Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/Bc9q2cvp97KGPgzsNsFTxdBzauI.mft
File: Bc9q2cvp97KGPgzsNsFTxdBzauI.mft (raw, json)
Hash identifier: g0WpPNwNLN9kkhGhww+xwu6iIncxhBc3RoD+VofzbvI=
Subject key identifier: 6F:12:DC:2F:6F:03:46:1F:66:21:F6:DC:0B:C3:78:B2:FD:A7:FC:B7
Authority key identifier: 05:CF:6A:D9:CB:E9:F7:B2:86:3E:0C:EC:36:C1:53:C5:D0:73:6A:E2
Certificate issuer: /CN=05cf6ad9cbe9f7b2863e0cec36c153c5d0736ae2
Certificate serial: 0198D7A8D20C71DFFA6F2FA5040360914656
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bc9q2cvp97KGPgzsNsFTxdBzauI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/Bc9q2cvp97KGPgzsNsFTxdBzauI.mft
Manifest number: 15DC
Signing time: Sat 23 Aug 2025 16:00:21 +0000
Manifest this update: Sat 23 Aug 2025 16:00:21 +0000
Manifest next update: Sun 24 Aug 2025 16:00:21 +0000
Files and hashes: 1: Bc9q2cvp97KGPgzsNsFTxdBzauI.crl (hash: lsvNBRX0ko9oC4I2xDoqTjmzTmS7d6VdxHowwJ8tDWY=)
2: FICKnMTDt6RllV7DRYxFFl_kXjI.roa (hash: VbuR+rFejgRWNBNYlJRCVwMyUQVXxPvp/no+ZnMl4bY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/Bc9q2cvp97KGPgzsNsFTxdBzauI.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/Bc9q2cvp97KGPgzsNsFTxdBzauI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bc9q2cvp97KGPgzsNsFTxdBzauI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:a8:d2:0c:71:df:fa:6f:2f:a5:04:03:60:91:46:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05cf6ad9cbe9f7b2863e0cec36c153c5d0736ae2
Validity
Not Before: Aug 23 16:00:21 2025 GMT
Not After : Aug 24 16:00:21 2025 GMT
Subject: CN=6f12dc2f6f03461f6621f6dc0bc378b2fda7fcb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:9c:67:97:19:70:80:b0:2d:bc:80:2a:e6:f6:
c9:49:91:ee:e7:22:df:bf:05:ee:a6:da:9e:f9:a5:
06:67:c0:66:6f:71:17:82:3f:43:0d:ef:f4:1f:83:
31:43:0c:fb:11:29:ca:e6:c0:f9:e7:09:fd:e6:84:
69:76:dd:4f:16:01:99:10:b7:8b:62:d1:96:ad:fa:
b5:99:f2:a4:6b:cd:f1:f5:ad:c8:40:21:40:36:c2:
90:a1:80:47:ca:65:99:d4:48:e5:5c:cf:d1:ec:79:
e6:f0:b5:3b:82:17:f0:9d:1a:dc:89:ce:3a:38:88:
54:5b:0f:d3:e6:a0:d1:1e:c2:26:1c:fb:20:96:ae:
d9:15:fd:1f:b7:97:ea:65:69:e7:68:5c:76:7f:4f:
ed:01:34:81:ed:b5:35:e0:f8:75:44:d9:e0:77:38:
6b:a6:13:62:95:a8:8b:fd:c5:32:ea:9f:59:b1:d1:
17:cd:d6:f4:82:bf:b3:e2:07:8a:65:ec:8b:cd:f1:
9f:92:31:b8:c8:7c:1a:1b:94:39:82:10:c1:76:fc:
0e:62:f4:76:37:57:ad:4a:cb:3c:4c:81:b5:9b:79:
de:6a:9b:99:96:75:84:e6:55:95:af:04:ed:d5:39:
de:02:ca:b2:ec:74:e6:e1:0d:73:8c:47:10:77:3c:
9d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:12:DC:2F:6F:03:46:1F:66:21:F6:DC:0B:C3:78:B2:FD:A7:FC:B7
X509v3 Authority Key Identifier:
keyid:05:CF:6A:D9:CB:E9:F7:B2:86:3E:0C:EC:36:C1:53:C5:D0:73:6A:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bc9q2cvp97KGPgzsNsFTxdBzauI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/Bc9q2cvp97KGPgzsNsFTxdBzauI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4bec3b-4f57-48d6-bdcf-748af1f8400e/1/Bc9q2cvp97KGPgzsNsFTxdBzauI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:a4:80:1d:cb:0f:11:a5:05:ce:bb:f4:00:7a:25:71:77:eb:
65:24:04:b7:ca:65:a8:00:29:5c:62:89:b3:8b:fd:44:22:cf:
ab:b0:a2:f6:a7:9c:f5:d2:bf:cf:3d:c7:aa:4f:cc:85:49:d2:
74:01:5a:3d:ce:77:7e:37:92:4e:93:d1:b1:9f:b7:23:a0:b8:
dd:bb:76:15:c9:c4:1f:09:f8:b5:22:2a:50:ed:c5:11:50:12:
c7:f5:38:3d:63:fa:d2:39:2c:84:b1:09:5d:1a:83:dd:05:61:
a5:9a:07:32:c3:38:21:c7:30:9b:48:fc:40:1b:ef:47:ea:21:
94:6f:d5:20:be:6e:fd:81:74:6b:f2:74:37:e4:0e:28:d7:94:
94:0a:79:a4:d0:07:f7:42:2b:ad:d1:e8:65:41:65:47:3d:cb:
75:74:c4:90:21:d0:a3:84:e0:37:45:a3:d6:2b:e1:b5:5d:6a:
c6:c6:28:d5:8b:cb:c4:df:24:b7:06:97:e2:68:4f:4e:0c:db:
ec:e5:98:63:70:da:23:06:e9:d0:b4:f8:29:82:28:ec:15:86:
4d:b6:3f:f7:ad:4d:e9:e4:9c:2b:4a:32:f3:b5:ff:a4:90:08:
0f:a9:3a:fe:e0:99:44:b2:4a:ba:33:8b:6a:b8:cb:fb:ab:ff:
e0:48:4f:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:32:17 2025 by rpki-client