Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/e6a120-41b4-4db4-83b9-eef529a477e7/1/bAhhkss_KPWLIUTd4tkaIxIFb8g.mft
File: bAhhkss_KPWLIUTd4tkaIxIFb8g.mft (raw, json)
Hash identifier: 48UaOCyCbH4bx2YKqQYLs7S2X64ZGtQd9W2tX9HagZ4=
Subject key identifier: 95:A5:5A:00:B3:63:14:60:B6:17:31:6E:2A:64:D0:78:34:4D:28:26
Authority key identifier: 6C:08:61:92:CB:3F:28:F5:8B:21:44:DD:E2:D9:1A:23:12:05:6F:C8
Certificate issuer: /CN=6c086192cb3f28f58b2144dde2d91a2312056fc8
Certificate serial: 0198D54E42615DE29D50641476521199D49A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bAhhkss_KPWLIUTd4tkaIxIFb8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/e6a120-41b4-4db4-83b9-eef529a477e7/1/bAhhkss_KPWLIUTd4tkaIxIFb8g.mft
Manifest number: 0670
Signing time: Sat 23 Aug 2025 05:02:12 +0000
Manifest this update: Sat 23 Aug 2025 05:02:12 +0000
Manifest next update: Sun 24 Aug 2025 05:02:12 +0000
Files and hashes: 1: bAhhkss_KPWLIUTd4tkaIxIFb8g.crl (hash: JQEWgTRaHB+tLwB5aIiPLp3GFhJ7cz1wO5GmYBHF1i8=)
2: h0CiyPqTT3nB3mru9Rx5ThXMJsc.roa (hash: gn5UUlC6bwE9RLEUWaV0t2xvepay+0W+QHAMC8Fs/OE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/e6a120-41b4-4db4-83b9-eef529a477e7/1/bAhhkss_KPWLIUTd4tkaIxIFb8g.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/e6a120-41b4-4db4-83b9-eef529a477e7/1/bAhhkss_KPWLIUTd4tkaIxIFb8g.mft
rsync://rpki.ripe.net/repository/DEFAULT/bAhhkss_KPWLIUTd4tkaIxIFb8g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:42:61:5d:e2:9d:50:64:14:76:52:11:99:d4:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c086192cb3f28f58b2144dde2d91a2312056fc8
Validity
Not Before: Aug 23 05:02:12 2025 GMT
Not After : Aug 24 05:02:12 2025 GMT
Subject: CN=95a55a00b3631460b617316e2a64d078344d2826
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a0:71:df:42:26:9b:07:71:09:0e:bc:e0:7b:
0c:e1:50:50:6c:a5:3e:0f:e8:fe:8d:c7:6a:c7:8b:
46:96:10:3d:44:5c:02:cf:55:51:5b:54:c4:92:13:
23:2e:1b:1b:76:22:9d:e1:4b:d6:6a:bc:3a:a0:fd:
fa:fd:b1:21:a6:fe:3b:e7:66:3b:3c:59:2b:8f:b7:
a6:1e:90:6c:53:d3:9c:91:c5:dc:92:51:26:83:10:
8d:f0:79:2a:dd:07:98:d8:3e:aa:b2:6f:f2:ef:a6:
b4:3d:8c:58:b5:63:53:07:c3:48:7c:ec:29:4f:7f:
82:e0:0f:b7:88:40:ac:68:93:9e:a0:47:ef:61:29:
78:74:75:c9:e8:8a:3d:67:48:6e:89:ea:84:3b:3d:
d4:96:42:24:6c:d8:d8:41:a9:72:17:c9:a5:ce:7d:
e5:6f:6b:e8:46:73:b8:46:07:89:10:97:73:4c:26:
17:f1:4d:53:18:7c:75:7d:32:25:ff:bb:dc:4c:28:
00:ca:06:0f:4b:4d:1d:65:9c:9b:4e:72:5e:6c:a1:
2e:07:43:5f:b2:7f:37:3d:f7:81:0a:e8:d9:00:8c:
ba:f7:60:16:f1:42:5d:e8:e0:91:91:3f:ed:40:3a:
ad:d8:80:77:71:7c:bf:e7:a5:0d:07:7b:94:ef:04:
d6:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:A5:5A:00:B3:63:14:60:B6:17:31:6E:2A:64:D0:78:34:4D:28:26
X509v3 Authority Key Identifier:
keyid:6C:08:61:92:CB:3F:28:F5:8B:21:44:DD:E2:D9:1A:23:12:05:6F:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bAhhkss_KPWLIUTd4tkaIxIFb8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/e6a120-41b4-4db4-83b9-eef529a477e7/1/bAhhkss_KPWLIUTd4tkaIxIFb8g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/e6a120-41b4-4db4-83b9-eef529a477e7/1/bAhhkss_KPWLIUTd4tkaIxIFb8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:79:9f:8f:d9:bf:4a:44:d3:16:fa:1f:cb:b5:6c:fc:9b:2a:
6b:ac:85:8f:29:ce:3f:ff:6b:fc:c2:6b:8f:4d:60:e6:67:e4:
32:9b:9c:5b:27:cc:9b:60:ec:a6:ab:a2:31:ee:83:f3:80:b0:
a6:33:e0:ac:e3:12:4d:1f:25:e3:fc:a6:13:97:0d:2d:a5:70:
93:f7:d8:e8:7f:cb:13:9b:02:e2:51:38:0a:76:6a:94:f8:c9:
4c:7a:7b:cd:1a:36:2c:07:c8:55:59:34:19:ae:f5:2a:df:fc:
1f:87:0b:25:9c:65:e4:cf:f4:de:4b:cc:69:c2:c9:08:99:8d:
b8:0b:ec:89:58:3b:39:e3:9a:1b:62:35:e9:05:ea:0e:1b:55:
ea:ac:bc:96:bb:4d:b6:3d:48:81:34:85:e7:aa:a5:0b:8e:d5:
59:8a:42:07:5c:88:4c:e9:66:4d:38:ec:5d:3d:c2:33:83:06:
8e:05:33:a8:f5:9c:4e:6e:a1:d1:ee:63:65:39:30:6d:98:08:
d6:87:af:88:e2:00:81:6d:bf:09:8e:0d:e6:db:a4:97:47:66:
59:a1:f7:42:c5:53:c0:bc:a4:42:aa:d0:b6:a0:21:1e:e9:b9:
fe:58:31:2c:cf:eb:c8:34:1f:19:09:05:d2:7e:b3:70:66:83:
1f:14:58:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:22:26 2025 by rpki-client