Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/45cf37-afa5-4994-aedb-485b20952d93/1/Bs5bKEZrknQlJgMTktlL8aVY6EQ.mft
File: Bs5bKEZrknQlJgMTktlL8aVY6EQ.mft (raw, json)
Hash identifier: npGkc5gTcnPAVush47PHzDkZz7DYufSE5faeWWY5YeM=
Subject key identifier: D6:22:4E:BC:C6:8B:CB:E5:8C:8F:67:27:C6:E5:8E:C3:CC:D4:D4:13
Authority key identifier: 06:CE:5B:28:46:6B:92:74:25:26:03:13:92:D9:4B:F1:A5:58:E8:44
Certificate issuer: /CN=06ce5b28466b92742526031392d94bf1a558e844
Certificate serial: 0198D47348496A40312760661B663A2B4E9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bs5bKEZrknQlJgMTktlL8aVY6EQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/45cf37-afa5-4994-aedb-485b20952d93/1/Bs5bKEZrknQlJgMTktlL8aVY6EQ.mft
Manifest number: 1388
Signing time: Sat 23 Aug 2025 01:03:01 +0000
Manifest this update: Sat 23 Aug 2025 01:03:01 +0000
Manifest next update: Sun 24 Aug 2025 01:03:01 +0000
Files and hashes: 1: Bs5bKEZrknQlJgMTktlL8aVY6EQ.crl (hash: MksfFC56mwvhJytG49PhnZvchXDE1OyDTjKgpw/g7hE=)
2: ELJxyLmNkAO4LH2akysrOoq_xxw.roa (hash: B5RpIzdoHJeEU/i0KYBMhNoTeQCE20VYj0EU96xzN7E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/45cf37-afa5-4994-aedb-485b20952d93/1/Bs5bKEZrknQlJgMTktlL8aVY6EQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/45cf37-afa5-4994-aedb-485b20952d93/1/Bs5bKEZrknQlJgMTktlL8aVY6EQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bs5bKEZrknQlJgMTktlL8aVY6EQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:48:49:6a:40:31:27:60:66:1b:66:3a:2b:4e:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06ce5b28466b92742526031392d94bf1a558e844
Validity
Not Before: Aug 23 01:03:01 2025 GMT
Not After : Aug 24 01:03:01 2025 GMT
Subject: CN=d6224ebcc68bcbe58c8f6727c6e58ec3ccd4d413
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:2e:08:fc:55:05:72:1c:74:2a:7e:38:08:a1:
16:a4:b7:5f:79:7f:fb:65:dd:0d:38:c5:3d:c1:85:
1f:de:50:59:f8:3c:ab:3b:6a:44:98:30:89:8b:2e:
e3:78:ec:79:02:22:cd:43:bb:24:28:7c:15:19:7a:
3a:f9:95:0c:ad:ad:01:85:c4:08:a5:7a:56:d9:d6:
9b:49:f6:98:29:cb:6a:13:bb:89:bc:a1:53:23:15:
2a:b2:35:f1:c9:1d:05:25:b7:02:62:3e:69:96:52:
ec:cf:6a:f7:f9:b6:88:a2:b5:0e:ad:d6:a3:f8:f8:
2e:6d:f4:58:38:22:36:17:9b:d9:7e:80:1e:d4:dc:
5c:10:9a:67:66:f7:6e:f5:bf:2c:2a:c5:49:06:bd:
4a:d8:4c:91:1a:f7:f0:6f:a5:60:3b:dd:e3:5d:a0:
4b:d8:cc:dd:c2:2b:74:5e:e0:08:a3:80:39:63:39:
2a:ec:30:ff:2c:f3:d9:14:5b:a9:d5:ab:8a:a0:5c:
f7:5f:b2:7a:e4:33:29:12:40:c9:28:2d:2a:6c:55:
cf:53:3b:9e:1e:0f:d0:a6:0c:44:11:af:50:81:63:
9f:0f:5a:16:90:6f:84:95:fd:40:62:b4:bc:ac:7d:
7e:28:a1:8c:bb:5d:cc:d9:33:87:51:0e:5a:7a:91:
2d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:22:4E:BC:C6:8B:CB:E5:8C:8F:67:27:C6:E5:8E:C3:CC:D4:D4:13
X509v3 Authority Key Identifier:
keyid:06:CE:5B:28:46:6B:92:74:25:26:03:13:92:D9:4B:F1:A5:58:E8:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bs5bKEZrknQlJgMTktlL8aVY6EQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/45cf37-afa5-4994-aedb-485b20952d93/1/Bs5bKEZrknQlJgMTktlL8aVY6EQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/45cf37-afa5-4994-aedb-485b20952d93/1/Bs5bKEZrknQlJgMTktlL8aVY6EQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:2e:d6:76:31:32:db:ce:4e:c2:8e:72:29:3d:10:d1:d8:3c:
a9:c4:30:14:d0:82:79:40:2a:4d:08:d0:ec:8b:8f:b9:e4:d5:
86:91:18:be:f8:dc:a1:78:ec:94:9f:88:87:eb:9d:16:21:32:
86:ec:9a:71:71:72:6c:05:8b:c6:4c:54:7f:55:6b:bb:b9:32:
99:c8:3e:d2:f4:20:ba:b4:19:1a:11:46:ba:a9:be:80:38:45:
4a:00:4c:47:62:17:de:ca:e6:a1:37:d2:0e:d4:e8:a7:fb:87:
05:c6:f9:a7:e3:7d:a7:77:5a:a2:48:4a:34:83:22:04:10:b9:
93:97:56:73:25:30:64:39:f3:d9:a3:4a:a3:86:78:49:74:32:
84:22:f0:7c:bb:e4:8d:92:58:48:ca:86:69:68:ac:74:4d:bd:
20:a1:1e:73:65:80:29:05:54:71:ea:d0:88:bd:21:bd:a9:b9:
d8:57:ac:82:83:87:d1:a0:f3:9e:bd:3c:d1:54:29:69:dd:64:
93:70:bc:87:85:06:1e:05:f0:d6:f8:3f:8f:f3:50:ea:2e:55:
1c:b3:d7:84:37:90:c8:ed:6c:fb:68:bc:a1:5d:fc:d0:29:77:
38:f5:3b:c4:c7:82:2f:24:0e:a4:fa:54:c4:49:d8:19:2e:6d:
fa:e1:a1:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:40:37 2025 by rpki-client