Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.mft
File: bTAG3NKJxH-fWOEo6yl1cjkUS7Y.mft (raw, json)
Hash identifier: XMkbX15S6N7S7BicsPs4DzB7Fadav2mY23TU91Bh3AE=
Subject key identifier: 0A:4B:8E:BA:71:3C:FD:65:14:E5:93:AF:7A:51:61:E1:04:F2:14:3B
Authority key identifier: 6D:30:06:DC:D2:89:C4:7F:9F:58:E1:28:EB:29:75:72:39:14:4B:B6
Certificate issuer: /CN=6d3006dcd289c47f9f58e128eb29757239144bb6
Certificate serial: 0198D473CFBE9AC8E0EA18CB9C246C3E4D50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.mft
Manifest number: 0BF6
Signing time: Sat 23 Aug 2025 01:03:36 +0000
Manifest this update: Sat 23 Aug 2025 01:03:36 +0000
Manifest next update: Sun 24 Aug 2025 01:03:36 +0000
Files and hashes: 1: bTAG3NKJxH-fWOEo6yl1cjkUS7Y.crl (hash: gYcHnQNXYOzPSIpyFZe9w3M+PIorsTpNSPp9BMK3wH4=)
2: ergYcBtNSn5r4Zi1l42KV0S9mDk.roa (hash: uo/5j8D7Yv+RjgeXCM0+M4CRhoYawB/FduDyyKS00RE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:cf:be:9a:c8:e0:ea:18:cb:9c:24:6c:3e:4d:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d3006dcd289c47f9f58e128eb29757239144bb6
Validity
Not Before: Aug 23 01:03:36 2025 GMT
Not After : Aug 24 01:03:36 2025 GMT
Subject: CN=0a4b8eba713cfd6514e593af7a5161e104f2143b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:79:c6:ff:b0:b9:45:83:04:26:c9:2a:1a:22:
48:e1:57:ea:23:2f:6a:e2:31:4d:96:30:60:88:8e:
79:3c:4f:4f:47:44:0c:b5:e8:cd:ed:9f:57:3b:0b:
80:e7:16:a6:ae:d6:66:a2:d9:33:c7:0b:db:d8:75:
6b:7e:8d:07:4b:96:5b:09:d8:9e:9f:ec:0d:44:b0:
7d:80:1e:88:ce:6a:6f:cf:36:cb:8a:fc:e0:2e:41:
6f:c8:b8:1a:e5:6c:4d:09:54:3d:b7:bb:21:1b:07:
57:09:fa:70:13:c8:0c:e5:07:93:28:b0:b4:61:4a:
f6:87:61:90:36:55:1b:ba:ae:12:6b:ea:22:68:52:
e7:64:5e:4f:fb:ab:b6:3e:7d:40:05:1b:67:69:6a:
3d:c4:a4:86:7d:20:71:a0:77:ad:fb:6f:90:6b:eb:
29:a9:3b:98:c7:87:4b:74:50:ce:5f:47:09:75:cf:
aa:0c:32:3a:3e:59:e4:00:f7:12:d7:53:31:f2:3f:
85:90:92:12:0e:47:58:f7:b6:8d:30:5b:be:a8:5b:
04:cc:e8:af:87:53:18:4e:97:dc:57:90:76:e4:27:
e0:ad:84:fc:53:e3:04:b1:dd:51:c9:4a:54:85:79:
4c:ac:49:d7:6c:b6:38:82:b5:1b:a5:58:3a:dc:8e:
d4:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:4B:8E:BA:71:3C:FD:65:14:E5:93:AF:7A:51:61:E1:04:F2:14:3B
X509v3 Authority Key Identifier:
keyid:6D:30:06:DC:D2:89:C4:7F:9F:58:E1:28:EB:29:75:72:39:14:4B:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/bf9e51-cc2b-4ff4-86ac-2f7e52fb8bd3/1/bTAG3NKJxH-fWOEo6yl1cjkUS7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:9a:de:db:98:18:4a:ac:45:e5:05:43:04:ab:f4:25:fc:4a:
e9:9a:6d:0e:c5:6a:e6:88:eb:e3:e5:23:19:7e:fe:1e:80:8f:
52:3c:5a:ec:e4:44:0f:84:04:94:03:14:b9:69:52:96:27:56:
f2:ad:9d:b1:db:af:01:19:e6:0d:0f:46:a4:f3:04:ec:88:93:
7e:48:85:4e:c9:1b:0b:2d:2a:fb:04:93:e2:35:a1:6a:0c:5e:
c3:46:b3:79:ed:5e:65:b1:55:fc:7c:98:a5:cf:e6:7c:54:d6:
0a:d5:b2:4c:c8:6c:f2:e3:02:15:d6:a1:00:02:f0:d3:52:98:
c1:c5:92:65:59:3e:be:b0:93:8a:b7:1e:04:8a:cd:72:f9:3e:
98:53:6f:f5:14:0c:4a:48:6a:da:65:09:ce:a1:1e:5e:b0:fc:
2c:c4:9d:be:04:cc:92:72:51:c8:44:9b:70:b9:83:da:d4:7b:
09:29:92:54:b6:19:5a:59:03:2f:4e:a2:4b:a5:e1:8e:6a:80:
29:2f:d4:12:f8:43:08:84:f7:45:81:9f:c2:98:3f:ab:fb:02:
d4:45:7c:1e:55:e4:2f:04:7b:56:09:e4:5e:28:29:1f:f7:f2:
cf:90:32:cd:fc:7f:95:2f:0b:8e:6a:f4:aa:d2:e8:f6:b8:d6:
d7:16:ce:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:14:55 2025 by rpki-client