Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.mft
File: bF5O9VFnmf_guxuDkxfb01W7eps.mft (raw, json)
Hash identifier: Ab3hWKFoOoN5tL2PkrFoNhwIdrbrYtG7XhovuMERY2I=
Subject key identifier: 80:D9:DF:07:C1:D7:30:89:C1:77:92:C4:FB:CB:37:56:E7:2E:07:F3
Authority key identifier: 6C:5E:4E:F5:51:67:99:FF:E0:BB:1B:83:93:17:DB:D3:55:BB:7A:9B
Certificate issuer: /CN=6c5e4ef5516799ffe0bb1b839317dbd355bb7a9b
Certificate serial: 0198D84F5F06CA40A28B9907649818853588
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bF5O9VFnmf_guxuDkxfb01W7eps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.mft
Manifest number: 1655
Signing time: Sat 23 Aug 2025 19:02:16 +0000
Manifest this update: Sat 23 Aug 2025 19:02:16 +0000
Manifest next update: Sun 24 Aug 2025 19:02:16 +0000
Files and hashes: 1: 0wgL08QR2Tg8DD4ym9yl2cWgk4Y.roa (hash: qV9D4m0x0M6TJ4fUI73uoZNgwejKGUBXdkrfKOtrD44=)
2: bF5O9VFnmf_guxuDkxfb01W7eps.crl (hash: brLHDZ/+w5eETNLvZ0XWqSPtXXMQSxvjKaMEnkNT8pg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.mft
rsync://rpki.ripe.net/repository/DEFAULT/bF5O9VFnmf_guxuDkxfb01W7eps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 19:02:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:4f:5f:06:ca:40:a2:8b:99:07:64:98:18:85:35:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c5e4ef5516799ffe0bb1b839317dbd355bb7a9b
Validity
Not Before: Aug 23 19:02:16 2025 GMT
Not After : Aug 24 19:02:16 2025 GMT
Subject: CN=80d9df07c1d73089c17792c4fbcb3756e72e07f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9e:f0:e1:90:9a:a2:e3:3d:43:3b:e9:61:20:
0c:ba:5c:e7:7b:13:65:66:34:64:14:b2:60:88:a3:
ea:64:67:43:5c:27:a7:69:dd:15:ed:da:61:30:dc:
c7:20:09:a5:83:92:59:49:6e:02:6b:7c:3e:a0:cb:
5e:18:1d:25:cf:fd:44:39:27:da:3a:e1:1d:9c:5d:
74:a6:f3:47:e9:ee:66:53:a2:77:19:b3:36:46:0e:
4a:43:1f:f4:9f:5b:8d:31:17:96:62:e3:0d:bb:6f:
20:7a:fe:48:73:06:11:99:a9:4a:ef:19:30:10:ae:
6d:c6:9b:94:2a:ce:06:df:b2:19:ca:00:57:99:4d:
6c:21:9e:b4:09:af:5a:bc:4b:5f:a1:37:39:42:73:
8b:da:9c:d9:6b:0c:37:b1:de:8c:77:7d:43:00:35:
f3:71:2a:8e:79:dc:9b:77:ad:ab:0b:96:eb:4b:23:
98:21:b7:f0:c3:ac:bf:64:ba:e4:9f:08:10:5b:d0:
12:7a:a4:69:85:a3:a1:9b:5d:d7:08:8e:03:96:41:
cb:d8:1c:90:28:84:43:4a:b5:44:b6:df:32:5f:e4:
32:84:cc:ee:98:9b:ff:3f:17:67:75:bd:90:d7:af:
04:68:f6:9f:18:15:1e:88:52:b8:e8:46:68:dc:ef:
32:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:D9:DF:07:C1:D7:30:89:C1:77:92:C4:FB:CB:37:56:E7:2E:07:F3
X509v3 Authority Key Identifier:
keyid:6C:5E:4E:F5:51:67:99:FF:E0:BB:1B:83:93:17:DB:D3:55:BB:7A:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bF5O9VFnmf_guxuDkxfb01W7eps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:3a:84:70:28:39:64:23:ee:c9:d1:96:18:57:52:33:f5:b8:
a4:14:a7:0c:bf:66:c5:c3:73:2d:4f:f0:36:b9:90:1e:3d:f6:
6a:dd:b2:20:81:dc:e0:74:c5:87:66:b3:cc:bc:5c:3c:5e:32:
cc:df:fb:95:13:9b:05:5c:1d:f1:2f:c7:6f:e9:7e:92:db:e7:
6e:b7:33:c6:27:2b:cf:0f:23:1e:72:e5:43:90:3c:0d:5c:b8:
3e:d0:7e:d8:47:3c:fa:0f:10:65:58:42:94:63:b1:75:7b:0d:
7e:46:f6:b4:f7:d6:fb:c7:6d:c3:9b:2b:9b:87:07:47:f7:04:
20:d5:16:9a:4d:af:87:a9:c7:04:59:17:76:fc:71:ee:be:d9:
56:da:1b:62:af:b3:0c:42:50:1e:31:04:a5:56:25:76:e8:c6:
f4:7a:50:7e:9d:4f:2a:79:7c:b5:49:27:c8:0c:19:02:d4:14:
37:36:cb:da:d0:39:3e:b1:1d:c6:29:44:60:fe:93:73:ee:a1:
ee:a0:ff:60:16:ce:99:d9:7c:c0:be:87:53:ad:6f:1c:9a:f9:
8d:fa:8e:d4:38:e1:06:8c:8f:4d:5f:2c:24:40:4f:51:ac:f1:
3d:3a:de:24:6a:1f:f4:47:18:94:f7:c5:c2:63:33:e2:e0:f9:
ff:4a:21:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 04:27:32 2025 by rpki-client