Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/f5ea13-827a-4acd-a207-b9f3c6351225/1/bDpjxTHO5Bs77YcwDkWeRfueiXg.mft
File: bDpjxTHO5Bs77YcwDkWeRfueiXg.mft (raw, json)
Hash identifier: Jo5mAlQaKHc9E6go44fctiyuDA3QUdxsG/KE0Qcp66E=
Subject key identifier: 00:7F:99:E4:7A:3B:B2:AC:BD:07:FD:1E:30:9F:05:DA:F6:CE:27:75
Authority key identifier: 6C:3A:63:C5:31:CE:E4:1B:3B:ED:87:30:0E:45:9E:45:FB:9E:89:78
Certificate issuer: /CN=6c3a63c531cee41b3bed87300e459e45fb9e8978
Certificate serial: 0198D4044F59EFC8BC61B9F83BAE689C549F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bDpjxTHO5Bs77YcwDkWeRfueiXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/f5ea13-827a-4acd-a207-b9f3c6351225/1/bDpjxTHO5Bs77YcwDkWeRfueiXg.mft
Manifest number: 154B
Signing time: Fri 22 Aug 2025 23:01:48 +0000
Manifest this update: Fri 22 Aug 2025 23:01:48 +0000
Manifest next update: Sat 23 Aug 2025 23:01:48 +0000
Files and hashes: 1: bDpjxTHO5Bs77YcwDkWeRfueiXg.crl (hash: LN2IhnwSUcqPWue5RHgbxxHOPopBPXLo5jh69FKBqGg=)
2: rvNR6t5PRdirblmE3epG15uVGrA.roa (hash: /lq6D9bEbHelPkgUEVcuUZ64sKVSn4eE1Y6jkkszJSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/f5ea13-827a-4acd-a207-b9f3c6351225/1/bDpjxTHO5Bs77YcwDkWeRfueiXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/f5ea13-827a-4acd-a207-b9f3c6351225/1/bDpjxTHO5Bs77YcwDkWeRfueiXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/bDpjxTHO5Bs77YcwDkWeRfueiXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 Aug 2025 23:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:04:4f:59:ef:c8:bc:61:b9:f8:3b:ae:68:9c:54:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c3a63c531cee41b3bed87300e459e45fb9e8978
Validity
Not Before: Aug 22 23:01:48 2025 GMT
Not After : Aug 23 23:01:48 2025 GMT
Subject: CN=007f99e47a3bb2acbd07fd1e309f05daf6ce2775
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:8f:c9:60:46:e6:e7:34:bc:47:41:30:30:e9:
3f:0b:78:5b:a2:d5:72:c2:89:91:4a:bf:e7:57:f6:
ab:fe:ca:79:d9:e4:a4:03:b9:3b:41:a0:38:43:d6:
a3:e5:3d:7f:df:46:c8:54:c1:fd:dc:3f:71:28:bb:
bc:d9:14:76:60:de:92:b1:18:ee:93:3f:e5:d7:a1:
03:63:9e:2d:d3:64:5d:9c:c8:ee:f0:7c:0d:2b:a8:
50:55:f2:52:6c:2f:e2:5d:ef:3a:da:b1:99:14:82:
13:c3:77:b9:de:fc:4c:c4:1a:c7:72:82:ce:70:83:
81:2a:e5:b2:9a:b8:ac:29:ca:66:14:34:fb:39:e2:
8d:c2:df:06:b1:fa:2d:3c:98:ce:e4:f0:4a:4a:44:
12:17:27:a5:25:ce:64:1e:49:98:4f:d1:44:54:ba:
e5:f5:23:d9:c2:08:f7:b9:29:f1:af:bc:66:89:2c:
15:a4:f2:62:46:97:8c:06:0b:de:cd:b0:3b:87:4e:
9e:3a:78:1a:6d:6a:49:f6:37:8e:7e:fc:b7:dc:3f:
fc:9b:dc:fb:79:95:e9:19:d2:23:19:06:f9:65:76:
09:b8:87:b1:f4:39:03:05:f0:ec:2c:f9:37:1c:03:
c6:fc:a9:34:aa:b4:fb:7f:d7:3a:53:a1:00:2e:74:
49:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:7F:99:E4:7A:3B:B2:AC:BD:07:FD:1E:30:9F:05:DA:F6:CE:27:75
X509v3 Authority Key Identifier:
keyid:6C:3A:63:C5:31:CE:E4:1B:3B:ED:87:30:0E:45:9E:45:FB:9E:89:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bDpjxTHO5Bs77YcwDkWeRfueiXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/f5ea13-827a-4acd-a207-b9f3c6351225/1/bDpjxTHO5Bs77YcwDkWeRfueiXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/f5ea13-827a-4acd-a207-b9f3c6351225/1/bDpjxTHO5Bs77YcwDkWeRfueiXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:64:37:63:4d:ad:07:cd:b1:c8:81:37:af:00:08:0c:a3:a9:
49:74:30:41:3a:df:7d:58:fd:10:f1:8e:c5:93:f4:09:73:72:
8d:10:56:87:af:05:d8:34:0a:d4:4d:6f:2f:df:0d:f8:47:32:
3d:6b:cb:17:08:ff:91:e5:79:72:25:1a:73:c2:c4:f1:25:e3:
1a:08:49:ac:68:60:29:55:8e:7c:cf:f6:cc:3b:0d:11:05:e9:
d9:42:f0:2f:f2:7d:61:fd:c4:90:47:cb:aa:bc:07:3b:22:93:
85:50:a6:cc:44:d8:89:a3:b4:33:3a:23:df:83:3c:2a:a9:92:
62:11:38:91:8b:ab:53:1f:26:f9:1b:44:4b:67:b6:a6:24:cd:
8b:dc:4d:35:a6:ce:f7:26:f9:2c:6f:b2:c9:38:0a:50:47:46:
62:5c:79:9a:41:10:e2:0f:e8:df:37:11:fe:ef:54:54:fc:e6:
20:66:8f:ff:a2:f6:a8:84:e2:c1:0a:44:a0:2d:91:88:91:ca:
59:24:f9:c0:b2:4f:f1:ac:b3:be:a5:bc:8e:47:8b:d5:d9:2c:
20:a0:e4:2d:b7:fe:18:71:d4:fd:de:0e:53:49:0b:c5:b0:90:
43:ba:7f:d2:bc:6d:46:34:f2:55:43:58:2d:24:0a:c6:88:a2:
67:e5:69:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:24:38 2025 by rpki-client