Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/64a392-372e-48a6-a0e2-f5ad167d8494/1/bAqWFKxOEOei4qW8EvhiMGTInvk.mft
File: bAqWFKxOEOei4qW8EvhiMGTInvk.mft (raw, json)
Hash identifier: no+X7DDdJM0haVI6jtpNx8W9UIaDwbMA2L8QcOL7NFM=
Subject key identifier: ED:C9:B5:26:EB:BF:30:35:39:B1:88:45:4C:1F:94:C7:C2:0C:4B:99
Authority key identifier: 6C:0A:96:14:AC:4E:10:E7:A2:E2:A5:BC:12:F8:62:30:64:C8:9E:F9
Certificate issuer: /CN=6c0a9614ac4e10e7a2e2a5bc12f8623064c89ef9
Certificate serial: 0198D7A8B8E26438ABE52B7624CE709B958F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bAqWFKxOEOei4qW8EvhiMGTInvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/64a392-372e-48a6-a0e2-f5ad167d8494/1/bAqWFKxOEOei4qW8EvhiMGTInvk.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 16:00:15 +0000
Manifest this update: Sat 23 Aug 2025 16:00:15 +0000
Manifest next update: Sun 24 Aug 2025 16:00:15 +0000
Files and hashes: 1: F67gDfZc4Jx2LCZVEE2FihPJzHw.roa (hash: yPyUtL/skPgjKLNjvoKJs7SdqhdnCeGN7LFhVgvBzCk=)
2: bAqWFKxOEOei4qW8EvhiMGTInvk.crl (hash: LiOBUN+NTLyBD7J6cCUe2K/DiG9c5BL/qnPF6/AESo4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/64a392-372e-48a6-a0e2-f5ad167d8494/1/bAqWFKxOEOei4qW8EvhiMGTInvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/64a392-372e-48a6-a0e2-f5ad167d8494/1/bAqWFKxOEOei4qW8EvhiMGTInvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/bAqWFKxOEOei4qW8EvhiMGTInvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:a8:b8:e2:64:38:ab:e5:2b:76:24:ce:70:9b:95:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c0a9614ac4e10e7a2e2a5bc12f8623064c89ef9
Validity
Not Before: Aug 23 16:00:15 2025 GMT
Not After : Aug 24 16:00:15 2025 GMT
Subject: CN=edc9b526ebbf303539b188454c1f94c7c20c4b99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:3d:69:3b:da:18:8e:5c:60:7c:65:ad:2d:69:
03:1e:3b:73:6a:02:ac:a6:bd:cf:0c:dc:b1:61:7d:
b6:5c:55:55:18:02:c8:2c:a5:85:0c:e8:8d:67:33:
f9:c7:96:82:0d:c7:b5:f6:e4:bb:dc:81:9b:a1:34:
4f:65:1c:a4:4f:4e:52:5b:8c:f7:ac:73:87:ab:0a:
3a:b9:3e:e7:8c:41:45:90:4e:43:1b:77:c6:be:dc:
fe:40:90:ae:ec:7d:f4:24:3b:7b:9e:4f:ef:bc:a6:
e8:8a:31:69:bc:5f:f0:60:9f:77:30:d6:e4:5e:7c:
bb:ca:52:3c:27:5a:2e:a7:0e:56:27:d6:fb:df:79:
da:fa:b0:d7:3a:a2:8f:77:f9:f3:6f:83:2a:37:b4:
27:35:fd:b1:75:4f:a6:7b:7c:e0:ef:91:d8:15:08:
29:cc:90:99:16:eb:53:41:5e:69:d5:01:46:93:b1:
b5:fd:4c:73:4d:0d:f2:71:ad:20:6c:8a:6c:4d:de:
ce:43:fa:37:f1:43:48:55:9d:bd:46:d4:bf:45:e6:
79:55:6a:38:8a:2d:af:c7:a1:96:77:5c:26:78:6d:
4f:0f:73:60:7a:1d:7a:67:cf:b9:15:9a:55:7d:1b:
56:de:73:3d:bb:86:d1:10:50:c8:39:04:9a:ff:9f:
f5:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:C9:B5:26:EB:BF:30:35:39:B1:88:45:4C:1F:94:C7:C2:0C:4B:99
X509v3 Authority Key Identifier:
keyid:6C:0A:96:14:AC:4E:10:E7:A2:E2:A5:BC:12:F8:62:30:64:C8:9E:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bAqWFKxOEOei4qW8EvhiMGTInvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/64a392-372e-48a6-a0e2-f5ad167d8494/1/bAqWFKxOEOei4qW8EvhiMGTInvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/64a392-372e-48a6-a0e2-f5ad167d8494/1/bAqWFKxOEOei4qW8EvhiMGTInvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:97:f5:45:b7:74:85:42:d3:12:6b:fc:97:dc:56:17:bb:ae:
f9:2c:87:0b:21:5c:8e:8c:47:c2:e1:1f:a4:c3:54:48:65:4a:
89:be:96:16:a7:69:f2:1a:7f:3a:20:5f:c6:2c:8b:46:1c:f6:
04:77:e9:98:a5:5b:2e:6e:9b:c5:50:68:dc:e4:d1:c0:f4:df:
7a:43:03:6c:61:bd:7a:10:7d:60:ee:26:f4:3e:5c:87:9a:a5:
00:49:fd:ba:a1:09:b8:3d:ff:04:1d:9a:3c:3c:d8:5f:63:34:
75:be:2c:e3:a7:11:df:84:1c:f4:20:b2:ae:f5:ff:eb:7c:f4:
de:bd:ee:7d:07:82:81:a3:c8:06:1f:75:e2:62:af:af:da:2c:
6a:73:03:60:e2:3a:00:b1:8a:b5:8b:8f:c2:7d:09:6e:a9:67:
20:15:0c:55:57:65:34:bb:7c:1e:37:c9:4a:9a:16:0a:c4:31:
84:69:42:54:16:c8:e2:16:23:55:c4:49:af:39:60:3c:86:af:
ca:2f:f8:92:61:22:ff:9e:57:8c:fc:d6:e0:97:de:2f:2f:5b:
2c:2f:60:40:bf:03:96:ac:4c:3d:98:40:36:60:bc:d1:60:87:
c5:de:0a:1e:20:17:68:8c:1d:80:34:be:ef:db:69:b7:23:6b:
19:ed:5d:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:35:50 2025 by rpki-client