Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/61979a-ea83-4ee7-b7f7-e168db2c54b4/1/bZ_0pTo9sPQyggzXN9VD-Gepctg.mft
File: bZ_0pTo9sPQyggzXN9VD-Gepctg.mft (raw, json)
Hash identifier: ogsjYT5i0wCRQ8ZTZG1xp4WNslcxmPbBmXcksRobcOQ=
Subject key identifier: AB:92:9F:68:1E:1B:56:31:62:E1:B2:A7:19:BF:A1:2C:22:1B:57:70
Authority key identifier: 6D:9F:F4:A5:3A:3D:B0:F4:32:82:0C:D7:37:D5:43:F8:67:A9:72:D8
Certificate issuer: /CN=6d9ff4a53a3db0f432820cd737d543f867a972d8
Certificate serial: 0198D7731D722DA0D5B026E5DDFA89F3676E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bZ_0pTo9sPQyggzXN9VD-Gepctg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/61979a-ea83-4ee7-b7f7-e168db2c54b4/1/bZ_0pTo9sPQyggzXN9VD-Gepctg.mft
Manifest number: 164D
Signing time: Sat 23 Aug 2025 15:01:42 +0000
Manifest this update: Sat 23 Aug 2025 15:01:42 +0000
Manifest next update: Sun 24 Aug 2025 15:01:42 +0000
Files and hashes: 1: BhpMJWOfusOQEVpOrd-46zXykZY.roa (hash: 0YBwZ2xZ2kE/oCS5ZASinXgiSDtB02PggMsq/vyRmUc=)
2: bZ_0pTo9sPQyggzXN9VD-Gepctg.crl (hash: 2uRAu8innNyw3Xeu0Nk8l/7T6atP+gFxMxGs+RGXH74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/61979a-ea83-4ee7-b7f7-e168db2c54b4/1/bZ_0pTo9sPQyggzXN9VD-Gepctg.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/61979a-ea83-4ee7-b7f7-e168db2c54b4/1/bZ_0pTo9sPQyggzXN9VD-Gepctg.mft
rsync://rpki.ripe.net/repository/DEFAULT/bZ_0pTo9sPQyggzXN9VD-Gepctg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:73:1d:72:2d:a0:d5:b0:26:e5:dd:fa:89:f3:67:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d9ff4a53a3db0f432820cd737d543f867a972d8
Validity
Not Before: Aug 23 15:01:42 2025 GMT
Not After : Aug 24 15:01:42 2025 GMT
Subject: CN=ab929f681e1b563162e1b2a719bfa12c221b5770
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:08:14:e3:c6:18:2c:fc:f4:4c:b0:22:a6:91:
f9:78:36:76:0f:d2:63:ca:78:ee:13:b0:1d:11:0f:
6c:25:01:a1:ec:79:09:11:a2:c2:e8:df:39:ac:ee:
ab:76:bd:b9:62:ad:61:34:2b:00:81:f9:42:29:ae:
a6:0b:b4:ec:53:00:41:56:7d:75:3b:7a:33:79:b7:
08:45:da:ef:fc:64:b5:5b:9c:b7:c9:c7:07:f4:f7:
b9:ff:b3:b7:52:33:aa:84:b3:98:83:ed:a8:1a:cb:
1a:84:9e:00:36:75:fc:7a:2d:95:10:41:8e:7c:01:
79:86:18:0d:e1:e0:14:19:8e:26:93:91:3f:30:60:
eb:0b:23:e3:9a:2f:0c:de:e5:43:0f:67:2c:75:89:
0c:d6:8e:42:f7:ea:7a:32:05:f6:24:2e:46:30:b4:
47:90:aa:ae:ed:3c:dc:26:f9:3c:53:fe:54:ae:52:
d3:ff:c6:19:ec:65:28:88:06:18:bd:6b:59:6c:c7:
e0:f9:85:ff:c5:b7:13:97:95:e9:78:12:e5:55:d3:
6c:c1:83:40:67:27:b7:4d:5f:3f:3b:49:2f:48:bb:
43:22:60:e0:33:b8:b7:3f:29:2b:e6:27:bf:42:2c:
ab:43:13:0b:c1:20:5e:13:cd:a1:37:9c:61:c6:c1:
d6:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:92:9F:68:1E:1B:56:31:62:E1:B2:A7:19:BF:A1:2C:22:1B:57:70
X509v3 Authority Key Identifier:
keyid:6D:9F:F4:A5:3A:3D:B0:F4:32:82:0C:D7:37:D5:43:F8:67:A9:72:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bZ_0pTo9sPQyggzXN9VD-Gepctg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/61979a-ea83-4ee7-b7f7-e168db2c54b4/1/bZ_0pTo9sPQyggzXN9VD-Gepctg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/61979a-ea83-4ee7-b7f7-e168db2c54b4/1/bZ_0pTo9sPQyggzXN9VD-Gepctg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:3e:88:98:bd:07:22:e1:89:fa:e9:f5:01:ba:4a:24:77:6f:
53:79:a2:90:6b:2c:c6:70:bd:a3:0d:8a:13:7d:59:6f:f0:de:
11:8e:2b:da:70:53:75:49:d6:7c:37:97:bb:63:19:98:56:73:
f5:3f:d6:07:41:ef:69:ef:e5:cb:6c:39:59:87:97:34:af:1a:
da:9a:5a:f7:db:8a:d7:ad:56:70:fc:73:81:9a:dd:19:cb:69:
b4:8f:21:13:06:2c:c8:2d:22:3e:a3:5b:b2:b6:f8:c1:91:74:
64:ce:12:71:45:97:ea:d9:e7:70:0b:f1:07:b6:ef:8a:0d:73:
f6:f7:76:97:54:5d:32:bf:4d:75:fb:2c:ee:76:3b:5e:ad:4d:
53:b2:a8:f5:11:79:93:e4:e0:cc:22:ae:29:18:ac:78:c2:90:
7e:ad:e7:ef:86:8a:39:d5:83:ce:4b:6c:1b:5c:e5:f7:69:22:
95:dd:29:77:8c:4f:18:d5:b7:e4:36:43:2c:67:c3:04:e9:4d:
02:5a:0c:09:22:70:51:b8:15:d0:10:14:c4:5a:96:76:8e:40:
4d:4f:db:32:39:b3:69:78:dd:41:a6:a0:de:42:a7:d6:0f:e8:
50:1f:9d:9f:98:ef:ba:d9:1e:9c:5f:05:9a:50:38:8a:9c:0a:
06:ef:1e:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 00:09:51 2025 by rpki-client