Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/9ca58e-9e32-428f-8411-1aeb6a4e45ad/1/bMacPXAwzsGfj7ZuVDveZVlXCKI.mft
File: bMacPXAwzsGfj7ZuVDveZVlXCKI.mft (raw, json)
Hash identifier: a0/tVr+/qvFVXt5aSoxCl/jdzV16Dt4Am3fyI5G6/Rw=
Subject key identifier: 72:8E:6A:80:EF:22:4E:DA:EC:A8:2E:F3:08:73:D0:D1:22:52:6E:16
Authority key identifier: 6C:C6:9C:3D:70:30:CE:C1:9F:8F:B6:6E:54:3B:DE:65:59:57:08:A2
Certificate issuer: /CN=6cc69c3d7030cec19f8fb66e543bde65595708a2
Certificate serial: 0198D77360F8ECE17B5598B178C8F79C8748
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bMacPXAwzsGfj7ZuVDveZVlXCKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/9ca58e-9e32-428f-8411-1aeb6a4e45ad/1/bMacPXAwzsGfj7ZuVDveZVlXCKI.mft
Manifest number: 0745
Signing time: Sat 23 Aug 2025 15:01:59 +0000
Manifest this update: Sat 23 Aug 2025 15:01:59 +0000
Manifest next update: Sun 24 Aug 2025 15:01:59 +0000
Files and hashes: 1: LRy1Su2fWLwjRlXSpxKiN2HsmOE.roa (hash: VbIoxvhdv4Kz4zlYMs8a+1GTnDDa2PQSnpokMmTeNJI=)
2: MbTvipFbe-Fro7yGscX94j34OpQ.roa (hash: lGgg0U/FzBropaPivoqmUVqyNKPQ65NR2i0gu4fF2i0=)
3: bMacPXAwzsGfj7ZuVDveZVlXCKI.crl (hash: e0YYdaxIkvpfgchIP7I2AUiXr2L1hVaonETxTusSQ3s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/9ca58e-9e32-428f-8411-1aeb6a4e45ad/1/bMacPXAwzsGfj7ZuVDveZVlXCKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/9ca58e-9e32-428f-8411-1aeb6a4e45ad/1/bMacPXAwzsGfj7ZuVDveZVlXCKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/bMacPXAwzsGfj7ZuVDveZVlXCKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:73:60:f8:ec:e1:7b:55:98:b1:78:c8:f7:9c:87:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cc69c3d7030cec19f8fb66e543bde65595708a2
Validity
Not Before: Aug 23 15:01:59 2025 GMT
Not After : Aug 24 15:01:59 2025 GMT
Subject: CN=728e6a80ef224edaeca82ef30873d0d122526e16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:82:39:1c:b7:72:e0:33:57:8b:b6:59:aa:a0:
f8:75:33:26:fc:e9:cd:d7:06:6b:79:67:f5:e7:6a:
57:74:7f:5d:0a:60:48:be:5e:27:ff:9e:ae:0c:9f:
b9:cc:d7:8b:03:99:b0:b1:f6:c9:d0:99:c0:e8:24:
ca:da:f1:af:86:e8:f1:7c:5d:6d:8d:21:cf:cf:89:
a6:aa:07:93:37:74:1a:fd:71:97:b6:47:93:d2:ea:
a1:0d:4a:91:78:8a:03:52:f2:1f:3c:d1:8c:2f:7b:
e0:89:d1:d6:e5:a6:fc:3a:98:6a:f9:88:19:a3:c7:
13:e7:16:8f:41:40:60:48:79:43:e0:ad:42:32:67:
55:d8:7e:2d:df:45:db:99:14:ee:73:8e:e8:64:0c:
e3:ae:05:c4:74:41:a0:8c:ee:e9:e8:79:61:70:f0:
3c:1d:06:72:4c:60:c7:52:a7:0d:a5:05:a2:89:da:
cd:22:19:8c:82:40:17:70:ac:0a:c5:36:e5:11:37:
52:da:e4:36:66:1f:d6:64:e9:6f:50:bc:59:c9:5a:
14:ec:30:99:f1:7f:fa:e0:00:fa:de:ce:de:9e:7d:
08:0d:49:f3:24:cf:1e:91:5b:d7:af:cb:91:47:d6:
a7:98:d1:8d:74:4a:7b:5f:5b:5c:a3:cf:60:84:31:
3f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:8E:6A:80:EF:22:4E:DA:EC:A8:2E:F3:08:73:D0:D1:22:52:6E:16
X509v3 Authority Key Identifier:
keyid:6C:C6:9C:3D:70:30:CE:C1:9F:8F:B6:6E:54:3B:DE:65:59:57:08:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMacPXAwzsGfj7ZuVDveZVlXCKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9ca58e-9e32-428f-8411-1aeb6a4e45ad/1/bMacPXAwzsGfj7ZuVDveZVlXCKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9ca58e-9e32-428f-8411-1aeb6a4e45ad/1/bMacPXAwzsGfj7ZuVDveZVlXCKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:a2:1e:90:04:da:e2:17:30:df:5c:a4:36:2f:b0:52:d7:75:
e5:9e:d9:e6:14:8c:63:c7:5b:bd:ed:ba:e8:d7:1e:bf:c7:f5:
2c:22:80:41:58:46:c2:43:ea:75:f7:0e:99:87:c0:bd:7d:03:
dd:23:8f:06:08:a5:67:12:54:9f:5c:a8:82:22:5c:19:91:69:
63:b7:67:12:9d:4d:f1:85:b2:43:29:5e:cc:d9:d3:46:20:76:
06:b1:18:17:ed:92:aa:96:66:55:57:07:3e:e0:fc:cc:53:01:
b4:34:ba:7c:94:23:9a:e2:cd:ab:1b:9e:79:e0:6b:18:c1:8c:
d5:f4:62:51:93:39:ac:1d:89:56:46:3a:17:ba:17:94:04:f1:
01:c9:3b:6d:96:36:ec:6e:b2:a1:23:87:16:99:5a:a2:5b:9e:
c7:fe:a2:b3:49:19:ef:39:64:cf:cc:04:fc:f3:ee:67:1b:de:
e5:c9:47:b1:e4:2c:f3:2b:e9:4c:77:70:68:a3:5f:a4:0e:59:
da:61:d6:bc:26:f2:3f:72:28:52:8d:e8:8a:b6:78:d4:18:f8:
d6:70:17:b5:47:3d:62:36:25:bf:72:f9:54:23:e8:8a:10:e5:
85:e6:e2:ac:92:a5:3d:97:35:cc:ca:2e:b0:e8:98:ad:64:63:
a3:ac:4b:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:38:38 2025 by rpki-client