
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/88d3b3-8257-47aa-a227-d02aafb832c4/1/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.mft
File: Bd8co7Zl8ky-EBz8Lzg0Taixdo0.mft (raw, json)
Hash identifier: pYXXdTtT7m7OSKoqKYOkNHqvwzJiriT7f3spRRWYytk=
Subject key identifier: 34:EF:D8:20:2B:D3:02:A7:DB:6E:DF:73:AE:D4:8B:70:F3:DD:0F:3D
Authority key identifier: 05:DF:1C:A3:B6:65:F2:4C:BE:10:1C:FC:2F:38:34:4D:A8:B1:76:8D
Certificate issuer: /CN=05df1ca3b665f24cbe101cfc2f38344da8b1768d
Certificate serial: 0198D583453AD965A4DC7DF71605C4D674CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/88d3b3-8257-47aa-a227-d02aafb832c4/1/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 06:00:06 +0000
Manifest this update: Sat 23 Aug 2025 06:00:06 +0000
Manifest next update: Sun 24 Aug 2025 06:00:06 +0000
Files and hashes: 1: Bd8co7Zl8ky-EBz8Lzg0Taixdo0.crl (hash: KhuEkLBkx2M2sKjiCqcUFI44+NhkXuYkhoau4URAY2o=)
2: FNPjMOoGw_qr5syHiMbZO5lzjMQ.roa (hash: 5qw3tWosyd4KlYSn8mbGOq7ldklrf0oZDzLLsc6wFlk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/88d3b3-8257-47aa-a227-d02aafb832c4/1/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/88d3b3-8257-47aa-a227-d02aafb832c4/1/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:45:3a:d9:65:a4:dc:7d:f7:16:05:c4:d6:74:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05df1ca3b665f24cbe101cfc2f38344da8b1768d
Validity
Not Before: Aug 23 06:00:06 2025 GMT
Not After : Aug 24 06:00:06 2025 GMT
Subject: CN=34efd8202bd302a7db6edf73aed48b70f3dd0f3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:bb:2d:52:f2:9b:52:d4:64:c6:23:53:0a:71:
5e:c4:56:22:0c:8a:a7:78:f1:e4:64:4b:d3:b4:d5:
26:a9:fb:f7:56:01:9f:ad:04:49:cf:fe:fd:c4:6d:
2a:85:84:65:5b:52:66:8c:5c:bf:69:e6:ca:81:bf:
fa:b5:a8:fa:45:cc:92:5b:88:b9:d4:d2:a9:08:f7:
43:31:30:48:12:71:3d:83:22:4f:2b:4c:90:ae:3b:
fa:2e:36:e0:3e:9f:5a:53:d2:70:b2:77:bf:9e:73:
d9:a1:01:18:7c:df:23:9c:92:ab:df:7c:af:60:d5:
40:d7:5a:c3:e8:d3:9a:08:a5:69:8d:28:df:bc:26:
4a:7a:a6:8f:ad:1b:06:61:d5:3b:15:90:b2:d6:8b:
aa:27:ee:f8:34:90:77:9d:44:8e:a2:78:27:ac:06:
20:e0:05:95:b6:5e:ed:2e:c6:33:b6:4d:8d:af:51:
b9:69:5d:80:9e:d2:8b:d8:b0:ed:1a:24:c8:05:b8:
c2:79:6d:76:ef:e3:5d:36:af:f2:ac:43:f3:1a:1c:
dd:9a:35:8e:85:38:cb:f5:1d:79:07:3b:b6:d7:22:
b7:a6:f7:4c:b5:a0:a5:fe:26:71:52:1d:84:13:0c:
69:12:12:5f:ef:12:26:e2:2a:ac:69:d4:ea:54:01:
e1:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:EF:D8:20:2B:D3:02:A7:DB:6E:DF:73:AE:D4:8B:70:F3:DD:0F:3D
X509v3 Authority Key Identifier:
keyid:05:DF:1C:A3:B6:65:F2:4C:BE:10:1C:FC:2F:38:34:4D:A8:B1:76:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/88d3b3-8257-47aa-a227-d02aafb832c4/1/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/88d3b3-8257-47aa-a227-d02aafb832c4/1/Bd8co7Zl8ky-EBz8Lzg0Taixdo0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:89:30:c7:21:95:e9:2d:2e:9a:cc:0b:b0:04:e9:db:38:75:
7f:76:df:7b:54:07:fe:90:d7:f3:3c:27:60:c3:c6:6f:b5:35:
b9:11:38:3d:20:dd:90:5f:8f:f9:62:48:e9:ec:49:83:1e:6c:
fd:20:7b:92:ea:e0:3b:ad:8d:16:e6:f3:1a:2c:6e:8b:14:22:
b0:cb:f7:19:be:09:ac:6b:7e:09:e0:e2:77:c1:7e:bc:10:14:
f0:75:d5:bb:92:28:ae:e9:4c:73:6d:32:6f:a5:1f:f4:42:7e:
ed:c9:d9:07:ce:b6:e8:2b:c3:14:87:c3:bc:08:c1:48:11:b0:
39:7a:07:0b:73:9d:3e:c5:ea:e2:1d:66:a7:90:bf:f9:40:c4:
a2:29:2f:49:bc:10:88:0e:1a:8d:25:76:22:be:e5:8e:ce:bd:
18:79:c7:db:85:54:57:88:e0:72:f8:1b:17:b3:1f:15:c3:59:
d0:4d:2d:da:02:41:48:77:25:51:c8:2b:41:ab:30:a4:53:62:
e1:03:7b:21:0c:d7:b7:c2:9d:be:c4:e8:3b:2b:8b:87:1d:b5:
38:1e:e1:49:da:d0:63:52:a6:f6:ff:7f:52:f3:c6:3b:bc:85:
26:ca:4f:05:2b:36:b8:f3:5e:3b:f7:d8:f6:4d:10:74:ef:0c:
ca:e3:e5:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:53:04 2025 by rpki-client