Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/7be1aa-5b05-4753-b7d8-b8bb9d7da2db/1/bI5k4HENMvJqNtaM_3s_hqyCDOs.mft
File: bI5k4HENMvJqNtaM_3s_hqyCDOs.mft (raw, json)
Hash identifier: ulStbSwFzXcoKiqSaRxMAqrRJDpNrLTEuZ0uBsF9uT0=
Subject key identifier: C5:FD:A1:94:DB:61:C4:4C:1B:0A:1D:EC:CD:A2:3D:92:CD:94:F9:FE
Authority key identifier: 6C:8E:64:E0:71:0D:32:F2:6A:36:D6:8C:FF:7B:3F:86:AC:82:0C:EB
Certificate issuer: /CN=6c8e64e0710d32f26a36d68cff7b3f86ac820ceb
Certificate serial: 0198D583DC1B6F36A737AD5AE0D4639E1131
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI5k4HENMvJqNtaM_3s_hqyCDOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/7be1aa-5b05-4753-b7d8-b8bb9d7da2db/1/bI5k4HENMvJqNtaM_3s_hqyCDOs.mft
Manifest number: BF
Signing time: Sat 23 Aug 2025 06:00:45 +0000
Manifest this update: Sat 23 Aug 2025 06:00:45 +0000
Manifest next update: Sun 24 Aug 2025 06:00:45 +0000
Files and hashes: 1: ZUMP4gFwulXOpnT82AiRknnGbj0.roa (hash: bDRLu83yHenh9/HNiwqhOVvpz6DGXK6dcJiMgfWy7JM=)
2: bI5k4HENMvJqNtaM_3s_hqyCDOs.crl (hash: 17YfgRfC9G1ynz2NnJ9bZ2zWbvzsuZcfcn3Z+86OnOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/7be1aa-5b05-4753-b7d8-b8bb9d7da2db/1/bI5k4HENMvJqNtaM_3s_hqyCDOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/7be1aa-5b05-4753-b7d8-b8bb9d7da2db/1/bI5k4HENMvJqNtaM_3s_hqyCDOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/bI5k4HENMvJqNtaM_3s_hqyCDOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:dc:1b:6f:36:a7:37:ad:5a:e0:d4:63:9e:11:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8e64e0710d32f26a36d68cff7b3f86ac820ceb
Validity
Not Before: Aug 23 06:00:45 2025 GMT
Not After : Aug 24 06:00:45 2025 GMT
Subject: CN=c5fda194db61c44c1b0a1deccda23d92cd94f9fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:41:ab:32:c1:94:10:74:d6:a2:ec:3e:13:4b:
2b:cf:e5:ef:da:0d:41:6f:a7:00:54:f9:a6:ad:73:
3e:b9:75:b4:98:ec:47:be:7a:6e:85:54:41:03:23:
a2:f8:99:49:b9:c2:b5:7d:d0:68:e9:4d:fe:84:bb:
b0:0e:ca:e5:e7:54:a3:f1:7e:f3:00:7d:85:4d:b2:
79:08:dc:fb:2a:ab:54:9d:6c:aa:3c:55:86:ff:59:
43:72:f1:2a:47:10:56:81:6b:e7:15:43:32:a0:eb:
69:5c:a8:61:90:83:cc:4f:8a:44:02:7b:49:97:e5:
b2:35:8b:b5:5e:5c:13:22:85:91:83:81:02:45:63:
66:78:33:a5:d8:a6:14:5c:71:0d:11:f5:53:a8:f9:
ab:84:96:0c:57:03:82:c7:13:17:24:dc:19:1d:ae:
2a:f7:d5:1b:a0:fd:0c:fb:69:ff:2f:ba:c3:fa:e8:
e0:53:12:ad:a0:e1:04:67:a1:42:53:b8:a2:c1:2b:
ed:eb:24:d5:cb:ef:b4:4f:50:21:3f:71:12:dd:70:
83:93:c3:43:94:57:76:15:92:13:3f:e1:c6:f7:c9:
d4:54:ca:a9:d1:ae:ef:da:e0:62:4f:23:ea:bd:c7:
fe:79:8d:29:a0:0e:9a:b6:40:b4:73:a5:ed:bc:d2:
63:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:FD:A1:94:DB:61:C4:4C:1B:0A:1D:EC:CD:A2:3D:92:CD:94:F9:FE
X509v3 Authority Key Identifier:
keyid:6C:8E:64:E0:71:0D:32:F2:6A:36:D6:8C:FF:7B:3F:86:AC:82:0C:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI5k4HENMvJqNtaM_3s_hqyCDOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/7be1aa-5b05-4753-b7d8-b8bb9d7da2db/1/bI5k4HENMvJqNtaM_3s_hqyCDOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/7be1aa-5b05-4753-b7d8-b8bb9d7da2db/1/bI5k4HENMvJqNtaM_3s_hqyCDOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:80:9e:b6:f2:45:e5:d3:00:4e:24:7c:4e:b4:28:0e:7d:53:
e8:2d:e9:e7:42:ce:a8:3b:4b:9c:d0:a2:61:3b:85:d0:ba:ad:
9e:f8:16:f9:42:7d:75:87:11:14:55:a1:46:5a:99:15:2e:ba:
06:f3:e4:c8:c3:b2:0a:9e:d8:1f:2a:f6:5c:7e:b6:a7:31:cf:
8e:a4:38:b2:f7:7e:57:9a:93:5b:8c:0d:81:b1:e0:99:9d:46:
7a:a7:51:f2:a9:c3:70:fe:99:45:c8:34:12:1b:cb:05:9f:bc:
7f:fd:f6:cd:da:4a:31:60:6a:f0:69:dc:34:8c:37:65:b0:d2:
ac:3e:8d:e4:40:e1:3b:cf:3e:e7:14:1d:e4:5a:ab:36:06:c5:
f2:2b:31:40:39:de:f8:6d:9f:8d:7a:29:23:74:39:b7:78:45:
50:ad:3e:6f:a6:73:f2:d4:30:99:cc:36:1f:9d:83:b6:6c:28:
ca:c1:c3:f6:22:b9:6a:e4:de:69:48:44:18:86:19:bb:00:84:
11:af:2a:88:71:65:c1:55:d7:f1:1a:df:fe:ae:b1:e5:c8:a9:
71:46:a4:7f:53:b4:bc:f4:a5:28:6c:f7:a8:ad:fd:8d:b9:4e:
c5:bf:2d:08:d0:3a:d2:1c:cd:5b:f6:b8:75:20:16:05:fb:43:
be:e3:b6:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:36:24 2025 by rpki-client