Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/7e2131-db8a-4c89-b50f-d82297e945ac/1/b_pZATo68D98lsJOaNleGBoDBag.mft
File: b_pZATo68D98lsJOaNleGBoDBag.mft (raw, json)
Hash identifier: DfX8NuwwzfxYbL2ODMIZfp2qjKIjKHHKcT+ReBNmn94=
Subject key identifier: 31:4E:CB:B6:A0:3D:E9:91:35:8F:D6:4C:7A:E0:6E:45:09:E4:01:E8
Authority key identifier: 6F:FA:59:01:3A:3A:F0:3F:7C:96:C2:4E:68:D9:5E:18:1A:03:05:A8
Certificate issuer: /CN=6ffa59013a3af03f7c96c24e68d95e181a0305a8
Certificate serial: 0198D4744D8B94949F7FFB7A9BB58AD00A40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b_pZATo68D98lsJOaNleGBoDBag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/7e2131-db8a-4c89-b50f-d82297e945ac/1/b_pZATo68D98lsJOaNleGBoDBag.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 01:04:08 +0000
Manifest this update: Sat 23 Aug 2025 01:04:08 +0000
Manifest next update: Sun 24 Aug 2025 01:04:08 +0000
Files and hashes: 1: b_pZATo68D98lsJOaNleGBoDBag.crl (hash: qxAUW7HjSWAEbL2sN6v7tAXxYeoBzmo5jQaEeGpcazw=)
2: y7a_bUOU494snE7qs9jZFYoXSM8.roa (hash: 10cgQe45Y0NiXbkG/LpSkXcIP1GoV0B20aMfZdp0/pk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/7e2131-db8a-4c89-b50f-d82297e945ac/1/b_pZATo68D98lsJOaNleGBoDBag.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/7e2131-db8a-4c89-b50f-d82297e945ac/1/b_pZATo68D98lsJOaNleGBoDBag.mft
rsync://rpki.ripe.net/repository/DEFAULT/b_pZATo68D98lsJOaNleGBoDBag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:4d:8b:94:94:9f:7f:fb:7a:9b:b5:8a:d0:0a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ffa59013a3af03f7c96c24e68d95e181a0305a8
Validity
Not Before: Aug 23 01:04:08 2025 GMT
Not After : Aug 24 01:04:08 2025 GMT
Subject: CN=314ecbb6a03de991358fd64c7ae06e4509e401e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ea:2f:1b:b2:b0:0b:46:f0:92:02:7a:2d:5e:
3a:1c:4b:a9:6a:63:4f:17:db:47:b1:a8:77:d3:17:
c2:53:78:97:86:7f:3c:e9:31:a7:0f:df:f9:8d:cf:
89:8d:19:8b:d9:52:ef:bd:b0:c4:77:fd:11:72:97:
3f:7d:76:12:a0:d8:b9:e1:a7:1c:c1:f8:7f:c8:54:
06:ff:75:c0:6c:81:28:62:61:9d:17:5e:a2:84:2b:
3d:84:33:5b:66:a8:a2:99:0b:1c:6c:c6:5b:d6:42:
07:68:52:23:ad:3d:f1:2a:c0:ba:84:8f:2b:ca:b9:
27:dd:d9:c5:03:1e:90:15:65:9f:36:dc:fb:bb:76:
92:ec:c3:b8:12:84:c8:46:75:a6:0b:77:e9:10:43:
3f:db:30:f3:c8:b2:f8:df:a7:39:69:5b:63:fc:4a:
94:bc:da:27:b7:fe:cb:9e:38:b1:02:b7:5b:1b:f5:
86:00:1a:75:1c:1c:90:79:7c:35:db:4f:7e:f8:d4:
6b:70:7e:6c:e8:a0:10:93:a2:16:d2:b5:2d:fd:8a:
bc:d1:65:87:c2:3a:f7:dc:0b:d9:c8:75:a9:93:5a:
43:09:8e:84:2a:f1:5e:2b:c5:be:46:a9:8c:37:58:
fc:ac:68:e8:fa:57:b7:34:ab:e2:1e:b9:70:14:26:
7a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:4E:CB:B6:A0:3D:E9:91:35:8F:D6:4C:7A:E0:6E:45:09:E4:01:E8
X509v3 Authority Key Identifier:
keyid:6F:FA:59:01:3A:3A:F0:3F:7C:96:C2:4E:68:D9:5E:18:1A:03:05:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b_pZATo68D98lsJOaNleGBoDBag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/7e2131-db8a-4c89-b50f-d82297e945ac/1/b_pZATo68D98lsJOaNleGBoDBag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/7e2131-db8a-4c89-b50f-d82297e945ac/1/b_pZATo68D98lsJOaNleGBoDBag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:46:48:dd:6f:de:a4:8a:94:25:d0:83:80:dd:5f:82:26:05:
c2:df:9f:cb:b5:05:1c:30:0f:4d:15:a8:d3:42:cf:9e:3c:92:
45:08:e8:d7:07:21:77:f8:04:88:06:9c:e9:c7:1f:ba:19:44:
94:a6:30:d9:28:ea:77:7f:e1:84:59:fa:4c:7c:0c:75:31:f3:
72:8e:9d:54:ad:26:6b:e3:c1:46:60:40:fb:73:08:fc:0d:34:
bc:a8:92:48:58:7c:c6:8f:27:61:46:95:31:60:61:a5:a0:a2:
93:30:00:64:48:72:57:17:ae:74:a7:b4:69:5c:88:ff:53:c7:
b1:82:a5:1d:8c:0e:31:1b:b2:c3:03:e7:78:fc:e3:62:69:e8:
0c:66:0c:2f:ea:e5:36:fb:9b:78:dd:c2:db:31:fc:01:0a:08:
e6:46:ca:3b:09:1e:04:56:17:19:69:c0:6c:0d:eb:5e:b6:97:
67:49:02:b0:f1:78:2e:2e:db:2c:6a:9e:c0:c1:98:a3:cc:9a:
27:ee:79:e6:f9:c7:6d:67:da:19:91:bf:c8:e8:a9:c9:3e:e1:
36:7b:ac:3e:11:ea:26:ce:df:81:a9:60:dd:51:a9:ba:e2:4c:
0e:8d:33:f8:c8:aa:4e:ef:d7:83:ba:17:4c:83:37:08:74:83:
48:d9:94:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:46:41 2025 by rpki-client