Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/c4a45f-4213-4f01-98f6-98eb53b9502a/1/bNoVAPXJY-0jT9lIWfI7MvSIXfw.mft
File: bNoVAPXJY-0jT9lIWfI7MvSIXfw.mft (raw, json)
Hash identifier: PeFoyJzm7EKjkza9Nij4JNze8m890ubh1EOjBS33xxA=
Subject key identifier: 75:A8:8D:00:03:1B:9F:65:83:A1:CE:D8:A5:8F:65:5A:7E:4B:E8:49
Authority key identifier: 6C:DA:15:00:F5:C9:63:ED:23:4F:D9:48:59:F2:3B:32:F4:88:5D:FC
Certificate issuer: /CN=6cda1500f5c963ed234fd94859f23b32f4885dfc
Certificate serial: 0198D515AD668FCABD4D487C7B6A566F9A47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bNoVAPXJY-0jT9lIWfI7MvSIXfw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/c4a45f-4213-4f01-98f6-98eb53b9502a/1/bNoVAPXJY-0jT9lIWfI7MvSIXfw.mft
Manifest number: 1428
Signing time: Sat 23 Aug 2025 04:00:24 +0000
Manifest this update: Sat 23 Aug 2025 04:00:24 +0000
Manifest next update: Sun 24 Aug 2025 04:00:24 +0000
Files and hashes: 1: VL7EtVPW-Ba0tPYDXOg-sXCbn4U.roa (hash: gs/UbUcaVfJny1jbjzMdFc3Au+82Qsl/IH1AWl7JplE=)
2: bNoVAPXJY-0jT9lIWfI7MvSIXfw.crl (hash: 4yI2MkuujLQAfg5+Bk6vnFMzVSSK+XhssKGU5eUIRxk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/c4a45f-4213-4f01-98f6-98eb53b9502a/1/bNoVAPXJY-0jT9lIWfI7MvSIXfw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/c4a45f-4213-4f01-98f6-98eb53b9502a/1/bNoVAPXJY-0jT9lIWfI7MvSIXfw.mft
rsync://rpki.ripe.net/repository/DEFAULT/bNoVAPXJY-0jT9lIWfI7MvSIXfw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:ad:66:8f:ca:bd:4d:48:7c:7b:6a:56:6f:9a:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cda1500f5c963ed234fd94859f23b32f4885dfc
Validity
Not Before: Aug 23 04:00:24 2025 GMT
Not After : Aug 24 04:00:24 2025 GMT
Subject: CN=75a88d00031b9f6583a1ced8a58f655a7e4be849
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:9a:94:a8:0e:53:b8:86:d9:47:9b:8f:5e:79:
13:98:a4:2f:31:06:c4:6c:c8:09:08:38:7a:c9:f5:
91:cd:29:79:f5:59:e8:6b:e0:ad:a8:43:f9:3f:7b:
4f:78:09:26:3c:ce:c4:bb:fe:10:cb:1f:70:a8:78:
86:3f:6f:ef:57:ee:18:48:ec:50:c5:00:43:f8:9a:
29:e6:b4:80:dd:5b:b7:d3:1c:f2:cf:23:b6:07:1e:
9d:a7:c7:c7:f2:f5:5c:0d:6d:35:8f:d3:19:db:3a:
21:e4:67:8d:fd:b6:a3:d1:9a:e4:75:a0:29:0f:95:
d6:ef:03:46:58:34:ad:2d:6a:f0:d8:f9:ac:de:2d:
2c:96:ac:b6:a9:4b:27:fd:7e:90:7e:1c:d7:07:78:
6d:2c:8a:ff:26:12:d4:02:30:c0:ee:12:2b:60:69:
43:52:7c:fd:c1:8a:44:71:bc:49:bf:02:bd:65:8f:
6c:17:5a:a5:d2:be:59:5d:d9:7a:dc:68:ad:cc:9e:
43:b8:9f:c0:24:eb:db:6c:22:1c:dd:20:cb:82:2b:
91:ba:f4:86:58:cf:d1:03:f7:d8:a2:d5:6e:9c:d8:
ab:d5:eb:c9:3e:02:54:53:a6:55:e4:b9:c5:7f:6c:
5d:89:02:35:2e:63:3b:6c:d9:e5:dd:05:8a:df:93:
69:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:A8:8D:00:03:1B:9F:65:83:A1:CE:D8:A5:8F:65:5A:7E:4B:E8:49
X509v3 Authority Key Identifier:
keyid:6C:DA:15:00:F5:C9:63:ED:23:4F:D9:48:59:F2:3B:32:F4:88:5D:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bNoVAPXJY-0jT9lIWfI7MvSIXfw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c4a45f-4213-4f01-98f6-98eb53b9502a/1/bNoVAPXJY-0jT9lIWfI7MvSIXfw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/c4a45f-4213-4f01-98f6-98eb53b9502a/1/bNoVAPXJY-0jT9lIWfI7MvSIXfw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:db:c9:e0:13:df:29:0a:c2:42:96:e5:2c:80:3f:d0:ae:7f:
8e:aa:dd:1f:61:b0:93:6d:0c:8c:a5:b2:4e:c4:1f:b1:96:a7:
88:96:f2:f4:65:d3:db:3b:1a:ec:36:ab:80:fa:0b:36:0a:76:
15:17:cd:e9:93:4c:1b:46:28:fb:33:0d:db:6e:61:92:0f:07:
d2:92:b1:97:09:d1:39:52:38:0e:92:d7:c2:29:80:20:31:a2:
d2:54:06:cb:62:b9:ac:a6:c1:e4:fc:f5:42:9e:9a:90:a2:8c:
fd:fd:49:8d:67:69:90:a0:7b:23:9e:bf:a7:6d:f3:a8:49:46:
5d:0d:7f:5e:76:d5:c6:4d:0b:49:61:b0:79:a0:81:3e:28:78:
7e:f9:00:bd:27:ee:bf:6a:be:a6:df:0f:fe:6a:93:88:4d:03:
18:7e:63:e8:88:64:ee:37:be:f0:22:ab:62:5b:8e:d7:4c:31:
86:9c:3a:16:66:c0:8a:f6:68:14:63:e6:4f:4f:2f:49:44:fc:
c6:b3:7a:80:bd:f0:fb:b7:16:0f:63:0f:5e:e1:55:d9:be:bc:
f2:fa:0c:8a:8f:79:76:7e:41:b5:c2:f1:35:04:25:f6:57:81:
a7:91:f0:3e:09:1f:fd:07:34:b2:77:e0:f7:c0:54:55:6b:69:
c0:28:e2:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:31:44 2025 by rpki-client