Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/a75507-5c5c-4842-a1c4-8d56ddcfa4b8/1/bMfzcUDRMXn5pckglknIDDfGpxM.mft
File: bMfzcUDRMXn5pckglknIDDfGpxM.mft (raw, json)
Hash identifier: XvuyGerlCaEC6ZP/tk6vx4rF0cjAMVR25pJB9PugpSs=
Subject key identifier: D7:2D:4F:FC:00:85:57:87:EB:BE:9E:60:D2:A5:FD:8E:AA:9A:10:BD
Authority key identifier: 6C:C7:F3:71:40:D1:31:79:F9:A5:C9:20:96:49:C8:0C:37:C6:A7:13
Certificate issuer: /CN=6cc7f37140d13179f9a5c9209649c80c37c6a713
Certificate serial: 0198D4E000E7E09B66B048AA3173F5391290
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bMfzcUDRMXn5pckglknIDDfGpxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/a75507-5c5c-4842-a1c4-8d56ddcfa4b8/1/bMfzcUDRMXn5pckglknIDDfGpxM.mft
Manifest number: 1261
Signing time: Sat 23 Aug 2025 03:01:46 +0000
Manifest this update: Sat 23 Aug 2025 03:01:46 +0000
Manifest next update: Sun 24 Aug 2025 03:01:46 +0000
Files and hashes: 1: bMfzcUDRMXn5pckglknIDDfGpxM.crl (hash: cNf37bLA8PCfoeml7eD7cJNF9bzDgwtQDdaF1UwmLuk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/a75507-5c5c-4842-a1c4-8d56ddcfa4b8/1/bMfzcUDRMXn5pckglknIDDfGpxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/a75507-5c5c-4842-a1c4-8d56ddcfa4b8/1/bMfzcUDRMXn5pckglknIDDfGpxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/bMfzcUDRMXn5pckglknIDDfGpxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:00:e7:e0:9b:66:b0:48:aa:31:73:f5:39:12:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cc7f37140d13179f9a5c9209649c80c37c6a713
Validity
Not Before: Aug 23 03:01:46 2025 GMT
Not After : Aug 24 03:01:46 2025 GMT
Subject: CN=d72d4ffc00855787ebbe9e60d2a5fd8eaa9a10bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a3:6b:f4:40:07:aa:39:d7:00:88:b8:83:71:
1b:d0:93:35:a5:a0:4e:3c:93:91:70:c0:a2:ee:4c:
b1:4b:07:c0:f4:cb:9f:04:28:d0:92:71:25:4f:e7:
74:42:1c:70:57:91:36:dd:8c:fd:8f:50:91:de:57:
55:67:65:1e:72:29:62:16:33:1e:98:45:96:b0:f0:
f4:b1:75:35:b3:8b:75:45:c1:88:ca:9a:0f:e9:c6:
07:9b:23:5e:14:48:e1:81:c9:82:1e:21:a0:f1:5b:
19:eb:d2:72:7e:07:ea:4a:88:33:7c:b0:b8:f1:0e:
4f:d6:aa:8b:a4:89:03:66:fd:61:db:8b:da:65:18:
4d:7a:17:d3:07:c7:ad:85:29:9f:d3:02:17:d6:08:
0a:5c:70:8c:0a:2a:ac:e1:a2:80:07:b4:dc:a2:4a:
4d:8d:54:76:da:26:46:0e:ae:b7:99:bf:4a:9f:e2:
9b:7a:d0:6e:ef:f8:63:78:8e:f5:5e:12:fa:ae:dd:
82:6b:52:6e:0f:fe:62:55:eb:83:b9:03:4e:3d:a4:
78:cc:ff:90:64:b2:4a:56:d9:48:64:54:ad:97:72:
d6:41:59:ab:b8:b9:12:e0:0a:4e:11:b4:fb:e2:ea:
97:cc:ff:cf:59:83:46:f7:80:1d:37:d1:84:c4:d7:
48:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:2D:4F:FC:00:85:57:87:EB:BE:9E:60:D2:A5:FD:8E:AA:9A:10:BD
X509v3 Authority Key Identifier:
keyid:6C:C7:F3:71:40:D1:31:79:F9:A5:C9:20:96:49:C8:0C:37:C6:A7:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMfzcUDRMXn5pckglknIDDfGpxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a75507-5c5c-4842-a1c4-8d56ddcfa4b8/1/bMfzcUDRMXn5pckglknIDDfGpxM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a75507-5c5c-4842-a1c4-8d56ddcfa4b8/1/bMfzcUDRMXn5pckglknIDDfGpxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:3e:59:a1:6e:5c:93:25:de:0d:e8:25:1c:33:0c:c7:f3:35:
22:41:45:6c:0a:8e:c1:09:ee:bd:76:6d:98:45:d1:49:39:c5:
c8:6f:51:c3:ee:4f:63:85:07:32:c7:ee:3f:a4:d6:b6:99:ab:
a3:40:09:82:9f:04:93:20:d2:c8:fd:a8:f4:cd:d7:dc:5b:a9:
91:62:5e:1b:97:5d:5c:1b:34:64:de:2d:70:6f:95:13:c5:bb:
de:64:7b:a1:7a:5d:19:92:2b:8a:9c:e9:37:c1:a8:95:6d:25:
1a:47:52:55:1d:99:ae:94:a9:91:41:03:82:cd:55:69:74:69:
ff:5a:6c:bc:af:5b:2c:1d:c6:c7:c5:5e:62:9b:47:19:6b:27:
5f:78:62:51:2d:cd:63:20:0c:71:db:0a:66:79:3e:97:0f:95:
8c:cf:68:0b:da:a1:7c:e9:67:9e:ae:23:f8:a9:fb:6c:64:d0:
f1:55:08:50:f2:2b:0c:fa:59:48:c6:a8:5a:cf:b0:9d:bb:d9:
9b:b6:dd:09:c8:ad:b8:4e:23:41:91:c8:6b:dd:3c:6a:4c:7c:
39:6e:a7:00:5b:5a:74:4c:be:0d:85:4b:4a:a9:05:0b:47:18:
cf:9c:f4:29:8d:2e:9b:3f:c8:c9:cd:91:71:23:2f:04:da:1e:
20:5c:70:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:14:49 2025 by rpki-client