Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/589eca-3f19-4e23-a3fb-3303f71622f9/1/bkBn13v-qZ3yXOXgipIT0RKAFM8.mft
File: bkBn13v-qZ3yXOXgipIT0RKAFM8.mft (raw, json)
Hash identifier: Q8kiw0EwvLAlLtoPGgM3dY+j02nEwX4v9fKKAdUidM0=
Subject key identifier: 7C:D5:A1:55:89:FA:59:D9:87:19:EC:28:E1:D0:72:F7:95:A5:ED:15
Authority key identifier: 6E:40:67:D7:7B:FE:A9:9D:F2:5C:E5:E0:8A:92:13:D1:12:80:14:CF
Certificate issuer: /CN=6e4067d77bfea99df25ce5e08a9213d1128014cf
Certificate serial: 0198D5BC2B74345A73833472B555EBA02A1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bkBn13v-qZ3yXOXgipIT0RKAFM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/589eca-3f19-4e23-a3fb-3303f71622f9/1/bkBn13v-qZ3yXOXgipIT0RKAFM8.mft
Manifest number: 1650
Signing time: Sat 23 Aug 2025 07:02:15 +0000
Manifest this update: Sat 23 Aug 2025 07:02:15 +0000
Manifest next update: Sun 24 Aug 2025 07:02:15 +0000
Files and hashes: 1: adNDLvUmYkNZRHIO-8EvQkOny3U.roa (hash: JFJ+lodVDeHLySNvitcsYBxq8cfuImJHPxEA0H+DjjY=)
2: bkBn13v-qZ3yXOXgipIT0RKAFM8.crl (hash: vNtiGg8PVMTh/B7YhHDe0cy1sEJYg2nHnoWcBgigmV8=)
3: iktdBTw9X8o6AOOEkLAyuZNK_gg.roa (hash: 2nzjnmBtk5vklJiWyvmO30xEFTmYF5gvtQ11fyrTZUE=)
4: mQ9zePbKKPrER63rktmN5-Z8AoQ.roa (hash: qfFxiv4hVcYLNON7vIi9UIknKo4icjwq21EoSvpzScg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/589eca-3f19-4e23-a3fb-3303f71622f9/1/bkBn13v-qZ3yXOXgipIT0RKAFM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/589eca-3f19-4e23-a3fb-3303f71622f9/1/bkBn13v-qZ3yXOXgipIT0RKAFM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bkBn13v-qZ3yXOXgipIT0RKAFM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bc:2b:74:34:5a:73:83:34:72:b5:55:eb:a0:2a:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e4067d77bfea99df25ce5e08a9213d1128014cf
Validity
Not Before: Aug 23 07:02:15 2025 GMT
Not After : Aug 24 07:02:15 2025 GMT
Subject: CN=7cd5a15589fa59d98719ec28e1d072f795a5ed15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7b:f7:37:e7:2a:91:06:52:af:95:66:9d:d8:
57:41:2f:33:77:c5:85:f9:4a:5a:f6:60:f8:6f:05:
b5:6f:08:97:c6:35:8f:62:be:f9:61:a4:b5:d3:13:
56:98:fe:49:ef:f6:58:da:21:26:d6:15:e1:82:cd:
57:e9:97:6e:ce:a6:09:46:a7:d9:e0:7d:59:09:9a:
2f:58:e8:1c:25:70:cf:1a:f0:3d:37:4c:6f:b2:10:
e0:b7:b5:a3:0a:56:58:05:8a:40:35:ff:e3:19:74:
a8:99:2a:20:43:ad:09:98:1b:1f:ee:af:14:16:02:
a5:77:f4:76:19:a6:19:e9:cd:82:00:b7:25:07:84:
bf:a7:c1:76:70:76:78:1e:3a:ab:9f:28:e8:26:f7:
28:d7:b1:66:0c:a5:29:74:41:25:e6:21:35:8e:31:
22:c8:3e:12:96:df:a8:9b:41:70:50:55:fe:5b:63:
7e:30:03:ef:50:7c:fa:06:6c:62:e3:0c:94:c9:8c:
f5:c3:5d:d8:97:fd:da:12:61:f9:81:7a:9c:b0:32:
b2:ad:bd:da:e7:3a:66:b3:5f:3f:19:41:56:00:72:
28:bc:23:ec:0c:15:cd:12:1c:57:13:87:ae:ce:e2:
ff:ed:c1:54:7b:9a:22:1d:95:93:c7:36:b0:9b:25:
5b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:D5:A1:55:89:FA:59:D9:87:19:EC:28:E1:D0:72:F7:95:A5:ED:15
X509v3 Authority Key Identifier:
keyid:6E:40:67:D7:7B:FE:A9:9D:F2:5C:E5:E0:8A:92:13:D1:12:80:14:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bkBn13v-qZ3yXOXgipIT0RKAFM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/589eca-3f19-4e23-a3fb-3303f71622f9/1/bkBn13v-qZ3yXOXgipIT0RKAFM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/589eca-3f19-4e23-a3fb-3303f71622f9/1/bkBn13v-qZ3yXOXgipIT0RKAFM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:79:ce:0f:d9:f4:09:7d:7e:a2:7d:db:ae:4d:4d:16:d5:52:
16:d9:ac:b9:42:ef:c0:34:e8:0f:8b:86:34:71:76:ec:eb:c3:
df:f7:29:42:fd:40:1f:81:56:49:ee:67:5f:6d:20:4e:ce:4e:
16:25:c3:04:ee:d1:f4:fc:22:be:3c:6f:dd:cc:41:bb:75:ec:
ff:25:4d:bf:0d:5a:b7:e1:c2:c1:66:81:21:e8:71:28:8d:33:
ec:c5:72:cc:0b:95:e2:78:2d:c5:75:ef:d4:c1:08:8c:5e:23:
a4:e1:ab:3f:af:54:86:22:85:a2:b4:f6:aa:59:52:21:d2:65:
2e:04:69:28:b9:e1:c0:2c:c6:fe:f3:dd:d9:3d:6c:fd:90:86:
83:5f:26:a5:91:99:31:07:eb:b0:c4:d8:0c:11:5d:0d:22:57:
f1:e5:06:fe:2f:c6:8f:ad:fc:94:45:35:c0:8f:85:75:44:0b:
12:f1:61:38:d5:4c:f1:75:6a:23:60:59:80:79:69:f2:14:8d:
2a:fb:29:0a:a3:7e:bf:a1:d8:c4:9a:77:7d:0b:67:be:72:6e:
3c:11:08:96:fa:52:13:62:9e:e9:e6:e1:d5:15:59:ab:14:de:
e5:78:21:4b:88:30:23:e8:63:7e:c3:39:7a:d3:f6:8a:96:ba:
97:03:f6:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:50:41 2025 by rpki-client