Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft
File: bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft (raw, json)
Hash identifier: 3oa5dab48NP31EBXqOzJec5q+MQ8j5d3rVRI4HOqme0=
Subject key identifier: 6D:01:18:6E:3A:21:0E:2B:6F:BD:CB:E9:A7:D4:BF:09:21:ED:52:BD
Authority key identifier: 6C:32:50:A5:C1:BD:AB:74:B1:BD:23:C0:1C:54:A8:D7:0B:6D:EF:20
Certificate issuer: /CN=6c3250a5c1bdab74b1bd23c01c54a8d70b6def20
Certificate serial: 0198D6608A7C61A817C5AB9FC0D4DA834D69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bDJQpcG9q3SxvSPAHFSo1wtt7yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft
Manifest number: 0E4B
Signing time: Sat 23 Aug 2025 10:01:47 +0000
Manifest this update: Sat 23 Aug 2025 10:01:47 +0000
Manifest next update: Sun 24 Aug 2025 10:01:47 +0000
Files and hashes: 1: E4Z3vbTECoIeWAX-nTU7dyjahu0.roa (hash: GRl1qEVfqwDbxNSFnBtUIIbDFbsrhFOvP3cHyBgF290=)
2: NOxJnoU4lwihn16i4CMOYrsiBKg.roa (hash: 5FYdl3/DrqY2o6XapqngUb5quoQMLJ6ufA49O6K0iqA=)
3: TRLssSByve8p7zVYSOimtplK7a0.roa (hash: 8S+o32DqiKQ6FrfFZueA3QrWJ407pI0AN9h5W+tL+lE=)
4: XBbWlDtkaQ_YQj-lOcFRZsR4QS4.roa (hash: pp7r6Abd9Ss2uZLn9bwC0PyAqi0RWKysnSc/agfhI6A=)
5: bDJQpcG9q3SxvSPAHFSo1wtt7yA.crl (hash: 6h7c37aJJBxIek1lwijHP8lrpxQZ6+q2KSe9VEIQm9Q=)
6: efbfkOdYHKxxnHQ3MrY1EfrtYow.roa (hash: YV9ND6Bmrzln21tu47CU3mbzCUoN6XuUoWHbkz/nF7M=)
7: ywz51nx2Az2FIOdnvxmxOqpSYZc.roa (hash: ywhzW4X8gfJWs3Te7uv4qk5K0NbexGMZNrN76iHRuoY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bDJQpcG9q3SxvSPAHFSo1wtt7yA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:8a:7c:61:a8:17:c5:ab:9f:c0:d4:da:83:4d:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c3250a5c1bdab74b1bd23c01c54a8d70b6def20
Validity
Not Before: Aug 23 10:01:47 2025 GMT
Not After : Aug 24 10:01:47 2025 GMT
Subject: CN=6d01186e3a210e2b6fbdcbe9a7d4bf0921ed52bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:53:ca:e4:53:72:94:be:d0:47:83:5a:2e:83:
28:8e:88:18:ed:d1:49:26:ed:e6:84:24:0f:1f:3b:
ce:48:32:54:4f:04:09:d7:73:76:9e:60:88:ab:e7:
fa:f8:ae:75:4d:e8:d7:6a:10:33:5c:ec:10:d4:82:
ea:b2:97:d8:29:c2:0e:ab:a5:4a:90:c8:dd:f0:8b:
e1:01:0d:35:b9:3c:f0:3e:fc:12:83:c1:24:a2:8c:
2b:7c:d3:ee:04:33:6e:e9:94:75:64:2d:27:4c:26:
f8:e2:c4:6b:39:94:f6:f1:82:92:20:8c:69:37:aa:
d1:d2:2a:bb:c3:cc:54:45:23:15:64:72:29:b8:49:
de:3b:a7:a5:27:59:01:0f:90:9c:60:dc:3a:43:02:
65:02:92:89:43:fb:32:b5:69:41:da:83:aa:ab:f3:
fd:e5:b6:0f:64:fa:76:3b:ec:6e:ec:6f:f8:ba:3b:
ff:54:86:a6:de:b3:ba:bb:e8:5e:33:9d:ca:c3:50:
d8:22:1e:dd:f0:f5:4a:f9:dc:4a:e3:f6:ee:3b:e9:
ef:99:60:58:d0:74:7c:05:ab:55:37:7c:59:ae:88:
ba:be:72:0a:7a:e5:70:57:8d:31:28:bb:12:0b:65:
00:b7:a9:b6:5e:94:c7:fb:0f:db:9d:17:77:21:32:
29:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:01:18:6E:3A:21:0E:2B:6F:BD:CB:E9:A7:D4:BF:09:21:ED:52:BD
X509v3 Authority Key Identifier:
keyid:6C:32:50:A5:C1:BD:AB:74:B1:BD:23:C0:1C:54:A8:D7:0B:6D:EF:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bDJQpcG9q3SxvSPAHFSo1wtt7yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:84:9e:c6:20:65:62:35:c1:00:f7:57:de:ce:8f:95:95:54:
99:2d:6c:af:1a:7e:f8:84:34:e9:b1:66:d6:e9:cf:9d:16:a9:
a8:e1:54:db:c1:19:c9:17:a0:19:d1:c4:52:a6:ab:1e:c2:d2:
6d:b2:d5:7b:9e:93:d0:15:3a:64:f2:ed:9f:ce:64:18:df:1d:
48:c9:ff:94:4f:02:1a:b9:5d:80:b2:df:8f:de:5f:33:27:3f:
4c:67:60:c9:49:fe:0d:ee:04:6b:d7:ed:99:50:b9:ba:a7:94:
b8:4c:8c:3d:40:9c:ee:be:88:b5:e2:d5:21:a8:28:a6:22:93:
5b:f1:aa:d4:6b:ba:2f:da:38:57:3d:ea:e2:f5:54:45:c1:a2:
74:0a:ab:8a:02:f0:75:2a:83:6a:cd:f9:24:ee:b3:70:2f:f9:
ac:d7:fa:2b:56:95:ac:9e:f1:db:46:c0:12:be:bc:87:4b:5d:
cb:19:f6:88:6b:3c:65:05:f2:8c:61:ca:cb:ab:51:9d:7c:19:
82:d5:36:b7:82:d9:8a:e9:b2:15:dc:dd:cc:ef:8b:c1:0d:3c:
e3:c3:06:e5:27:fc:99:71:05:9e:a8:e6:87:00:5d:9b:0e:21:
f5:ec:5c:b6:16:25:c4:ef:d6:8c:d1:5a:54:cb:5b:f5:bf:cd:
c7:74:13:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:27:25 2025 by rpki-client