Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/bDgMi05V5ZCBr3OqGTXhCgEgV_o.mft
File: bDgMi05V5ZCBr3OqGTXhCgEgV_o.mft (raw, json)
Hash identifier: dbEVx0AfljohdTPFvbpYWRb0mXTOU2j7XUt5gIs/rhw=
Subject key identifier: 7E:27:56:7A:18:A7:A0:84:92:FC:6F:91:C3:4A:6D:E3:4B:C1:82:95
Authority key identifier: 6C:38:0C:8B:4E:55:E5:90:81:AF:73:AA:19:35:E1:0A:01:20:57:FA
Certificate issuer: /CN=6c380c8b4e55e59081af73aa1935e10a012057fa
Certificate serial: 0198D65F435FEE2FA4B36B0250BB91426C18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bDgMi05V5ZCBr3OqGTXhCgEgV_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/bDgMi05V5ZCBr3OqGTXhCgEgV_o.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 10:00:23 +0000
Manifest this update: Sat 23 Aug 2025 10:00:23 +0000
Manifest next update: Sun 24 Aug 2025 10:00:23 +0000
Files and hashes: 1: G8ZxZv3rAsdyjkZIWbmu2tXV_Og.roa (hash: lGe21WZY7KMyNN8ysWzw0Q97lgbjrid4+uoj3fQOhEo=)
2: bDgMi05V5ZCBr3OqGTXhCgEgV_o.crl (hash: 0YN54K6MKgG450jeZLs1tPNGjWR7kMw8vi0Pg7D/niE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/bDgMi05V5ZCBr3OqGTXhCgEgV_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/bDgMi05V5ZCBr3OqGTXhCgEgV_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/bDgMi05V5ZCBr3OqGTXhCgEgV_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:43:5f:ee:2f:a4:b3:6b:02:50:bb:91:42:6c:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c380c8b4e55e59081af73aa1935e10a012057fa
Validity
Not Before: Aug 23 10:00:23 2025 GMT
Not After : Aug 24 10:00:23 2025 GMT
Subject: CN=7e27567a18a7a08492fc6f91c34a6de34bc18295
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:bd:bd:44:02:94:18:ad:68:99:70:5e:b5:7f:
da:5e:3a:1e:32:85:22:44:5c:87:25:f9:d7:39:18:
db:e2:ff:76:fe:fd:2a:26:e7:b9:7c:8e:87:aa:8b:
22:fe:a2:2a:76:5b:b9:2e:2b:aa:e7:43:44:89:6d:
06:89:c0:0e:ca:3c:88:92:1d:c0:da:a6:e8:d8:69:
9e:aa:0e:be:c9:e6:dd:2d:64:aa:d9:b0:31:19:fc:
7d:a6:7a:79:c5:96:ae:10:28:2c:96:d6:cd:75:9e:
e9:72:c8:02:59:f7:ea:00:68:a1:87:fd:ca:24:d2:
13:67:19:b1:71:81:8d:df:7c:19:d6:4d:71:6c:a3:
31:76:e5:41:fc:38:38:a4:86:30:16:0d:24:f1:57:
eb:d0:b6:57:60:85:fb:49:6b:3b:4d:fe:bf:16:56:
b8:d8:c4:49:b0:80:c6:66:60:43:9d:54:63:e5:74:
dd:bb:c1:57:9e:3f:a6:e9:7c:40:ca:d7:84:b2:33:
2d:dd:5b:dc:e9:a5:4f:8b:c8:bb:9e:1f:ef:80:37:
38:0c:26:df:06:0c:69:3f:44:b3:52:7f:70:28:ec:
e1:1a:f9:cf:8b:be:fe:f4:fc:7d:ab:42:f2:f0:9c:
dd:07:17:ba:77:f8:36:64:45:46:35:57:ce:26:54:
c1:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:27:56:7A:18:A7:A0:84:92:FC:6F:91:C3:4A:6D:E3:4B:C1:82:95
X509v3 Authority Key Identifier:
keyid:6C:38:0C:8B:4E:55:E5:90:81:AF:73:AA:19:35:E1:0A:01:20:57:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bDgMi05V5ZCBr3OqGTXhCgEgV_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/bDgMi05V5ZCBr3OqGTXhCgEgV_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/bDgMi05V5ZCBr3OqGTXhCgEgV_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:d8:51:24:37:c0:7a:b2:0c:75:20:db:3a:ed:88:30:be:f0:
53:9c:5f:a9:51:a2:48:ad:86:49:59:4d:5f:18:d5:2b:23:15:
de:f6:4e:c1:fd:2b:0f:86:39:c9:61:18:06:14:ea:ca:13:76:
08:02:85:af:d9:dd:29:83:09:70:ec:10:bc:20:52:79:be:b7:
b6:27:7c:58:0a:30:68:a9:d9:7f:31:e1:58:5c:8b:f4:74:90:
b6:60:7a:c2:85:06:bf:11:17:3d:bc:92:d5:1a:4f:23:81:9d:
a0:12:ed:8a:7c:da:40:f6:d9:8f:20:09:65:82:42:2b:88:26:
44:32:05:91:a5:a9:79:15:38:aa:ca:f9:8e:3a:4e:80:75:d4:
39:91:50:e8:24:6a:f3:8c:d2:51:bb:17:64:72:c5:3a:1d:d0:
d2:b9:b7:e1:9c:94:c1:31:e4:be:3e:4b:96:82:8d:a6:0e:a9:
84:4e:77:dd:6d:bd:71:03:35:de:b3:62:f4:8b:7c:f6:01:24:
61:56:cd:61:de:99:64:4c:c2:3e:a7:0d:7c:de:ff:9d:a1:53:
f0:48:0e:a6:78:d7:60:40:8c:50:bc:79:d7:05:85:df:64:7e:
45:fa:93:23:06:2a:fa:87:92:dc:04:13:32:c0:02:54:98:21:
b2:a5:47:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:04:14 2025 by rpki-client