Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.mft
File: Bk3NDucBTvsuO1VPu3BjhO8R0FE.mft (raw, json)
Hash identifier: 8uma7i9udGQpfi088k1pHZgddkWTvdh0S9IVkEtLnXQ=
Subject key identifier: 48:13:07:04:CA:20:FD:88:21:D0:47:27:13:63:C7:A0:67:93:97:1B
Authority key identifier: 06:4D:CD:0E:E7:01:4E:FB:2E:3B:55:4F:BB:70:63:84:EF:11:D0:51
Certificate issuer: /CN=064dcd0ee7014efb2e3b554fbb706384ef11d051
Certificate serial: 0198D54E8B5E1DE0D89AF7A042A7DCF81015
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bk3NDucBTvsuO1VPu3BjhO8R0FE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 05:02:31 +0000
Manifest this update: Sat 23 Aug 2025 05:02:31 +0000
Manifest next update: Sun 24 Aug 2025 05:02:31 +0000
Files and hashes: 1: Bk3NDucBTvsuO1VPu3BjhO8R0FE.crl (hash: nCvgSsA61okGyzDwx3qsI7tY/s9EoBIZiBfjNVbH6zY=)
2: GCU6ctyJbqAMhWQYVpX0QaP8Qy4.roa (hash: dW5jCxXLX0Q6KCT48fWLPtjZskUAawNAnNuHkyFw1ow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bk3NDucBTvsuO1VPu3BjhO8R0FE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:8b:5e:1d:e0:d8:9a:f7:a0:42:a7:dc:f8:10:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=064dcd0ee7014efb2e3b554fbb706384ef11d051
Validity
Not Before: Aug 23 05:02:31 2025 GMT
Not After : Aug 24 05:02:31 2025 GMT
Subject: CN=48130704ca20fd8821d047271363c7a06793971b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ad:74:34:ca:3e:6c:83:42:84:98:34:65:09:
fd:d1:84:69:8b:c6:94:26:35:69:31:09:e2:15:da:
e3:b4:5a:2e:4a:c2:c3:60:95:b0:9b:af:da:01:92:
61:97:e0:dc:01:92:fa:37:ca:2a:0f:02:45:0d:0c:
a7:1c:a6:be:7e:c8:5c:4f:0f:68:28:1e:86:d4:06:
ce:59:24:af:a5:8d:0d:36:bc:19:42:a1:21:92:b3:
a0:d2:73:3b:22:37:5a:79:27:11:59:54:66:87:f0:
02:4d:f1:99:4b:c4:40:04:e0:ba:af:84:fc:5f:fb:
fe:34:bf:b1:a5:ae:ea:a0:70:8b:df:47:bd:af:e0:
13:b2:76:b8:c2:7f:c3:88:ea:46:d6:a6:bb:e4:0e:
3a:be:22:4b:11:cb:5b:94:a3:88:19:59:b5:80:b5:
6d:5e:89:7b:a0:e6:df:21:76:49:bd:22:c1:b8:c5:
df:42:5f:ef:58:1e:5b:6d:6e:c5:ef:00:0b:c4:df:
ce:9a:d7:0c:3a:e4:65:44:c0:3b:35:30:7d:ad:f9:
c6:91:7a:0f:92:0e:2a:bc:26:73:d4:e5:a2:34:48:
f3:9e:73:08:d0:c3:a6:dd:22:21:da:76:3a:30:22:
7d:55:1a:68:8b:3f:b3:bf:e4:cd:af:bb:6b:bf:12:
14:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:13:07:04:CA:20:FD:88:21:D0:47:27:13:63:C7:A0:67:93:97:1B
X509v3 Authority Key Identifier:
keyid:06:4D:CD:0E:E7:01:4E:FB:2E:3B:55:4F:BB:70:63:84:EF:11:D0:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bk3NDucBTvsuO1VPu3BjhO8R0FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:94:87:90:f4:d4:0e:11:c8:fc:a5:d5:90:94:ef:c4:14:15:
45:2e:fa:52:67:be:f5:d4:1e:19:21:13:79:20:82:96:5c:de:
1d:8b:b0:cb:c6:fe:75:34:b0:47:f4:79:2e:b1:cc:40:62:90:
fc:1c:92:63:bb:6c:53:f2:5f:05:51:23:ec:30:16:d0:e7:42:
c0:e0:61:89:43:3a:e1:86:07:09:99:dc:a6:97:fe:5c:c0:09:
ad:36:db:40:f9:bd:bf:d5:16:6f:f0:f6:86:79:e8:ec:c2:74:
b6:16:fc:02:1f:e6:d7:38:08:a9:fc:30:4e:8c:9e:a4:cf:95:
8e:72:5b:66:c5:09:84:15:ec:2e:08:8e:58:10:23:16:73:d9:
fd:3b:4b:6d:96:bc:b2:2c:25:18:31:bc:44:a7:79:1e:18:47:
f8:3d:ed:f9:ea:70:ab:7a:9f:2c:c0:e9:1f:3e:a8:c9:a0:2f:
ae:f4:f1:43:8f:42:2c:2b:32:dd:75:91:17:68:af:b7:6f:4b:
e3:ca:2a:6d:8e:eb:d4:53:39:dd:23:2e:46:31:7a:23:80:9d:
0b:d8:a9:19:17:1d:03:ae:32:00:a3:c6:e2:0c:01:46:33:44:
0c:45:a1:19:91:98:50:5a:d3:63:eb:5c:32:bb:b6:2c:a8:40:
ee:ff:61:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:32:54 2025 by rpki-client