Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/aeb23a-f8d8-4a1b-a232-3d7e4b496b23/1/bRZNm2s8fL0enSecbIZ7rTl9Hhc.mft
File: bRZNm2s8fL0enSecbIZ7rTl9Hhc.mft (raw, json)
Hash identifier: eTo18B4uIutoZBLTUjX4VY2kLYifuUJyH+T32WSvQJU=
Subject key identifier: 99:56:F0:47:63:8E:FC:5D:86:29:BF:89:2D:D0:8F:95:EE:08:18:48
Authority key identifier: 6D:16:4D:9B:6B:3C:7C:BD:1E:9D:27:9C:6C:86:7B:AD:39:7D:1E:17
Certificate issuer: /CN=6d164d9b6b3c7cbd1e9d279c6c867bad397d1e17
Certificate serial: 0198D54E437F0608883AE7EB3583A63B4E38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bRZNm2s8fL0enSecbIZ7rTl9Hhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/aeb23a-f8d8-4a1b-a232-3d7e4b496b23/1/bRZNm2s8fL0enSecbIZ7rTl9Hhc.mft
Manifest number: 0A82
Signing time: Sat 23 Aug 2025 05:02:12 +0000
Manifest this update: Sat 23 Aug 2025 05:02:12 +0000
Manifest next update: Sun 24 Aug 2025 05:02:12 +0000
Files and hashes: 1: bRZNm2s8fL0enSecbIZ7rTl9Hhc.crl (hash: p53hKMbRLILmVpcX47TyK4uwqMS+wl6XPfc+wunswg0=)
2: hsgvxC-RYpJqJPiH3EOPPBtvmDs.roa (hash: fWUKDUVq/hZV5tGeZXCiDObK4HzJ5I1tTEAPSEWWyDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/aeb23a-f8d8-4a1b-a232-3d7e4b496b23/1/bRZNm2s8fL0enSecbIZ7rTl9Hhc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/aeb23a-f8d8-4a1b-a232-3d7e4b496b23/1/bRZNm2s8fL0enSecbIZ7rTl9Hhc.mft
rsync://rpki.ripe.net/repository/DEFAULT/bRZNm2s8fL0enSecbIZ7rTl9Hhc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:43:7f:06:08:88:3a:e7:eb:35:83:a6:3b:4e:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d164d9b6b3c7cbd1e9d279c6c867bad397d1e17
Validity
Not Before: Aug 23 05:02:12 2025 GMT
Not After : Aug 24 05:02:12 2025 GMT
Subject: CN=9956f047638efc5d8629bf892dd08f95ee081848
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:09:58:72:74:6e:38:5a:9b:f1:75:88:53:27:
66:cb:ef:ba:ba:6c:c3:14:70:68:14:00:b0:49:3a:
ee:3e:82:d1:31:fe:e7:f0:0d:5c:03:95:70:93:7b:
3c:f4:2e:59:7e:57:d0:6c:0b:a3:0c:88:74:37:de:
58:f3:56:be:8f:e1:9d:d5:cd:f6:0a:9e:53:0e:6e:
ae:51:83:08:c2:2c:1a:d1:d2:1f:89:b0:fd:47:48:
ae:38:ab:2a:3b:4c:ab:18:5a:96:08:8c:32:b0:43:
62:6f:dc:48:45:7f:e9:68:58:f8:93:cc:cc:ab:76:
f3:8a:4a:13:4c:ac:3a:fa:18:3f:08:de:bd:9f:6d:
87:44:2d:69:8c:38:69:73:d9:64:ca:43:75:56:be:
5e:cb:4f:81:b5:ab:43:d3:9a:fc:cb:82:0f:24:ee:
22:5f:54:e6:71:1e:ea:4e:a2:f5:36:99:59:e6:6e:
72:88:8a:98:6f:9e:8c:ac:bc:82:7c:21:f1:07:a8:
31:76:67:21:e8:0c:0d:be:6f:5c:35:31:ad:86:88:
4f:ca:6f:42:a5:f9:8f:fa:55:c2:93:2a:90:0d:5f:
76:e0:10:c3:00:6c:5d:ce:d8:34:b7:e3:94:e6:82:
fa:98:6d:ff:e1:19:c2:0b:3f:5b:f9:c4:d6:d2:61:
2d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:56:F0:47:63:8E:FC:5D:86:29:BF:89:2D:D0:8F:95:EE:08:18:48
X509v3 Authority Key Identifier:
keyid:6D:16:4D:9B:6B:3C:7C:BD:1E:9D:27:9C:6C:86:7B:AD:39:7D:1E:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bRZNm2s8fL0enSecbIZ7rTl9Hhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/aeb23a-f8d8-4a1b-a232-3d7e4b496b23/1/bRZNm2s8fL0enSecbIZ7rTl9Hhc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/aeb23a-f8d8-4a1b-a232-3d7e4b496b23/1/bRZNm2s8fL0enSecbIZ7rTl9Hhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:51:be:b6:91:1c:20:b8:f1:95:00:df:18:71:06:fe:d5:0a:
42:2d:ea:61:04:45:61:45:fe:6a:c7:54:6e:9b:99:77:44:16:
dd:7e:fd:6b:02:5a:3a:2e:3c:bc:73:f9:b4:d2:ac:bc:f2:fc:
ad:ac:f5:08:0a:c4:80:f9:32:e4:e8:8c:97:e8:b1:45:64:f0:
66:87:89:42:bb:9a:ab:52:66:a1:b0:ed:e4:12:e3:b3:3d:df:
1d:98:32:82:04:34:20:80:fe:7c:f5:10:70:99:a0:f7:f7:12:
39:5e:a6:41:a1:9a:ad:b4:ad:92:b2:71:dd:83:ce:6a:b7:14:
5d:08:5a:56:aa:1a:94:d0:ec:6b:a2:1d:19:8a:c5:e7:b7:b7:
5b:8f:4f:7e:a4:90:99:e4:25:f5:6c:e0:7d:2e:c7:3c:2a:81:
53:ce:60:d3:85:ff:7b:92:0d:ef:78:97:4f:c1:55:a0:d9:0e:
48:26:cb:eb:fe:e5:d1:60:73:a1:93:71:ae:2c:7d:ee:1c:ad:
9d:b2:62:cb:fa:ec:a3:8a:aa:87:3e:c1:04:2c:a5:0f:9a:5c:
1c:c9:9c:c8:c9:01:22:a9:dd:13:ad:bc:1e:17:4f:75:b4:58:
1d:c6:f3:a6:ad:cf:a5:27:a9:b6:9b:8a:d9:cd:4e:92:6d:7f:
ca:8c:2b:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:49:27 2025 by rpki-client