Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/bE5-r-L_qpDK6UdoAwNNttp8Ehk.mft
File: bE5-r-L_qpDK6UdoAwNNttp8Ehk.mft (raw, json)
Hash identifier: UmlJhNVfLQtPmic18uRmTOGyT50nCW4HW79F/RchIpY=
Subject key identifier: 33:EE:5C:9C:B5:7F:5D:6D:D9:01:52:A6:E5:03:51:80:FC:18:CC:8D
Authority key identifier: 6C:4E:7E:AF:E2:FF:AA:90:CA:E9:47:68:03:03:4D:B6:DA:7C:12:19
Certificate issuer: /CN=6c4e7eafe2ffaa90cae9476803034db6da7c1219
Certificate serial: 0198D65FDF83FC7577ADE895AA12622FC30B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bE5-r-L_qpDK6UdoAwNNttp8Ehk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/bE5-r-L_qpDK6UdoAwNNttp8Ehk.mft
Manifest number: 0FB6
Signing time: Sat 23 Aug 2025 10:01:04 +0000
Manifest this update: Sat 23 Aug 2025 10:01:04 +0000
Manifest next update: Sun 24 Aug 2025 10:01:04 +0000
Files and hashes: 1: bE5-r-L_qpDK6UdoAwNNttp8Ehk.crl (hash: k2V+5Ba16o7ApYrz2/7sOzbwWkb8k3DSEhfNmqHZ2v8=)
2: pikr-Z1yZ7UUvvrmXqwotfJAjto.roa (hash: 68icAI19296YoC6/CDoRbYMVtIlmqXzI+o0fkE9+Wfc=)
3: qQqCuUJCewbsZNg09v9PamhTS90.roa (hash: OGwgmYMhdJtP2TfXi19zj/Lo5JjlQ5q60mMpyZb+YXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/bE5-r-L_qpDK6UdoAwNNttp8Ehk.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/bE5-r-L_qpDK6UdoAwNNttp8Ehk.mft
rsync://rpki.ripe.net/repository/DEFAULT/bE5-r-L_qpDK6UdoAwNNttp8Ehk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:df:83:fc:75:77:ad:e8:95:aa:12:62:2f:c3:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4e7eafe2ffaa90cae9476803034db6da7c1219
Validity
Not Before: Aug 23 10:01:04 2025 GMT
Not After : Aug 24 10:01:04 2025 GMT
Subject: CN=33ee5c9cb57f5d6dd90152a6e5035180fc18cc8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ab:e1:23:fc:9d:63:b8:03:17:50:23:ab:82:
db:74:4a:1a:a2:4e:41:8b:37:f6:63:93:ce:41:78:
df:85:47:b2:95:cc:fb:d8:a3:0b:8f:50:42:b9:f8:
95:76:49:61:30:60:88:b3:73:a9:e1:e3:c5:f7:e1:
46:c1:be:02:63:9a:31:8e:9d:7c:00:2e:f6:05:83:
bd:15:d2:d0:bf:8a:b2:34:bb:5c:6f:4b:fa:d0:db:
ab:34:f5:d7:60:98:71:b7:e0:1d:f0:3d:3c:b7:2e:
05:35:b8:58:c4:d4:52:56:cd:7d:5c:bd:1c:14:ba:
c6:16:16:67:45:7d:08:14:69:3f:77:b3:27:56:bd:
c8:ca:b6:e1:7d:f0:ac:17:19:d1:8f:55:c1:40:f0:
60:5a:44:c0:ea:f4:7f:2f:9b:58:5e:c0:a1:31:62:
3d:85:99:2f:6e:b7:26:16:4a:30:6f:9a:ca:fc:4d:
f0:d8:62:74:89:e2:ec:e9:f5:66:22:f4:d3:cf:f3:
59:c9:14:d8:d6:9e:a0:92:0f:c9:da:63:71:96:99:
23:67:43:44:38:fd:eb:2c:30:1c:d5:b8:1a:ec:e9:
cc:08:23:f5:0a:7c:c4:02:56:4e:9a:4c:5d:19:ab:
57:ca:9b:66:10:2c:7f:e0:24:0c:c3:d1:6a:99:ae:
6b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:EE:5C:9C:B5:7F:5D:6D:D9:01:52:A6:E5:03:51:80:FC:18:CC:8D
X509v3 Authority Key Identifier:
keyid:6C:4E:7E:AF:E2:FF:AA:90:CA:E9:47:68:03:03:4D:B6:DA:7C:12:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bE5-r-L_qpDK6UdoAwNNttp8Ehk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/bE5-r-L_qpDK6UdoAwNNttp8Ehk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/bE5-r-L_qpDK6UdoAwNNttp8Ehk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:61:e8:84:04:a6:dc:8f:1d:86:ab:25:b3:aa:92:b2:ba:8a:
ee:9a:19:1b:27:97:1d:e5:61:50:28:65:43:0b:0c:3d:b4:48:
d6:96:e7:f2:95:ce:7c:81:42:ec:7d:5a:1b:1a:eb:39:1e:30:
a5:e6:b5:23:38:25:0f:54:3c:75:81:f3:88:2b:39:d8:5d:29:
77:45:d9:84:6b:58:ec:93:76:6d:99:34:cc:8b:f9:52:7f:bc:
1b:45:32:f6:fb:b7:ea:7a:7a:41:ef:33:17:20:2d:61:93:28:
bc:33:a4:57:29:e5:7b:54:de:fa:ab:22:ea:02:64:b1:6d:d9:
90:0c:15:68:61:a0:4f:61:60:83:b4:84:bd:8b:8b:94:63:53:
14:25:91:1e:4d:7b:a6:89:19:4b:aa:de:a4:0b:a3:d5:9f:ff:
e0:ad:6a:90:aa:90:2a:cd:9b:7a:80:5b:0e:85:31:bd:35:b1:
b6:97:dc:98:6f:d1:10:6f:5d:a7:d3:c3:dd:f9:14:e9:c3:72:
d3:5a:78:45:e1:e9:0e:b1:f4:31:9f:e5:40:c7:de:f9:74:cc:
25:bb:d3:9b:fd:d8:99:db:1d:e0:ba:33:64:9d:66:0a:d9:f8:
8b:76:a9:bc:0c:94:c3:c0:d9:bc:e9:2f:8c:33:94:d6:62:71:
16:9e:62:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:23:41 2025 by rpki-client