Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/e4f2db-6f46-4761-adfe-7327df6bdd10/1/bj7iuEACCKfupFBg9LeoPEPo3nw.mft
File: bj7iuEACCKfupFBg9LeoPEPo3nw.mft (raw, json)
Hash identifier: pZXz0hZmghtR3BLeicztC0p/q7k7BJJXhv30rXenskk=
Subject key identifier: 48:93:FF:CA:08:C3:AC:EA:EB:75:9B:AB:B1:43:31:EF:A4:10:48:C3
Authority key identifier: 6E:3E:E2:B8:40:02:08:A7:EE:A4:50:60:F4:B7:A8:3C:43:E8:DE:7C
Certificate issuer: /CN=6e3ee2b8400208a7eea45060f4b7a83c43e8de7c
Certificate serial: 0198D5F1A7E5C6E84A0D3529F266C8853B1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bj7iuEACCKfupFBg9LeoPEPo3nw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/e4f2db-6f46-4761-adfe-7327df6bdd10/1/bj7iuEACCKfupFBg9LeoPEPo3nw.mft
Manifest number: 0D86
Signing time: Sat 23 Aug 2025 08:00:40 +0000
Manifest this update: Sat 23 Aug 2025 08:00:40 +0000
Manifest next update: Sun 24 Aug 2025 08:00:40 +0000
Files and hashes: 1: CHQq2YDxipt537b311Ui3tG3zOU.roa (hash: Q8vdLMat40/Z7pZgYQmg+RQTQD9awPvQh60JlwKVzLU=)
2: bj7iuEACCKfupFBg9LeoPEPo3nw.crl (hash: 5S7kJ2OZdMtlVucdovJEvZ53U4kgeb2BlWXwePy/yLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/e4f2db-6f46-4761-adfe-7327df6bdd10/1/bj7iuEACCKfupFBg9LeoPEPo3nw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/e4f2db-6f46-4761-adfe-7327df6bdd10/1/bj7iuEACCKfupFBg9LeoPEPo3nw.mft
rsync://rpki.ripe.net/repository/DEFAULT/bj7iuEACCKfupFBg9LeoPEPo3nw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:a7:e5:c6:e8:4a:0d:35:29:f2:66:c8:85:3b:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e3ee2b8400208a7eea45060f4b7a83c43e8de7c
Validity
Not Before: Aug 23 08:00:40 2025 GMT
Not After : Aug 24 08:00:40 2025 GMT
Subject: CN=4893ffca08c3aceaeb759babb14331efa41048c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:5e:05:3b:58:b0:ab:ef:68:4c:e3:dd:2d:f9:
ac:74:73:15:97:d7:30:71:60:97:38:d4:d8:d3:25:
bc:f2:af:8a:83:b4:b0:fd:57:9d:01:81:f5:53:49:
5d:2d:41:ca:6d:34:b3:20:04:fe:14:47:2c:5a:c8:
12:8e:52:ec:2d:6a:63:c9:87:27:d8:6a:60:1c:74:
64:ca:d3:e9:59:59:25:88:ad:90:ec:31:39:d2:67:
bb:2d:b3:fd:53:fd:82:f9:61:82:47:00:0f:f3:d6:
59:21:4e:9b:b4:af:7a:d0:24:05:19:fb:5f:ce:98:
bc:cc:83:3e:c6:2a:58:0e:54:7d:e8:ab:35:c9:5f:
65:08:4d:4c:29:cb:42:63:b5:2d:42:56:79:49:5c:
c2:4c:03:ce:7f:5d:9d:48:5b:5b:35:65:e4:52:af:
e5:ff:62:11:09:f1:b8:36:77:5f:28:6d:f3:03:cd:
90:ad:10:fd:7d:bc:17:b1:cb:1d:fd:1e:0f:b3:48:
7c:62:e8:d2:2f:8e:84:ba:74:86:cb:9e:af:e0:bf:
b4:e4:20:d4:94:4a:37:48:0c:79:01:36:47:87:9e:
88:94:15:df:47:9e:26:f7:90:b7:ea:4a:14:b9:85:
64:7c:4f:a5:8f:14:88:46:7c:ea:fb:e7:4c:da:d8:
e5:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:93:FF:CA:08:C3:AC:EA:EB:75:9B:AB:B1:43:31:EF:A4:10:48:C3
X509v3 Authority Key Identifier:
keyid:6E:3E:E2:B8:40:02:08:A7:EE:A4:50:60:F4:B7:A8:3C:43:E8:DE:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bj7iuEACCKfupFBg9LeoPEPo3nw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/e4f2db-6f46-4761-adfe-7327df6bdd10/1/bj7iuEACCKfupFBg9LeoPEPo3nw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/e4f2db-6f46-4761-adfe-7327df6bdd10/1/bj7iuEACCKfupFBg9LeoPEPo3nw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:13:32:34:66:c8:10:39:97:54:99:4c:59:0f:93:f0:07:a7:
59:b5:de:d3:0f:12:e0:31:c7:d2:2f:7b:bf:ca:16:13:e6:56:
6d:df:f0:c0:42:c3:84:76:65:39:a4:be:5f:fd:8d:b7:d9:0e:
a6:b2:bb:e1:2d:34:43:3d:e4:b5:0b:9d:4d:76:b7:c2:37:c8:
2f:93:87:f6:f9:88:7c:d5:ce:2b:ac:84:7c:f3:2f:00:84:45:
97:ea:8e:a3:2a:54:19:9a:3e:28:8f:18:c9:77:ab:bd:07:76:
68:88:a6:44:62:a9:cc:5d:6c:9b:d3:a3:4c:4d:39:31:fb:be:
cd:bc:e7:31:33:b9:9f:03:37:38:6e:df:89:70:69:04:f4:f5:
ba:c5:e5:22:60:d6:69:bf:ca:f1:58:61:c8:17:5d:cd:11:d6:
43:a9:8e:93:92:6c:9f:45:00:58:a8:c2:d0:73:04:aa:65:60:
ad:11:ab:15:eb:ff:3b:ee:11:3c:24:ee:37:1c:42:f6:e8:2b:
5e:ba:59:f5:59:f8:19:aa:94:a0:e0:d0:cf:bd:5a:fb:36:fb:
28:58:2f:59:32:19:ce:2c:0c:d7:6d:6a:06:95:ca:97:78:5a:
37:b0:7d:7f:65:24:9a:6b:2f:f3:65:52:96:04:e2:f4:b3:62:
67:39:ac:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:04:12 2025 by rpki-client