Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/8eabcd-e6e9-4f43-ba6c-da2312b65a50/1/bF4zDPom_UTUKU_Nvd-9iVEMakg.mft
File: bF4zDPom_UTUKU_Nvd-9iVEMakg.mft (raw, json)
Hash identifier: 0P3G1Jv0K46Y1LzfjigTrOBricARrs/9TbUdU03tLNg=
Subject key identifier: 6C:03:CD:D4:74:7B:E0:0C:98:71:68:D1:3A:7C:CC:9F:CA:89:E3:B8
Authority key identifier: 6C:5E:33:0C:FA:26:FD:44:D4:29:4F:CD:BD:DF:BD:89:51:0C:6A:48
Certificate issuer: /CN=6c5e330cfa26fd44d4294fcdbddfbd89510c6a48
Certificate serial: 0198D66054F6A61D756547811F7D04D466E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bF4zDPom_UTUKU_Nvd-9iVEMakg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/8eabcd-e6e9-4f43-ba6c-da2312b65a50/1/bF4zDPom_UTUKU_Nvd-9iVEMakg.mft
Manifest number: 0CE3
Signing time: Sat 23 Aug 2025 10:01:34 +0000
Manifest this update: Sat 23 Aug 2025 10:01:34 +0000
Manifest next update: Sun 24 Aug 2025 10:01:34 +0000
Files and hashes: 1: OWnzalrEaHNzu4AsD29DhoKa8Xs.roa (hash: w7GvV8HbETtyhTF6uR9vlKySlaF/SU8e2H/ocdNt7lY=)
2: bF4zDPom_UTUKU_Nvd-9iVEMakg.crl (hash: MphkwAD35mIzH0cv/jzH6Q4u+68atN+bAdvcVV2X50c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/8eabcd-e6e9-4f43-ba6c-da2312b65a50/1/bF4zDPom_UTUKU_Nvd-9iVEMakg.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/8eabcd-e6e9-4f43-ba6c-da2312b65a50/1/bF4zDPom_UTUKU_Nvd-9iVEMakg.mft
rsync://rpki.ripe.net/repository/DEFAULT/bF4zDPom_UTUKU_Nvd-9iVEMakg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:54:f6:a6:1d:75:65:47:81:1f:7d:04:d4:66:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c5e330cfa26fd44d4294fcdbddfbd89510c6a48
Validity
Not Before: Aug 23 10:01:34 2025 GMT
Not After : Aug 24 10:01:34 2025 GMT
Subject: CN=6c03cdd4747be00c987168d13a7ccc9fca89e3b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ad:93:40:f3:08:ba:e4:67:21:df:56:c5:37:
28:1a:c5:4f:30:67:6d:cd:e5:03:70:b9:60:71:e4:
97:13:4c:ce:e2:e8:36:0b:4a:08:90:2c:e6:a7:24:
10:55:b9:86:5c:5f:84:75:69:b4:49:89:9d:3e:9b:
4a:4e:ea:93:db:25:33:df:53:95:0b:09:31:53:5a:
0f:7b:d2:d8:ad:89:82:b6:48:57:8d:e9:3d:ff:9f:
eb:e0:91:91:2d:df:e2:46:d7:d4:b0:5c:f8:74:8c:
d2:50:3f:75:ad:69:c6:1b:2b:bd:fe:f4:66:b3:ca:
36:75:df:bb:73:4c:38:53:26:4f:6b:3b:05:84:e7:
ca:d4:ac:62:28:a2:c5:29:39:8a:95:b1:8b:cd:4c:
e6:45:77:32:ea:da:4c:d3:b6:5e:07:08:02:a8:c8:
5b:93:d5:0d:43:c1:5f:9a:bb:9a:d9:71:a5:0c:86:
f6:1a:a8:dc:7e:e5:51:87:43:fe:10:b4:81:9c:95:
8f:e9:f4:c0:6a:59:41:52:a3:b0:5b:b8:73:1c:a8:
49:09:15:b1:a8:fb:96:d6:94:29:10:65:55:e0:f7:
84:df:cd:9c:d2:c7:3a:4d:ea:b2:58:e1:33:82:88:
cd:78:a7:09:c2:52:5f:47:1e:0c:cd:a1:d5:03:60:
69:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:03:CD:D4:74:7B:E0:0C:98:71:68:D1:3A:7C:CC:9F:CA:89:E3:B8
X509v3 Authority Key Identifier:
keyid:6C:5E:33:0C:FA:26:FD:44:D4:29:4F:CD:BD:DF:BD:89:51:0C:6A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bF4zDPom_UTUKU_Nvd-9iVEMakg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8eabcd-e6e9-4f43-ba6c-da2312b65a50/1/bF4zDPom_UTUKU_Nvd-9iVEMakg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/8eabcd-e6e9-4f43-ba6c-da2312b65a50/1/bF4zDPom_UTUKU_Nvd-9iVEMakg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:3b:4c:ff:4e:ef:1e:70:c2:a4:6e:18:57:2a:66:51:28:f8:
25:e5:a2:f6:b2:96:f9:5d:c9:e3:07:d4:cc:a0:45:2d:22:f6:
dc:bd:23:f6:46:e1:70:01:de:0f:7f:02:39:1b:6e:e4:01:67:
46:df:6c:ea:1f:f1:5e:65:3c:c8:86:40:88:18:ce:91:c1:ab:
4d:cc:c8:a4:a3:e6:07:92:a8:ee:73:8e:90:c2:42:6c:e7:4a:
6d:ec:89:c1:21:73:14:d2:c3:d4:16:5f:8b:12:fd:e5:18:5e:
11:77:df:23:b8:9a:39:08:5a:e2:c7:fd:c9:5c:18:61:a9:38:
12:ef:c3:ae:5e:71:9e:b0:13:9e:ae:6c:95:d8:10:9f:4a:39:
98:b0:d4:a2:8b:46:ef:93:81:54:3d:a9:13:08:c0:5d:b8:d7:
28:fb:06:c9:28:fe:24:77:f1:c3:73:d0:d7:43:ab:cf:e5:5a:
24:b7:62:7f:2c:47:da:3b:6e:98:63:02:f7:4e:9a:4e:f7:9f:
23:23:a3:94:74:3f:c2:38:ff:b0:13:cd:c6:4e:60:b2:f7:88:
3d:60:c2:44:c3:84:0f:55:d0:ac:f3:4a:6f:80:84:d8:36:05:
f5:c8:cc:8b:d4:8e:5e:ab:40:84:e9:05:99:88:b3:2d:a2:a4:
4f:87:80:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:29:26 2025 by rpki-client