Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/119951-0959-4c13-9a0e-98128eea3a65/1/b95EDBTZdmUDy1yRuVC4EGLRECk.mft
File: b95EDBTZdmUDy1yRuVC4EGLRECk.mft (raw, json)
Hash identifier: 3P3rAjR0Y3j8G6nBrvOTAnsEf42H/DJJmVso4K7eTtQ=
Subject key identifier: D6:8A:64:52:FD:DD:C4:2C:3F:01:23:49:57:2A:D4:8B:E4:E3:7F:EA
Authority key identifier: 6F:DE:44:0C:14:D9:76:65:03:CB:5C:91:B9:50:B8:10:62:D1:10:29
Certificate issuer: /CN=6fde440c14d9766503cb5c91b950b81062d11029
Certificate serial: 0198D5834024E3FEA600DA60C26A84CFE069
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b95EDBTZdmUDy1yRuVC4EGLRECk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/119951-0959-4c13-9a0e-98128eea3a65/1/b95EDBTZdmUDy1yRuVC4EGLRECk.mft
Manifest number: 0A57
Signing time: Sat 23 Aug 2025 06:00:05 +0000
Manifest this update: Sat 23 Aug 2025 06:00:05 +0000
Manifest next update: Sun 24 Aug 2025 06:00:05 +0000
Files and hashes: 1: 8dQ0OiRLtZPhu3GEjEb_mugx5KE.roa (hash: 89OURcYF/hYXZlt3wuPoB9EB6Vna11HJsZwd0rNl1Eo=)
2: b95EDBTZdmUDy1yRuVC4EGLRECk.crl (hash: YHlG0w7a0b3KjFL0JAMm6B3dzdg+eMPNaO9UTNa2WBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/119951-0959-4c13-9a0e-98128eea3a65/1/b95EDBTZdmUDy1yRuVC4EGLRECk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/119951-0959-4c13-9a0e-98128eea3a65/1/b95EDBTZdmUDy1yRuVC4EGLRECk.mft
rsync://rpki.ripe.net/repository/DEFAULT/b95EDBTZdmUDy1yRuVC4EGLRECk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:40:24:e3:fe:a6:00:da:60:c2:6a:84:cf:e0:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fde440c14d9766503cb5c91b950b81062d11029
Validity
Not Before: Aug 23 06:00:05 2025 GMT
Not After : Aug 24 06:00:05 2025 GMT
Subject: CN=d68a6452fdddc42c3f012349572ad48be4e37fea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4d:6d:fb:8a:4a:25:70:49:28:b9:b1:70:34:
c6:9f:90:00:9b:02:c8:17:50:e9:fc:ec:6c:b7:64:
e2:4c:3a:84:13:49:a0:f0:ae:24:ef:eb:0d:9c:27:
b7:c9:7a:3a:f6:00:9e:a3:11:e4:fa:4d:d5:23:29:
1e:89:1b:23:ce:94:18:e3:14:fe:36:cb:7a:78:f4:
97:56:88:87:27:b8:c1:f3:e2:ff:2e:80:9d:9e:71:
22:99:08:85:5e:80:52:39:cb:5b:2b:2a:b9:2c:e1:
f3:0c:91:32:54:27:a7:90:f5:f0:30:81:a6:07:f6:
33:14:10:e0:74:cf:28:15:7e:28:a2:b3:75:e7:38:
ff:2f:56:dd:4a:e2:01:6e:7a:8a:1e:f0:06:98:75:
50:ad:cc:d4:36:c8:f4:e1:5a:09:7c:14:49:48:d6:
84:b6:62:e2:ce:45:7e:13:ea:04:ac:bd:9a:3b:6b:
f3:c2:96:4f:49:b4:04:a7:03:9d:5c:9f:ea:25:61:
7a:6e:3c:5c:b6:f1:d2:1a:90:f6:f1:ab:07:01:2d:
fe:f4:43:c2:5d:62:02:63:33:d3:3c:bf:f3:23:94:
48:fb:a4:d0:10:5e:6d:5f:7e:9f:21:82:2f:d0:9b:
ce:ba:2b:3e:45:f7:07:e1:a0:39:ea:aa:fb:b2:fd:
05:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:8A:64:52:FD:DD:C4:2C:3F:01:23:49:57:2A:D4:8B:E4:E3:7F:EA
X509v3 Authority Key Identifier:
keyid:6F:DE:44:0C:14:D9:76:65:03:CB:5C:91:B9:50:B8:10:62:D1:10:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b95EDBTZdmUDy1yRuVC4EGLRECk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/119951-0959-4c13-9a0e-98128eea3a65/1/b95EDBTZdmUDy1yRuVC4EGLRECk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/119951-0959-4c13-9a0e-98128eea3a65/1/b95EDBTZdmUDy1yRuVC4EGLRECk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:19:9b:c6:21:13:e3:b5:8a:63:7e:90:e3:b5:0a:c1:16:18:
18:bd:80:88:3a:cf:96:c7:f0:97:62:89:50:62:58:10:66:3a:
35:a9:cb:4d:0c:6d:79:66:27:49:cc:bb:eb:a9:05:88:14:ee:
1d:10:da:70:6a:42:7c:14:8c:64:bc:c6:64:82:d0:0f:1b:08:
ad:32:34:65:63:77:02:48:a5:20:96:30:9e:8f:3d:de:41:88:
b4:37:a1:39:b2:ce:c6:cc:5c:f6:79:d9:73:81:a4:5a:4c:82:
bf:a1:41:cc:05:ad:27:27:eb:57:d9:96:7b:d6:e1:13:3b:e7:
9b:97:43:5a:c7:7b:a4:9e:87:4b:38:34:ab:f1:2d:6a:65:96:
6c:6f:3b:a4:f9:ce:4c:21:d7:23:0f:de:21:1e:c1:08:52:81:
3e:f1:fc:77:58:82:95:d1:55:7c:17:5d:e9:02:98:7d:ce:81:
cd:ec:4d:2c:f8:e6:f7:d6:44:d4:01:a4:15:13:df:89:08:e9:
81:1f:ce:48:6b:08:b2:57:75:48:87:81:0a:f0:da:0a:30:c9:
5e:70:af:2c:33:23:09:9b:1e:92:64:57:5f:72:5d:81:ad:c5:
2e:59:07:7c:91:d2:ce:82:0d:18:56:ce:e8:81:1a:ea:cf:5c:
b6:8e:c8:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:39:34 2025 by rpki-client