
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/706f41-0531-43df-b1e9-6f86d0b7e3e0/1/bMdYWreoPsgLVauVe_N7eR52UBY.mft
File: bMdYWreoPsgLVauVe_N7eR52UBY.mft (raw, json)
Hash identifier: ftgfY+Hi4kGEpV5Z8FR3IxeNRDue/vBlqcsGJ2/e0rY=
Subject key identifier: AF:7F:FD:A0:2D:A8:DE:FA:6C:C8:01:99:95:43:D8:04:23:F3:14:D3
Authority key identifier: 6C:C7:58:5A:B7:A8:3E:C8:0B:55:AB:95:7B:F3:7B:79:1E:76:50:16
Certificate issuer: /CN=6cc7585ab7a83ec80b55ab957bf37b791e765016
Certificate serial: 0198D47387027CE258B3B595F5BAC76DC3F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bMdYWreoPsgLVauVe_N7eR52UBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/706f41-0531-43df-b1e9-6f86d0b7e3e0/1/bMdYWreoPsgLVauVe_N7eR52UBY.mft
Manifest number: 13B4
Signing time: Sat 23 Aug 2025 01:03:17 +0000
Manifest this update: Sat 23 Aug 2025 01:03:17 +0000
Manifest next update: Sun 24 Aug 2025 01:03:17 +0000
Files and hashes: 1: JJLEui4261ZXJVAJCMhhZuF8jH8.roa (hash: /ixKOls/TcJQuO85TTUBz1567wbeYHBB+Wz+IfsDjR8=)
2: bMdYWreoPsgLVauVe_N7eR52UBY.crl (hash: /Ei2jFobGRfGyz3GewkDmcwAMLw1a5HZOnoY/HNLVO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/706f41-0531-43df-b1e9-6f86d0b7e3e0/1/bMdYWreoPsgLVauVe_N7eR52UBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/706f41-0531-43df-b1e9-6f86d0b7e3e0/1/bMdYWreoPsgLVauVe_N7eR52UBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bMdYWreoPsgLVauVe_N7eR52UBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:87:02:7c:e2:58:b3:b5:95:f5:ba:c7:6d:c3:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cc7585ab7a83ec80b55ab957bf37b791e765016
Validity
Not Before: Aug 23 01:03:17 2025 GMT
Not After : Aug 24 01:03:17 2025 GMT
Subject: CN=af7ffda02da8defa6cc801999543d80423f314d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:59:3a:b4:f1:01:2a:0e:2c:3c:c9:12:fb:49:
16:9b:58:65:88:c3:6c:7c:1f:ca:22:9c:57:7c:7a:
4b:16:60:27:19:f5:fe:93:58:4d:6c:4d:5d:e9:90:
a3:d8:78:05:a1:7c:0f:e3:7e:a8:bf:e6:0e:84:e4:
56:4f:0e:94:6d:f6:a6:c9:5f:cf:57:54:98:2d:d7:
c6:11:cb:b0:ed:f2:2c:24:34:e1:e9:0d:b3:b9:42:
bb:4e:0a:73:2c:f1:5e:27:e9:97:44:d9:ac:81:41:
33:0b:29:c9:9f:5b:f6:fb:c3:9b:f8:b0:ba:ee:fa:
79:01:d7:16:22:bc:8a:c4:21:75:48:a3:73:74:2c:
f8:a4:09:ba:d1:b5:ae:8a:c8:8a:f4:bc:7f:b0:f5:
f6:6c:38:a0:8f:83:ac:c1:6f:7f:bd:7a:e9:fa:2d:
4d:bd:53:e0:5e:cc:22:99:bb:f2:42:cb:e8:08:d4:
d7:c8:3c:3f:bc:be:7d:57:f9:c6:3d:a5:f7:17:52:
4a:96:a4:bc:96:3a:0f:75:52:0f:1a:e8:c8:18:73:
2e:e2:b8:9c:8a:85:72:36:61:2b:db:68:13:b8:af:
96:9d:ac:99:96:a2:b5:fc:41:a0:6a:45:db:1d:29:
23:1f:a9:dd:b4:44:d2:26:3a:28:9e:54:3a:52:ea:
8d:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:7F:FD:A0:2D:A8:DE:FA:6C:C8:01:99:95:43:D8:04:23:F3:14:D3
X509v3 Authority Key Identifier:
keyid:6C:C7:58:5A:B7:A8:3E:C8:0B:55:AB:95:7B:F3:7B:79:1E:76:50:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMdYWreoPsgLVauVe_N7eR52UBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/706f41-0531-43df-b1e9-6f86d0b7e3e0/1/bMdYWreoPsgLVauVe_N7eR52UBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/706f41-0531-43df-b1e9-6f86d0b7e3e0/1/bMdYWreoPsgLVauVe_N7eR52UBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:49:99:b1:c8:3b:fd:5a:62:ee:b0:d2:7e:3f:ce:7d:5e:f9:
94:81:9c:46:47:8d:be:a6:19:a6:73:ec:c1:28:ed:b0:c8:99:
e6:02:a1:82:2e:b3:07:d5:f7:29:f1:cd:90:ae:56:37:5b:4d:
de:4f:51:9e:0c:c1:76:13:7a:b3:5e:47:92:08:85:e7:32:17:
f5:bb:a4:d0:e6:37:ef:0e:09:29:6e:f0:87:fa:fe:7b:7c:05:
67:1a:0a:53:f9:82:1e:86:27:c6:67:ac:5e:8c:f7:8a:07:57:
b1:bb:86:1a:24:1d:86:03:16:13:59:84:08:1e:00:88:e2:1d:
e9:e8:23:3f:aa:d3:6d:2e:dd:76:7a:56:8d:54:c2:f7:86:2f:
d4:32:9d:5c:2f:69:45:1b:be:00:04:39:95:1f:54:89:4f:ce:
8b:7a:c3:75:3b:c7:a6:0d:2e:f3:fd:f5:9d:71:7c:4a:1b:db:
ba:e9:4e:8a:e0:d9:ae:0c:9e:b2:17:3f:19:b5:18:c3:3b:97:
7d:e1:b8:8a:70:45:38:ac:21:ad:c7:24:f1:ac:00:e0:3e:cf:
15:4a:d9:7a:e6:af:c6:fc:cf:ba:e9:39:5f:de:d9:0c:92:85:
d2:cd:de:51:3c:05:15:36:97:9a:95:1d:0e:d5:ae:3c:f2:69:
5d:4b:3a:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:28:27 2025 by rpki-client