575cf5d335e4/1/bgC7pk9Ra41jNaAc8wS4It7hrtA.mft
Manifest number: 1647
Signing time: Sat 23 Aug 2025 05:02:10 +0000
Manifest this update: Sat 23 Aug 2025 05:02:10 +0000
Manifest next update: Sun 24 Aug 2025 05:02:10 +0000
Files and hashes: 1: bgC7pk9Ra41jNaAc8wS4It7hrtA.crl (hash: 2nEjloOIRVo6nVwjWF4WO63f+5FCt64VGR0FIfEYAWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/ae5e6c-c70f-40f2-890d-575cf5d335e4/1/bgC7pk9Ra41jNaAc8wS4It7hrtA.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/ae5e6c-c70f-40f2-890d-575cf5d335e4/1/bgC7pk9Ra41jNaAc8wS4It7hrtA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bgC7pk9Ra41jNaAc8wS4It7hrtA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:39:51:43:2a:bb:95:59:74:2f:d1:a0:b3:ef:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e00bba64f516b8d6335a01cf304b822dee1aed0
Validity
Not Before: Aug 23 05:02:10 2025 GMT
Not After : Aug 24 05:02:10 2025 GMT
Subject: CN=f28dd9328a00fa775c6dde5d63e63326b48a8857
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:9b:27:02:b5:b6:6d:ad:11:bf:07:4f:ff:82:
9c:05:be:15:78:fa:bf:a3:d9:f6:06:26:48:16:7f:
73:ad:f6:f9:20:45:7e:3e:c3:8b:55:10:d5:36:f9:
41:d7:f2:b0:d8:01:94:70:bb:a4:66:7c:78:60:4e:
ab:7e:9a:7b:0f:6a:5c:53:bf:9f:32:78:24:6d:f3:
09:95:23:4d:4b:b5:1d:22:a6:7b:6b:72:a1:c7:cd:
60:3a:bc:a6:02:28:ef:28:d2:13:bb:83:7d:31:61:
df:82:91:ba:a0:94:95:dc:f0:56:fa:f7:aa:bf:f3:
1e:de:eb:d9:e0:8e:98:64:03:bd:dc:f9:c5:41:2c:
92:23:8a:23:80:b4:20:91:74:cc:cd:17:8a:95:16:
56:a5:31:fa:4d:c5:a8:08:24:27:14:e6:3a:db:93:
24:8b:eb:3b:69:85:12:a5:86:ce:28:8c:ff:6b:2b:
8a:a8:ac:f5:7c:e0:ac:2f:07:0f:0f:06:ff:94:e7:
6c:3a:7b:be:a2:df:3c:67:5b:36:49:d3:20:7e:2a:
51:80:bb:34:e6:2f:ee:52:70:0a:b2:b4:56:16:9e:
23:2c:5c:4a:1b:c7:1c:a3:87:5f:7f:80:5e:47:72:
d2:21:10:71:16:f0:8c:95:ec:64:ae:99:82:4d:cd:
ea:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:8D:D9:32:8A:00:FA:77:5C:6D:DE:5D:63:E6:33:26:B4:8A:88:57
X509v3 Authority Key Identifier:
keyid:6E:00:BB:A6:4F:51:6B:8D:63:35:A0:1C:F3:04:B8:22:DE:E1:AE:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bgC7pk9Ra41jNaAc8wS4It7hrtA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ae5e6c-c70f-40f2-890d-575cf5d335e4/1/bgC7pk9Ra41jNaAc8wS4It7hrtA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ae5e6c-c70f-40f2-890d-575cf5d335e4/1/bgC7pk9Ra41jNaAc8wS4It7hrtA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:b8:61:81:59:8e:65:72:57:53:2e:36:0e:ba:9e:30:5e:58:
c1:e9:3e:33:8b:f6:33:40:b7:b4:34:d3:c4:76:ec:de:c3:27:
48:cd:dc:b8:b3:a1:97:79:be:df:b1:49:f1:d0:b1:9e:65:4f:
0b:36:e2:a2:91:db:b5:2e:de:fa:51:e3:6b:5e:3d:31:56:64:
80:bf:6e:cd:d1:78:35:41:e5:ea:f7:f8:e2:85:49:03:0a:f2:
bf:ac:6d:aa:ab:31:00:e3:b3:26:be:84:70:54:ea:b0:9f:0a:
c8:b8:e5:0f:5e:d5:32:f0:00:3e:09:c7:10:d4:60:9f:9c:1d:
59:bd:9b:fb:ff:37:79:3b:00:32:06:86:ab:ee:d6:94:90:36:
02:88:f4:fa:72:63:41:37:9f:2a:ba:50:95:ff:db:41:8c:42:
cc:2a:ce:15:dc:03:db:ba:ab:30:a9:7e:af:b5:70:69:82:13:
7e:5a:70:8c:4c:57:e5:1b:d4:d0:45:ca:db:9d:68:de:88:75:
76:7a:ca:3f:56:02:75:69:1a:82:6b:80:95:74:08:05:b3:8f:
e0:18:24:a4:f8:82:26:1d:0c:55:23:e5:7a:4c:85:37:5b:af:
e2:36:d0:e3:89:60:05:f2:6d:3c:17:ee:62:ce:3a:94:c5:79:
e9:f7:5e:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:01:41 2025 by rpki-client