Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/589db9-e22b-4d64-94b4-8ecf751057ac/1/bRRgVvD7veYYv_ARwPIrp0pYMrc.mft
File: bRRgVvD7veYYv_ARwPIrp0pYMrc.mft (raw, json)
Hash identifier: 5K5IhF0oFsWlsfRXJFvzua38iKqo2w3/OpJq04Y5J7s=
Subject key identifier: 8D:20:2F:74:31:F7:42:DF:1C:4B:7E:C6:54:9D:03:6D:D3:2C:82:33
Authority key identifier: 6D:14:60:56:F0:FB:BD:E6:18:BF:F0:11:C0:F2:2B:A7:4A:58:32:B7
Certificate issuer: /CN=6d146056f0fbbde618bff011c0f22ba74a5832b7
Certificate serial: 0198D73B3D9430453A492142C276C1DEBFB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bRRgVvD7veYYv_ARwPIrp0pYMrc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/589db9-e22b-4d64-94b4-8ecf751057ac/1/bRRgVvD7veYYv_ARwPIrp0pYMrc.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 14:00:40 +0000
Manifest this update: Sat 23 Aug 2025 14:00:40 +0000
Manifest next update: Sun 24 Aug 2025 14:00:40 +0000
Files and hashes: 1: PWSDM2wQmRNxztAKQ8wgaZS7VDM.roa (hash: d9Wa5FwcE+PxgkYEzEZPmnpoKU1tHYNjbElNCRhvEFk=)
2: bRRgVvD7veYYv_ARwPIrp0pYMrc.crl (hash: X9WW0sHOtzLmHLhjbrxat6HlVosV/6cUyqS/kg6iO50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/589db9-e22b-4d64-94b4-8ecf751057ac/1/bRRgVvD7veYYv_ARwPIrp0pYMrc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/589db9-e22b-4d64-94b4-8ecf751057ac/1/bRRgVvD7veYYv_ARwPIrp0pYMrc.mft
rsync://rpki.ripe.net/repository/DEFAULT/bRRgVvD7veYYv_ARwPIrp0pYMrc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3b:3d:94:30:45:3a:49:21:42:c2:76:c1:de:bf:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d146056f0fbbde618bff011c0f22ba74a5832b7
Validity
Not Before: Aug 23 14:00:40 2025 GMT
Not After : Aug 24 14:00:40 2025 GMT
Subject: CN=8d202f7431f742df1c4b7ec6549d036dd32c8233
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:16:64:d5:43:d6:1b:d2:9d:d9:cb:a6:80:44:
67:b5:7c:c9:18:8b:c0:9b:4a:36:7c:33:68:be:3b:
e8:9c:4e:de:f0:c3:f6:5e:9b:7e:96:b0:cd:16:aa:
5c:87:ac:16:56:49:16:53:48:2f:db:cd:7a:c2:e1:
3c:24:0e:0f:7b:75:eb:a7:b7:5c:79:70:cd:59:43:
f3:22:1e:38:d4:bd:fd:e1:90:f3:8c:11:61:3f:86:
35:4b:18:a5:c8:db:ac:44:2d:44:47:56:57:21:62:
b6:3a:92:4f:b6:cb:05:ef:96:ff:5c:4c:72:03:70:
8f:86:00:ad:f6:df:0c:91:b2:fb:9a:f1:36:3f:87:
17:72:97:67:0f:65:59:6f:a7:00:21:1b:a4:78:7a:
62:38:88:4c:e6:42:4c:6d:e7:79:45:3a:a0:da:db:
d1:01:c5:fc:fd:13:e9:79:1c:4e:10:79:97:56:fe:
c0:c8:41:36:17:60:c7:9c:9c:1a:24:67:29:97:20:
ba:24:28:5c:f7:0d:9d:de:51:a8:3b:6c:4a:ef:d3:
d3:19:b5:17:0f:f8:8c:9b:24:88:cb:5c:fe:3a:22:
1e:2c:b9:45:fb:30:cb:b8:7a:d2:21:b1:ad:97:f4:
ba:87:9c:e2:62:bb:fe:fe:24:96:40:8d:5c:62:7e:
5c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:20:2F:74:31:F7:42:DF:1C:4B:7E:C6:54:9D:03:6D:D3:2C:82:33
X509v3 Authority Key Identifier:
keyid:6D:14:60:56:F0:FB:BD:E6:18:BF:F0:11:C0:F2:2B:A7:4A:58:32:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bRRgVvD7veYYv_ARwPIrp0pYMrc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/589db9-e22b-4d64-94b4-8ecf751057ac/1/bRRgVvD7veYYv_ARwPIrp0pYMrc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/589db9-e22b-4d64-94b4-8ecf751057ac/1/bRRgVvD7veYYv_ARwPIrp0pYMrc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:bc:03:b1:8e:22:51:47:59:15:d4:06:10:10:ed:f2:f2:12:
45:5a:74:b3:cf:ad:fb:f2:36:67:b6:ff:1e:5b:de:72:bf:60:
7a:04:35:24:9a:18:07:7e:b9:ac:8f:3d:25:17:7d:34:26:b2:
fe:f8:a5:ed:74:81:ab:31:72:7f:58:ff:ba:25:ab:07:cf:a8:
85:38:84:a2:f9:0a:0c:36:a4:79:d5:21:72:39:d5:af:1d:26:
dd:cf:ff:5e:7a:73:6a:44:6b:f1:29:56:88:f4:fc:11:6a:15:
3d:11:f4:7c:24:8a:e2:b4:7e:a8:ba:36:07:91:a4:0f:1e:cc:
0e:c2:69:fd:69:e8:24:bd:6a:61:5f:80:b7:60:a1:e0:1d:74:
40:c5:50:38:93:25:ca:9d:d0:74:a3:7b:c4:82:27:c9:59:f5:
26:a8:da:24:22:8d:94:c4:c8:ca:11:42:dd:aa:32:d6:60:f2:
c9:2e:a7:8e:5e:b8:f0:80:52:0d:04:46:8d:dc:eb:4b:7b:32:
31:0b:36:f5:8b:bb:68:56:e4:13:30:e8:dd:81:4a:6c:d7:04:
a5:fa:a4:2d:c8:5e:7b:1d:bc:6c:14:c2:96:c4:cc:d2:6c:35:
a0:99:64:9d:da:15:d9:9b:91:66:57:0b:5b:6d:b2:8d:c9:b1:
41:d8:ac:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:15:47 2025 by rpki-client