Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/f8651b-c12b-42d4-afda-232f4703491f/1/bJSdK9ZO4X711H-WPj1depgrEq8.mft
File: bJSdK9ZO4X711H-WPj1depgrEq8.mft (raw, json)
Hash identifier: jRQyGTfuuwntCN43xLryEtL4MpT/TWp1bsHjV5Z93qQ=
Subject key identifier: CF:C0:CA:55:ED:CD:E5:D3:22:1D:07:A6:3A:B2:8A:22:52:0F:CE:9C
Authority key identifier: 6C:94:9D:2B:D6:4E:E1:7E:F5:D4:7F:96:3E:3D:5D:7A:98:2B:12:AF
Certificate issuer: /CN=6c949d2bd64ee17ef5d47f963e3d5d7a982b12af
Certificate serial: 0198D4E0749B59523547BDF57D2145BA4026
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bJSdK9ZO4X711H-WPj1depgrEq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/f8651b-c12b-42d4-afda-232f4703491f/1/bJSdK9ZO4X711H-WPj1depgrEq8.mft
Manifest number: 0AB5
Signing time: Sat 23 Aug 2025 03:02:16 +0000
Manifest this update: Sat 23 Aug 2025 03:02:16 +0000
Manifest next update: Sun 24 Aug 2025 03:02:16 +0000
Files and hashes: 1: OyVcB1brzSxuoeEjBo4fT0W9OFc.roa (hash: sut6tQHQTuBMJAc0/1shERZEk1RWFKSSDeDy5cd5Klo=)
2: bJSdK9ZO4X711H-WPj1depgrEq8.crl (hash: Gj0K1jWomIo+UKQtwjmnEMzhr+lpnJ2zUaHcN+bOErQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/f8651b-c12b-42d4-afda-232f4703491f/1/bJSdK9ZO4X711H-WPj1depgrEq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/f8651b-c12b-42d4-afda-232f4703491f/1/bJSdK9ZO4X711H-WPj1depgrEq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bJSdK9ZO4X711H-WPj1depgrEq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:74:9b:59:52:35:47:bd:f5:7d:21:45:ba:40:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c949d2bd64ee17ef5d47f963e3d5d7a982b12af
Validity
Not Before: Aug 23 03:02:16 2025 GMT
Not After : Aug 24 03:02:16 2025 GMT
Subject: CN=cfc0ca55edcde5d3221d07a63ab28a22520fce9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ed:5f:7e:88:94:cc:b7:59:fa:f4:29:3e:db:
a4:c6:f3:b4:44:81:9e:5d:48:9e:17:e5:31:f2:fe:
e3:2f:12:c3:36:61:56:84:0f:fe:fe:f9:31:cc:7a:
03:7a:49:43:cf:39:12:ac:53:a4:ae:d6:4c:64:35:
7f:60:44:0f:b9:d6:43:28:fd:2d:ca:16:4e:1c:25:
34:ca:ee:ff:56:94:40:f2:e1:58:20:4b:3a:f3:4e:
2c:59:1d:99:f0:28:79:9d:df:ed:8c:da:6d:cb:95:
6f:5e:1f:25:13:96:af:23:bf:dd:e9:dc:b8:75:e5:
dd:17:cd:1d:4b:c0:ce:a6:df:de:e1:47:49:17:47:
48:56:aa:b2:f3:02:0a:1f:22:d8:62:9d:c6:81:a9:
da:94:57:1c:3d:13:c5:3b:a6:f5:37:6d:b6:e7:3d:
22:37:d6:0d:92:49:a0:21:1e:74:6b:da:af:44:44:
df:df:3d:ca:e6:25:d8:82:13:23:03:69:87:0f:4f:
5b:97:9c:fa:9f:66:ec:06:4d:8a:92:d2:e3:d3:7f:
47:0c:79:cb:54:a0:1a:46:12:b5:69:00:28:0a:85:
62:d9:c8:d0:32:cc:c1:6e:7c:d2:e1:dd:31:14:f4:
16:4d:05:62:91:e0:2b:80:4c:c9:0e:f6:d3:76:2f:
70:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:C0:CA:55:ED:CD:E5:D3:22:1D:07:A6:3A:B2:8A:22:52:0F:CE:9C
X509v3 Authority Key Identifier:
keyid:6C:94:9D:2B:D6:4E:E1:7E:F5:D4:7F:96:3E:3D:5D:7A:98:2B:12:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bJSdK9ZO4X711H-WPj1depgrEq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f8651b-c12b-42d4-afda-232f4703491f/1/bJSdK9ZO4X711H-WPj1depgrEq8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f8651b-c12b-42d4-afda-232f4703491f/1/bJSdK9ZO4X711H-WPj1depgrEq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:d1:c4:71:9a:d6:4e:30:06:9c:94:d2:b3:95:da:c5:4c:b9:
dc:31:c3:8f:95:d5:89:8e:05:d6:d4:6b:7d:e5:e3:f9:ff:83:
d4:70:65:51:30:2e:59:31:4b:f2:fc:a1:09:73:6c:cd:9e:fe:
d8:2f:37:eb:56:73:40:d9:23:2f:b4:59:b9:67:9a:97:6e:a2:
6d:25:1c:fa:52:b2:92:a2:31:fd:c8:ec:ae:d8:5c:f1:eb:d3:
02:45:a1:cb:c9:65:88:9f:28:c8:2d:27:c0:7f:03:f0:47:70:
1a:fb:6a:11:e2:41:a3:2b:bc:39:89:2a:ee:b3:cf:33:aa:3c:
ba:9c:1d:18:45:20:a6:df:16:f6:09:f2:3c:5f:4e:77:71:65:
b0:d0:4d:04:26:69:bc:75:66:30:36:3d:8f:42:f6:a3:b3:8c:
d3:9f:91:93:1a:69:dd:35:b2:02:48:bd:85:fb:cc:91:7c:ea:
2d:b3:63:a4:ae:19:b8:1e:86:b1:fa:26:46:bb:3c:87:50:6c:
31:8a:25:01:a9:56:b3:75:53:ec:d4:b2:40:6c:90:42:f8:c6:
49:9d:b6:dd:1f:9c:33:7d:eb:d0:b6:78:23:2a:15:32:fe:c5:
f5:3d:94:d4:21:e7:56:19:45:6b:40:e0:b9:3f:b7:65:c6:9d:
0f:94:6c:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:11:52 2025 by rpki-client