Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/b7ca89-70f2-408f-a4e4-b4a0cb8ed821/1/bWUK8XJES1IRanpn10qsffilXhw.mft
File: bWUK8XJES1IRanpn10qsffilXhw.mft (raw, json)
Hash identifier: povi7RPnZVs10N/qlXkllnMnwAQZXj4ggnebe5aktgw=
Subject key identifier: E8:CE:72:97:C2:3C:F8:82:BF:5A:39:02:E8:1A:DA:BA:F0:26:BD:95
Authority key identifier: 6D:65:0A:F1:72:44:4B:52:11:6A:7A:67:D7:4A:AC:7D:F8:A5:5E:1C
Certificate issuer: /CN=6d650af172444b52116a7a67d74aac7df8a55e1c
Certificate serial: 0198D5F19F1CBA99893510B5C70AC70E1466
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWUK8XJES1IRanpn10qsffilXhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/b7ca89-70f2-408f-a4e4-b4a0cb8ed821/1/bWUK8XJES1IRanpn10qsffilXhw.mft
Manifest number: 074A
Signing time: Sat 23 Aug 2025 08:00:38 +0000
Manifest this update: Sat 23 Aug 2025 08:00:38 +0000
Manifest next update: Sun 24 Aug 2025 08:00:38 +0000
Files and hashes: 1: Eo0dId6A79FMWJgsJrbvuL3-EFE.roa (hash: 681u60p0nhE1DcYKUWV+uIEbDRMQt7MvDh5nM8HZoDY=)
2: JA7bmNFaXPZ3zOhIhSoSK6cX0GM.roa (hash: /9NIaaC/nQfKu4JBvIQ0FkNL7E03OA0xPdL0pUFpcGQ=)
3: bWUK8XJES1IRanpn10qsffilXhw.crl (hash: FTXA69U1A//VYrs/v3UU3yZfJDqaBKt14mVXKQMQOQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/b7ca89-70f2-408f-a4e4-b4a0cb8ed821/1/bWUK8XJES1IRanpn10qsffilXhw.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/b7ca89-70f2-408f-a4e4-b4a0cb8ed821/1/bWUK8XJES1IRanpn10qsffilXhw.mft
rsync://rpki.ripe.net/repository/DEFAULT/bWUK8XJES1IRanpn10qsffilXhw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:9f:1c:ba:99:89:35:10:b5:c7:0a:c7:0e:14:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d650af172444b52116a7a67d74aac7df8a55e1c
Validity
Not Before: Aug 23 08:00:38 2025 GMT
Not After : Aug 24 08:00:38 2025 GMT
Subject: CN=e8ce7297c23cf882bf5a3902e81adabaf026bd95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7f:c1:62:56:e4:88:08:70:f0:79:f6:91:13:
38:b3:74:2f:f7:ee:60:ab:ec:5e:b7:ef:1e:55:8d:
b9:33:99:e7:b9:cf:44:ce:00:94:c6:3d:90:5e:fa:
fb:2b:59:2b:13:f3:bd:da:63:79:6f:20:23:22:39:
81:c1:65:e5:ae:b5:4e:52:84:23:08:b8:94:10:dc:
03:cd:cb:e0:f6:26:6d:29:16:f2:57:54:fa:8a:2d:
ca:84:62:56:c9:fe:de:c4:63:6e:8f:d8:2f:64:0c:
72:5e:98:27:b3:8e:02:d8:82:89:a4:fb:6a:d8:08:
8e:14:3b:3d:23:f8:9c:34:7f:19:bb:11:09:d9:d9:
6b:d9:00:2c:af:04:49:ca:07:4c:a7:76:d8:d9:32:
13:f9:e5:7f:28:15:70:51:c9:ca:33:ab:b8:8b:4b:
9e:db:4a:61:e7:95:24:0c:8d:7a:a1:53:48:ac:0d:
86:79:a8:cf:af:da:56:e5:7d:39:87:d6:ce:80:76:
35:fa:8c:b0:0f:c7:c3:36:b3:60:19:42:06:10:69:
6c:7b:67:59:5a:3b:64:73:01:15:c5:8b:63:bb:f7:
3c:a8:5d:7f:3f:72:6a:44:59:8a:2c:fc:f5:6b:a6:
a5:4a:64:2f:84:fe:4e:f6:85:66:14:b1:3c:31:5f:
e2:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:CE:72:97:C2:3C:F8:82:BF:5A:39:02:E8:1A:DA:BA:F0:26:BD:95
X509v3 Authority Key Identifier:
keyid:6D:65:0A:F1:72:44:4B:52:11:6A:7A:67:D7:4A:AC:7D:F8:A5:5E:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWUK8XJES1IRanpn10qsffilXhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/b7ca89-70f2-408f-a4e4-b4a0cb8ed821/1/bWUK8XJES1IRanpn10qsffilXhw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/b7ca89-70f2-408f-a4e4-b4a0cb8ed821/1/bWUK8XJES1IRanpn10qsffilXhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:eb:d2:46:57:f5:e8:c8:de:05:67:20:38:2a:46:00:b0:4b:
f3:14:2c:b8:71:c4:e5:ff:94:0f:21:63:df:9a:64:45:fc:60:
14:74:d4:ca:1e:a0:b7:60:29:43:10:ca:a9:2b:67:f3:5c:8e:
74:69:c0:b4:61:3e:8f:5a:5e:9c:45:74:6d:52:73:08:4d:b2:
48:2d:4b:7d:d5:37:9b:20:13:37:8e:c2:a0:f7:cc:cd:fa:16:
c2:cc:e3:47:8b:d1:b7:e9:35:cc:c2:ef:fe:41:9f:ae:1d:87:
50:69:04:3e:c9:ae:aa:79:22:4c:9b:03:a9:97:1d:81:a4:d1:
b9:aa:be:b0:2b:6b:50:15:3d:52:4c:fe:ea:eb:15:79:5e:44:
bd:72:e6:68:12:60:af:d1:b0:37:9d:3e:c9:9e:c5:d8:4e:76:
0f:58:dc:24:0e:e4:1a:6e:16:1f:18:dd:5a:4f:90:c1:60:77:
d1:da:ba:42:39:45:44:39:1b:20:7b:43:93:0b:68:6f:f7:bb:
f3:87:be:ba:82:d8:45:af:2b:98:80:36:f7:ea:f4:d5:43:81:
ee:02:73:29:54:ec:47:d4:ea:8c:d6:21:ec:7c:80:52:f7:39:
1b:68:04:ff:f2:ea:57:45:1f:af:81:9e:e9:33:31:6a:c0:0c:
40:22:ea:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:31:02 2025 by rpki-client