Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.mft
File: bsJOKsnNUzmWUVkM85Gta78bPiY.mft (raw, json)
Hash identifier: c75rhzvarR802dGEkXTrJri5JRJWJRF4jI02cED/EPc=
Subject key identifier: CD:07:48:3B:51:D6:49:B0:22:AF:6A:8D:C7:CB:83:F5:F4:7C:FC:B6
Authority key identifier: 6E:C2:4E:2A:C9:CD:53:39:96:51:59:0C:F3:91:AD:6B:BF:1B:3E:26
Certificate issuer: /CN=6ec24e2ac9cd53399651590cf391ad6bbf1b3e26
Certificate serial: 0198D58398291CCB1A0B9774965E1387A3D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bsJOKsnNUzmWUVkM85Gta78bPiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.mft
Manifest number: 07B2
Signing time: Sat 23 Aug 2025 06:00:27 +0000
Manifest this update: Sat 23 Aug 2025 06:00:27 +0000
Manifest next update: Sun 24 Aug 2025 06:00:27 +0000
Files and hashes: 1: JztZZ5jdsYiJwH6r3ruJ841yjPA.roa (hash: fWtXOGVQeuynraDkbnyZnR91bHF3bELX/gnfpid099o=)
2: bsJOKsnNUzmWUVkM85Gta78bPiY.crl (hash: 349l9FnC233Q35gva3YxGWS3MeQdysHJha/d/UJbG4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bsJOKsnNUzmWUVkM85Gta78bPiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:98:29:1c:cb:1a:0b:97:74:96:5e:13:87:a3:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ec24e2ac9cd53399651590cf391ad6bbf1b3e26
Validity
Not Before: Aug 23 06:00:27 2025 GMT
Not After : Aug 24 06:00:27 2025 GMT
Subject: CN=cd07483b51d649b022af6a8dc7cb83f5f47cfcb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b6:35:67:ee:05:ed:bd:16:47:4a:09:54:ba:
cb:e6:50:fb:48:0a:c9:cd:d1:f4:91:5b:3b:04:03:
c9:fa:af:c1:90:98:7b:e1:72:bf:a7:1b:e4:e3:68:
3b:41:13:bc:f6:a7:52:2a:52:e3:11:80:67:10:fd:
14:70:4e:c4:ce:84:7b:f9:38:b0:a9:95:65:65:74:
1e:94:61:93:62:b9:fc:80:a7:68:19:b8:cb:a8:79:
95:d7:c2:15:71:4b:66:b2:91:9b:ec:a8:3c:ad:35:
bb:e5:5f:e0:7d:b5:ea:36:38:a6:bb:58:ca:dc:04:
ac:53:e7:c0:2e:95:b9:ed:3b:ba:7d:ef:06:65:13:
49:31:ba:a2:96:5d:7b:24:9a:5d:62:1f:33:24:a6:
e5:73:76:99:0d:dc:d6:56:1a:76:67:c4:33:cb:e4:
10:38:04:67:2d:f6:ee:c3:6d:88:ad:7a:21:0d:c6:
0f:ff:74:39:53:c1:1e:10:0f:1e:01:42:e5:27:e0:
52:70:01:b8:cd:9d:bc:48:fc:21:37:c6:13:d0:51:
21:12:99:a9:c2:3a:d8:41:2b:88:40:a4:01:90:a2:
ca:d3:4b:5f:34:b1:34:ad:ef:d9:01:3f:ff:87:82:
76:3f:fd:55:ba:11:1e:3b:10:ac:fa:1f:57:54:c3:
c2:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:07:48:3B:51:D6:49:B0:22:AF:6A:8D:C7:CB:83:F5:F4:7C:FC:B6
X509v3 Authority Key Identifier:
keyid:6E:C2:4E:2A:C9:CD:53:39:96:51:59:0C:F3:91:AD:6B:BF:1B:3E:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bsJOKsnNUzmWUVkM85Gta78bPiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:8c:87:e0:03:22:30:5d:7c:78:13:9f:fc:67:98:3d:c9:8c:
50:82:e9:66:c8:29:53:3e:2a:6d:64:76:eb:19:9d:4f:12:07:
15:4f:b7:f0:49:94:b9:22:f6:32:85:35:ef:7f:3a:ff:a8:6c:
d6:1f:8e:4b:50:9a:f4:13:c2:b1:d9:55:09:a4:58:6d:07:0f:
f4:31:59:49:5f:68:fb:a2:ea:4b:fe:d2:8f:25:e1:2c:36:32:
02:f3:61:5e:d3:fe:12:bb:f2:35:26:d3:19:1f:b9:cf:f3:65:
c2:78:f8:1a:3b:10:1d:84:c7:b9:96:98:21:ee:a7:57:a8:29:
3d:f3:2b:e0:35:49:1c:54:a9:12:4b:33:ce:a5:ca:dd:10:3e:
d4:93:23:dc:b3:51:20:10:2a:89:d8:7d:2b:87:11:93:33:0b:
82:52:14:e6:e9:47:9f:2d:ef:4c:10:bf:e9:dd:c9:e8:dc:1b:
7d:e1:b7:cd:a2:f0:c2:93:ed:b5:35:98:5c:a0:d5:9d:1d:33:
bf:c6:2d:1e:44:a7:15:ef:55:a7:f8:64:06:c7:01:12:85:51:
79:0d:00:cb:90:d0:78:84:ac:ca:8b:3a:7d:e3:22:9c:83:dc:
c8:03:18:4e:67:12:8e:05:bf:64:83:0d:4d:10:94:51:06:6a:
41:81:98:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:32:46 2025 by rpki-client