Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/bb520c-cd0d-48d8-96a8-0fbe7bd76ffb/1/bBzlMVpD1WYc3NzBudfarPppkPc.mft
File: bBzlMVpD1WYc3NzBudfarPppkPc.mft (raw, json)
Hash identifier: 4YarfsYH6kZIFjKfN99O4Vzov9FpAiQlJmPR5vHl6y8=
Subject key identifier: 52:76:69:D5:78:E3:62:10:D9:3A:BD:D9:6F:D4:AB:53:28:C3:D8:AC
Authority key identifier: 6C:1C:E5:31:5A:43:D5:66:1C:DC:DC:C1:B9:D7:DA:AC:FA:69:90:F7
Certificate issuer: /CN=6c1ce5315a43d5661cdcdcc1b9d7daacfa6990f7
Certificate serial: 0198D5F1D3ADCE0D19370FCE313E1F29BC4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bBzlMVpD1WYc3NzBudfarPppkPc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/bb520c-cd0d-48d8-96a8-0fbe7bd76ffb/1/bBzlMVpD1WYc3NzBudfarPppkPc.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 08:00:51 +0000
Manifest this update: Sat 23 Aug 2025 08:00:51 +0000
Manifest next update: Sun 24 Aug 2025 08:00:51 +0000
Files and hashes: 1: JhjtDeKwWD1t7W9hpKjAKZnoMY8.roa (hash: Ff16XMN/6UD92K3+Zia2rMAz2XhJeIEHmUVTQSXayaU=)
2: bBzlMVpD1WYc3NzBudfarPppkPc.crl (hash: S2+ZPoaNhaSRJVmMSDfo1E4LjDzATqSfwd3O/RlPCjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/bb520c-cd0d-48d8-96a8-0fbe7bd76ffb/1/bBzlMVpD1WYc3NzBudfarPppkPc.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/bb520c-cd0d-48d8-96a8-0fbe7bd76ffb/1/bBzlMVpD1WYc3NzBudfarPppkPc.mft
rsync://rpki.ripe.net/repository/DEFAULT/bBzlMVpD1WYc3NzBudfarPppkPc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:d3:ad:ce:0d:19:37:0f:ce:31:3e:1f:29:bc:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c1ce5315a43d5661cdcdcc1b9d7daacfa6990f7
Validity
Not Before: Aug 23 08:00:51 2025 GMT
Not After : Aug 24 08:00:51 2025 GMT
Subject: CN=527669d578e36210d93abdd96fd4ab5328c3d8ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:85:8b:93:84:be:4b:5c:a5:10:3f:72:04:c1:
4b:47:b3:f3:1e:91:0b:e9:65:0a:de:4c:6f:a4:fc:
75:b0:be:a1:ab:5c:34:62:a8:5f:ca:15:75:5e:6d:
1c:0c:31:eb:26:0d:8c:26:b0:6e:be:bf:8b:a0:39:
93:a7:70:94:4c:a2:44:f1:9a:95:94:53:cb:78:1a:
0b:55:57:96:c1:01:44:1f:ce:05:ee:ac:fc:aa:6e:
b8:c7:68:66:31:47:0e:87:75:78:cf:84:bf:74:d0:
55:98:64:25:73:fa:9c:32:d7:20:40:ff:f7:da:60:
a4:35:9a:64:82:c6:8c:32:92:ae:71:b4:d6:7f:dc:
0e:3f:31:92:45:61:1c:ce:3e:49:3d:b1:89:36:ed:
7a:b7:d0:4a:4c:89:bc:7b:7d:8a:09:5b:30:19:d5:
03:16:3f:37:cf:64:8c:0f:a2:fb:b2:db:4f:3a:d5:
5a:b1:0d:72:24:c0:ee:d0:30:fc:5f:99:d2:f6:b1:
f5:9a:9d:6a:76:bb:9a:11:89:dd:20:45:77:b7:58:
da:98:ef:2e:77:fc:1e:cc:df:e6:b3:bb:ba:c7:1a:
cf:06:5c:15:ab:a9:58:95:83:35:e0:56:66:63:37:
dc:43:20:a7:4f:3e:63:ab:29:8d:eb:20:b2:62:ef:
ba:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:76:69:D5:78:E3:62:10:D9:3A:BD:D9:6F:D4:AB:53:28:C3:D8:AC
X509v3 Authority Key Identifier:
keyid:6C:1C:E5:31:5A:43:D5:66:1C:DC:DC:C1:B9:D7:DA:AC:FA:69:90:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bBzlMVpD1WYc3NzBudfarPppkPc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/bb520c-cd0d-48d8-96a8-0fbe7bd76ffb/1/bBzlMVpD1WYc3NzBudfarPppkPc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/bb520c-cd0d-48d8-96a8-0fbe7bd76ffb/1/bBzlMVpD1WYc3NzBudfarPppkPc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:37:7b:9a:a2:56:84:ce:fd:9f:a3:60:ab:fb:19:f3:fc:f1:
37:cc:e5:03:a2:79:ee:ba:06:3c:88:52:98:95:16:f2:71:24:
3b:0e:d1:c9:5b:04:2a:c7:57:e1:91:03:50:81:e1:7b:d3:41:
d6:d3:79:6f:c3:e4:b7:f0:a6:62:61:43:07:5c:8b:b6:95:3f:
b9:7e:76:cd:5e:24:92:34:d6:29:07:da:48:0f:4c:66:c7:6f:
33:8d:9e:33:e5:6a:22:54:03:9d:26:91:fb:17:fe:a8:b3:53:
26:44:b8:52:9b:a5:26:ef:65:cd:6b:d9:d6:40:b4:a8:b6:f7:
0d:ab:35:13:3b:f0:bf:a4:f8:6d:32:5c:8a:bb:03:00:dc:ed:
43:bf:a8:9b:f1:83:24:1b:fc:bf:88:45:f7:7f:f4:f8:2f:a4:
55:d2:7c:6a:19:ea:3d:36:26:89:97:25:42:c5:bd:df:ad:2a:
96:ab:98:4a:00:78:1f:39:73:2f:5f:8c:0a:5d:a7:56:c7:00:
7d:e2:aa:8f:34:fc:63:37:94:ce:d5:f1:31:b7:f3:71:02:a7:
8b:f9:b9:32:68:34:ee:7b:2c:6c:5a:e2:a8:6a:cd:ee:89:c8:
42:9c:d4:40:cf:a0:db:d4:64:c6:07:d4:a0:89:35:f9:3b:34:
5c:43:64:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:11:08 2025 by rpki-client