Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/d74cb2-f0fc-4f2c-be01-536e1f0c4ff9/1/bNxpTwwyVdXVVz8TKOU2VM-yLE0.mft
File: bNxpTwwyVdXVVz8TKOU2VM-yLE0.mft (raw, json)
Hash identifier: 88J3BYEP1UvPuSJsX2O8iOoILyYTjWXpsnwGj1sxvLI=
Subject key identifier: 77:01:73:7B:2C:60:C8:43:67:D3:95:99:B7:59:93:27:CF:22:D0:B8
Authority key identifier: 6C:DC:69:4F:0C:32:55:D5:D5:57:3F:13:28:E5:36:54:CF:B2:2C:4D
Certificate issuer: /CN=6cdc694f0c3255d5d5573f1328e53654cfb22c4d
Certificate serial: 0198D54E55CA70FE6AB9CCBD440BFAAC062B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bNxpTwwyVdXVVz8TKOU2VM-yLE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/d74cb2-f0fc-4f2c-be01-536e1f0c4ff9/1/bNxpTwwyVdXVVz8TKOU2VM-yLE0.mft
Manifest number: 0DBE
Signing time: Sat 23 Aug 2025 05:02:17 +0000
Manifest this update: Sat 23 Aug 2025 05:02:17 +0000
Manifest next update: Sun 24 Aug 2025 05:02:17 +0000
Files and hashes: 1: bNxpTwwyVdXVVz8TKOU2VM-yLE0.crl (hash: aCqpox15goPUxASuSb7XNlG/uxbaEkCm8uNWjDr9Qu4=)
2: mf0dhA7BgjaM7eDjfmF7DxTSVfY.roa (hash: 1vX40l9RdR1damElfdrSUBtrrLE1iQPxYSNwcaRMl0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/d74cb2-f0fc-4f2c-be01-536e1f0c4ff9/1/bNxpTwwyVdXVVz8TKOU2VM-yLE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/d74cb2-f0fc-4f2c-be01-536e1f0c4ff9/1/bNxpTwwyVdXVVz8TKOU2VM-yLE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bNxpTwwyVdXVVz8TKOU2VM-yLE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:55:ca:70:fe:6a:b9:cc:bd:44:0b:fa:ac:06:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cdc694f0c3255d5d5573f1328e53654cfb22c4d
Validity
Not Before: Aug 23 05:02:17 2025 GMT
Not After : Aug 24 05:02:17 2025 GMT
Subject: CN=7701737b2c60c84367d39599b7599327cf22d0b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:af:54:2b:79:2d:e7:06:e8:a9:b5:33:41:25:
f7:c1:38:97:b5:52:0d:4f:87:54:50:9b:48:73:c9:
96:58:30:30:8b:7b:b0:5f:1c:c0:69:9f:cf:20:f2:
5f:d1:ea:6f:ab:a6:5b:f6:0b:01:ee:52:cb:c4:4e:
1b:00:51:78:7c:06:7d:15:21:3b:b7:9c:20:23:2d:
c0:f3:a4:30:ab:8e:4f:31:2a:af:91:43:0c:a8:22:
0f:90:16:57:fc:6f:cc:ca:1f:44:a1:4c:71:66:45:
7c:d8:69:18:dd:17:c4:44:10:30:1f:9d:0d:f2:06:
8f:3b:64:93:13:78:d4:b8:1c:37:07:11:99:09:c5:
3a:99:c3:cd:cb:ed:7a:a6:d7:f3:e1:ae:03:5d:25:
b9:0a:5a:77:7c:95:b7:58:8f:b1:52:62:cd:1e:98:
96:c1:c6:2a:2e:1c:e5:c9:d1:98:99:15:c1:1a:03:
55:56:c3:39:ff:4b:5f:90:d5:1a:52:bd:46:32:26:
d9:2a:79:bb:cb:e8:6c:5a:0c:6c:9a:d3:92:40:9a:
11:34:7b:e4:c8:d9:14:ad:71:93:0b:9e:b8:fc:9e:
92:d8:4d:de:c5:78:38:d6:41:d4:9c:f2:35:15:47:
d3:dd:46:90:d6:d1:38:02:3f:7b:9d:b2:5c:a0:f8:
64:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:01:73:7B:2C:60:C8:43:67:D3:95:99:B7:59:93:27:CF:22:D0:B8
X509v3 Authority Key Identifier:
keyid:6C:DC:69:4F:0C:32:55:D5:D5:57:3F:13:28:E5:36:54:CF:B2:2C:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bNxpTwwyVdXVVz8TKOU2VM-yLE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d74cb2-f0fc-4f2c-be01-536e1f0c4ff9/1/bNxpTwwyVdXVVz8TKOU2VM-yLE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d74cb2-f0fc-4f2c-be01-536e1f0c4ff9/1/bNxpTwwyVdXVVz8TKOU2VM-yLE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:74:c3:dd:d3:9d:b6:ed:6b:4b:2e:e3:64:32:43:33:87:3e:
9e:1a:5c:db:c0:e5:24:b4:d6:5e:b3:e4:d6:97:3d:0e:55:11:
f0:50:b4:0a:cb:9c:00:39:17:2d:d5:fc:6c:77:23:c4:cd:04:
73:c8:d9:8d:13:a3:9a:04:32:9d:42:5c:e9:f8:4a:65:dc:8e:
cd:23:67:50:d2:16:eb:dc:a6:67:70:b4:53:e6:b1:6c:49:60:
7f:42:59:cf:d0:1f:0b:99:d9:e5:35:2b:21:5f:7d:68:6d:54:
e9:86:b9:86:10:a8:8d:52:7e:9e:2e:1a:99:5f:84:3a:4d:70:
0a:0f:9e:d8:31:e5:50:ec:c5:c0:a4:3e:1b:99:3f:2b:a3:d4:
9b:fb:d8:05:d9:29:96:81:7a:f0:50:b9:71:58:bc:07:aa:57:
63:9b:21:d8:7e:fc:ff:3f:a1:06:2a:0b:8c:9f:f2:da:36:e4:
cc:59:b3:03:76:d1:ec:ae:69:80:ac:ed:67:e8:ee:4a:8f:19:
df:da:0d:62:f6:20:26:86:57:45:f0:95:ce:a8:3f:79:aa:f0:
bb:24:40:33:4f:1e:25:f7:6f:39:6a:a2:e0:49:46:0b:d7:83:
72:81:d2:2e:cf:b4:1a:be:36:1b:27:f2:47:a2:47:31:35:0a:
1f:c3:61:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:38:04 2025 by rpki-client