Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/66af07-3318-4f4a-89ff-40c5ebc6f736/1/bSPOewwQBo-8RMAhlD4zkBPyruA.mft
File: bSPOewwQBo-8RMAhlD4zkBPyruA.mft (raw, json)
Hash identifier: v1DOEW7nXSCJN1JTmmzUT6phz2vh21dnRs5+l89MbOo=
Subject key identifier: 0D:25:2D:A3:C1:01:2F:06:C0:97:BC:B8:50:40:08:0F:42:17:22:43
Authority key identifier: 6D:23:CE:7B:0C:10:06:8F:BC:44:C0:21:94:3E:33:90:13:F2:AE:E0
Certificate issuer: /CN=6d23ce7b0c10068fbc44c021943e339013f2aee0
Certificate serial: 0198D5BB7E11868F9715C2489D2A70526C9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSPOewwQBo-8RMAhlD4zkBPyruA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/66af07-3318-4f4a-89ff-40c5ebc6f736/1/bSPOewwQBo-8RMAhlD4zkBPyruA.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 07:01:31 +0000
Manifest this update: Sat 23 Aug 2025 07:01:31 +0000
Manifest next update: Sun 24 Aug 2025 07:01:31 +0000
Files and hashes: 1: LQcm0nhQTgxfcAEHFSpSeQFsVHo.roa (hash: ScQNvXtsK5w/Wj3QzlqfHMAUcdIYUpFbtGKhSGmn1FI=)
2: bSPOewwQBo-8RMAhlD4zkBPyruA.crl (hash: v7UShKlXnweBiqbXjTDGJ7loTLTHdKN3qwmPewueG8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/66af07-3318-4f4a-89ff-40c5ebc6f736/1/bSPOewwQBo-8RMAhlD4zkBPyruA.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/66af07-3318-4f4a-89ff-40c5ebc6f736/1/bSPOewwQBo-8RMAhlD4zkBPyruA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bSPOewwQBo-8RMAhlD4zkBPyruA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:7e:11:86:8f:97:15:c2:48:9d:2a:70:52:6c:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d23ce7b0c10068fbc44c021943e339013f2aee0
Validity
Not Before: Aug 23 07:01:31 2025 GMT
Not After : Aug 24 07:01:31 2025 GMT
Subject: CN=0d252da3c1012f06c097bcb85040080f42172243
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1c:e2:95:ab:3e:7b:ef:42:0e:18:fe:86:92:
82:e7:c4:f2:dd:15:17:a2:5d:7b:74:be:c9:91:fd:
e4:5d:1d:71:a6:7c:69:29:20:8c:77:36:b4:b6:a8:
41:d1:a2:0d:8a:00:4f:44:1c:4d:e1:dc:96:c6:a5:
09:c3:4d:6b:2b:09:c1:18:f6:1b:d4:fe:ca:39:29:
61:56:01:b3:0c:2c:f6:23:ae:7d:6e:0e:58:40:57:
72:e1:d5:f9:cb:cb:91:c4:2a:68:c9:55:ac:b2:b8:
43:c6:9b:56:02:f0:ab:35:56:13:55:48:97:91:a3:
e6:87:41:55:87:27:9a:27:80:dd:88:0e:2d:c5:7d:
b4:2a:29:e7:a3:41:23:e7:88:fb:cc:90:cb:27:83:
15:27:6c:20:4d:34:74:f9:d7:fa:d0:33:67:00:53:
8e:13:b4:a6:e8:34:11:45:e5:10:0c:14:d2:53:60:
f8:42:81:e1:b5:b9:91:93:3c:70:78:3a:5f:bd:eb:
cf:b4:78:6e:e6:e1:29:d0:b6:45:13:80:8c:fd:52:
4b:d0:81:e3:61:21:7a:02:3c:da:01:b7:87:e5:44:
6d:81:77:fb:44:d2:a2:f7:df:89:c6:61:87:61:c3:
56:7a:38:8a:de:cf:b5:a5:10:ac:c9:54:c0:7e:1c:
88:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:25:2D:A3:C1:01:2F:06:C0:97:BC:B8:50:40:08:0F:42:17:22:43
X509v3 Authority Key Identifier:
keyid:6D:23:CE:7B:0C:10:06:8F:BC:44:C0:21:94:3E:33:90:13:F2:AE:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSPOewwQBo-8RMAhlD4zkBPyruA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/66af07-3318-4f4a-89ff-40c5ebc6f736/1/bSPOewwQBo-8RMAhlD4zkBPyruA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/66af07-3318-4f4a-89ff-40c5ebc6f736/1/bSPOewwQBo-8RMAhlD4zkBPyruA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:c6:4e:4d:87:2e:f0:31:13:f6:6f:12:54:9b:39:1b:39:ef:
49:b2:7a:0a:34:36:05:e5:16:c6:c2:f2:bf:ba:d4:46:ab:46:
c2:28:56:06:31:de:3e:f2:7f:0f:83:db:64:f9:29:bf:fe:ec:
ff:06:19:d2:dc:ee:7f:d7:2a:c8:c2:79:eb:05:5f:a2:ac:b2:
c8:14:40:86:92:c3:0c:f5:ee:a0:cd:8e:be:38:1b:db:89:2e:
db:f4:d6:f9:15:88:0f:7c:fa:42:39:39:1e:e7:67:56:f5:66:
af:87:5d:e0:16:b7:57:33:32:6b:f3:49:f6:cd:0e:c1:df:92:
fd:37:2b:56:10:f7:90:1b:02:76:73:6b:33:ef:cd:20:c9:f2:
0c:82:f1:a6:b9:ab:70:b6:0f:cb:89:41:2a:96:ef:05:c4:d9:
cc:0d:e5:d4:d1:d8:f8:ba:b7:d8:07:21:45:05:17:6b:b2:1e:
1c:93:2c:dd:83:1b:81:9e:b4:6e:58:c0:d2:63:52:76:3c:dd:
a6:96:71:f8:08:15:87:00:a7:35:c6:66:6d:98:45:49:72:1e:
84:fc:5c:b5:79:70:67:92:94:2a:03:be:52:ce:f0:30:bd:b4:
05:51:d7:c9:f2:94:24:39:49:7a:e1:77:48:64:71:e9:4b:c6:
56:81:47:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:50:15 2025 by rpki-client