Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/5f217a-de26-4bf0-ac20-4fdae09a677d/1/bu8NxR3_8BA0GVmZBjZVcrf-SP4.mft
File: bu8NxR3_8BA0GVmZBjZVcrf-SP4.mft (raw, json)
Hash identifier: 9Fc+sE308/OKc51KkvnNJCjAiwxLWaQHMiJrltryIxM=
Subject key identifier: A7:5D:64:FE:3C:D4:01:B1:F7:A4:A4:BE:34:22:74:F2:83:AD:25:91
Authority key identifier: 6E:EF:0D:C5:1D:FF:F0:10:34:19:59:99:06:36:55:72:B7:FE:48:FE
Certificate issuer: /CN=6eef0dc51dfff0103419599906365572b7fe48fe
Certificate serial: 0198D473DAEE4A4CCC2528D666A79725AC02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bu8NxR3_8BA0GVmZBjZVcrf-SP4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/5f217a-de26-4bf0-ac20-4fdae09a677d/1/bu8NxR3_8BA0GVmZBjZVcrf-SP4.mft
Manifest number: 15A6
Signing time: Sat 23 Aug 2025 01:03:39 +0000
Manifest this update: Sat 23 Aug 2025 01:03:39 +0000
Manifest next update: Sun 24 Aug 2025 01:03:39 +0000
Files and hashes: 1: bu8NxR3_8BA0GVmZBjZVcrf-SP4.crl (hash: jNGfTX27z+DBPiSW3UOI4jdNenXQGhuhhD+OnBH1HcE=)
2: c2zsKW42u9qFvcl-pNszF08tguU.roa (hash: V/eBjVd839gDYIh5zShIDIAcf0aMo/ChEoQd1e5SHwU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/5f217a-de26-4bf0-ac20-4fdae09a677d/1/bu8NxR3_8BA0GVmZBjZVcrf-SP4.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/5f217a-de26-4bf0-ac20-4fdae09a677d/1/bu8NxR3_8BA0GVmZBjZVcrf-SP4.mft
rsync://rpki.ripe.net/repository/DEFAULT/bu8NxR3_8BA0GVmZBjZVcrf-SP4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:da:ee:4a:4c:cc:25:28:d6:66:a7:97:25:ac:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eef0dc51dfff0103419599906365572b7fe48fe
Validity
Not Before: Aug 23 01:03:39 2025 GMT
Not After : Aug 24 01:03:39 2025 GMT
Subject: CN=a75d64fe3cd401b1f7a4a4be342274f283ad2591
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4d:80:73:0e:e3:ae:8b:88:c3:31:b5:74:8f:
3b:64:fa:e2:4b:bd:89:c3:62:52:f0:55:26:40:3d:
9b:bc:ab:e3:63:73:36:f2:35:94:5d:d6:f4:f8:ed:
52:fe:09:d8:fb:9a:6f:87:d6:33:69:15:38:b9:b9:
7c:e2:b6:2d:b4:ea:ec:ed:e2:0d:b7:b4:47:08:0a:
66:58:93:b5:5a:86:7d:90:bd:a9:59:71:4c:94:40:
54:93:c9:e9:d5:20:56:1b:05:9b:ed:de:49:8b:4f:
40:21:da:96:95:f7:ba:08:08:c5:55:82:31:c4:2b:
70:5e:e0:19:75:24:45:bf:55:4b:db:cc:6c:ea:31:
1b:a4:dd:00:6b:a3:e0:e3:be:1f:db:d0:2d:a6:75:
16:cd:8d:73:3d:01:f9:5a:95:01:7e:de:06:6b:f1:
49:20:3b:aa:c4:05:17:0d:b3:70:25:48:b2:9f:78:
9f:7c:31:fa:15:4a:fb:3f:4f:4b:78:c2:25:c2:dd:
e8:11:a8:44:17:6e:85:1b:db:70:50:8c:e5:b3:02:
5b:12:bd:b4:1d:33:5e:63:d0:34:f3:a9:93:4c:92:
ae:84:ca:84:aa:62:ba:13:f5:bf:f6:a9:e5:a3:c7:
11:91:ed:1b:41:e4:3b:67:b8:ae:54:2e:38:71:0e:
f6:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:5D:64:FE:3C:D4:01:B1:F7:A4:A4:BE:34:22:74:F2:83:AD:25:91
X509v3 Authority Key Identifier:
keyid:6E:EF:0D:C5:1D:FF:F0:10:34:19:59:99:06:36:55:72:B7:FE:48:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bu8NxR3_8BA0GVmZBjZVcrf-SP4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/5f217a-de26-4bf0-ac20-4fdae09a677d/1/bu8NxR3_8BA0GVmZBjZVcrf-SP4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/5f217a-de26-4bf0-ac20-4fdae09a677d/1/bu8NxR3_8BA0GVmZBjZVcrf-SP4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:89:60:04:e2:91:ac:af:cd:df:b4:83:47:cf:38:5c:eb:6d:
5c:e3:dd:c9:57:38:88:ed:de:6f:82:df:50:64:af:ed:79:86:
a0:de:3f:1e:f6:96:eb:a4:ed:d6:09:60:54:91:e9:a9:0c:77:
dd:64:2a:e6:ca:98:f2:04:7d:fd:a1:ce:fd:75:b5:67:07:c5:
ad:34:c7:30:7f:9c:da:62:c0:8a:b1:81:fe:20:f9:ad:a8:52:
f8:8f:98:d8:cd:f3:86:06:6e:70:9b:54:9b:f2:eb:d2:26:57:
83:90:55:78:10:f8:99:99:1b:11:4e:1d:16:4e:9a:9b:df:fc:
7f:1f:f8:06:62:7d:9a:c0:0d:ba:0c:7e:f8:2c:6c:45:6b:dd:
b8:77:8f:45:21:1d:e6:e4:1b:e9:78:cd:91:78:e8:09:d9:1d:
f1:21:e0:ac:05:ea:c9:4d:7b:70:dd:5f:90:e5:e3:95:c0:11:
44:f8:36:2c:ee:21:19:ab:50:71:e7:9c:47:7d:fd:4a:5b:73:
48:48:6b:38:97:2f:79:cf:8f:44:7f:8a:ce:92:4f:fc:3c:c6:
e0:b5:2a:77:ba:87:7b:93:d4:43:a3:76:27:ab:5f:96:17:08:
5f:bd:c3:a4:51:24:80:e4:a2:ba:c0:82:e1:83:1b:f8:b6:48:
89:71:f9:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:38:23 2025 by rpki-client