Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/293698-949d-4665-ba07-8cb4e253f175/1/b61qcd7-VgoOXCH_u0A4-0EJEpU.mft
File: b61qcd7-VgoOXCH_u0A4-0EJEpU.mft (raw, json)
Hash identifier: qJNZPkSrB3bmCl2gdoOUeAjQcmM7kMV6ygN2BLowxf0=
Subject key identifier: D3:6A:EE:F1:F2:75:20:05:2C:A0:E1:80:D9:A0:E6:4C:E7:7D:41:2D
Authority key identifier: 6F:AD:6A:71:DE:FE:56:0A:0E:5C:21:FF:BB:40:38:FB:41:09:12:95
Certificate issuer: /CN=6fad6a71defe560a0e5c21ffbb4038fb41091295
Certificate serial: 0198D515B3C23D910C2F3AA35DF3DD54DA81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b61qcd7-VgoOXCH_u0A4-0EJEpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/293698-949d-4665-ba07-8cb4e253f175/1/b61qcd7-VgoOXCH_u0A4-0EJEpU.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 04:00:25 +0000
Manifest this update: Sat 23 Aug 2025 04:00:25 +0000
Manifest next update: Sun 24 Aug 2025 04:00:25 +0000
Files and hashes: 1: b61qcd7-VgoOXCH_u0A4-0EJEpU.crl (hash: hQ1Dh0I15Pd5v4Buh4wgtTP1/FgMUtU1giy5ryVFNww=)
2: o-uxsmeV-GDLlYueP7RtZNtRLkY.roa (hash: xd5QoXbqzMFg+YyYmPM0+ODCfAWCU2/7fETeFx+AjCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/293698-949d-4665-ba07-8cb4e253f175/1/b61qcd7-VgoOXCH_u0A4-0EJEpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/293698-949d-4665-ba07-8cb4e253f175/1/b61qcd7-VgoOXCH_u0A4-0EJEpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b61qcd7-VgoOXCH_u0A4-0EJEpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:b3:c2:3d:91:0c:2f:3a:a3:5d:f3:dd:54:da:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fad6a71defe560a0e5c21ffbb4038fb41091295
Validity
Not Before: Aug 23 04:00:25 2025 GMT
Not After : Aug 24 04:00:25 2025 GMT
Subject: CN=d36aeef1f27520052ca0e180d9a0e64ce77d412d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ff:af:d4:83:c5:e2:4c:38:94:67:f7:8d:91:
cf:09:78:9b:04:42:0e:9f:a8:a3:5b:33:73:ab:1e:
a9:d0:54:0e:2e:9d:73:67:1a:78:68:1b:6f:8d:24:
18:1f:72:a5:2f:c8:d3:84:26:e0:3c:f1:9d:e5:78:
b3:7d:b5:6b:2d:d7:51:88:16:b5:2d:bd:3d:ba:33:
ea:f4:ef:a4:b3:98:70:b9:11:47:3a:ee:cf:e3:f5:
5f:ea:27:28:2c:38:16:d1:22:6f:d2:8b:c0:94:70:
42:fb:25:f8:9f:d1:15:53:e1:06:88:f5:6f:76:ad:
5a:62:db:a0:1c:d6:b2:ab:37:65:62:1d:07:65:a4:
81:26:bd:78:1a:f2:03:ba:4d:17:11:4f:dc:32:33:
5c:44:6c:e2:16:6a:14:cb:76:10:ed:5b:ba:18:06:
e8:56:fe:a5:ad:8e:72:3c:c3:50:47:0b:36:ff:84:
12:f3:7a:ff:10:fb:b7:a7:5c:d4:9b:84:0d:81:56:
22:fe:e5:55:6a:f2:a5:bc:00:99:cc:3b:48:85:20:
5c:be:f7:54:81:ca:2b:41:25:1d:ec:ff:b7:a0:61:
db:80:47:2b:22:3f:5d:9f:db:17:ac:e5:1a:ff:44:
57:e8:a0:a6:2b:0b:20:c5:bd:56:a2:8d:1b:09:bc:
a8:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:6A:EE:F1:F2:75:20:05:2C:A0:E1:80:D9:A0:E6:4C:E7:7D:41:2D
X509v3 Authority Key Identifier:
keyid:6F:AD:6A:71:DE:FE:56:0A:0E:5C:21:FF:BB:40:38:FB:41:09:12:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b61qcd7-VgoOXCH_u0A4-0EJEpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/293698-949d-4665-ba07-8cb4e253f175/1/b61qcd7-VgoOXCH_u0A4-0EJEpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/293698-949d-4665-ba07-8cb4e253f175/1/b61qcd7-VgoOXCH_u0A4-0EJEpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:04:27:65:d8:1a:9e:8b:3f:e8:b4:e6:43:d0:6b:f0:46:99:
da:6c:2c:ce:17:b4:2a:10:ef:36:96:c1:29:c7:51:d4:ba:b6:
67:ab:6e:16:ed:aa:1a:05:b4:0d:71:4f:80:44:c9:d0:1d:f4:
69:e9:53:40:63:a4:51:eb:71:af:a7:1e:da:3b:db:90:c4:44:
d2:c4:a2:1f:96:3d:da:4b:a1:1c:39:83:3e:5f:fc:af:04:38:
7a:cb:8c:26:2e:8e:3f:9a:8d:ee:30:2c:33:1c:a5:82:85:9e:
29:d7:36:93:12:ae:17:6c:a0:bc:6e:4f:cc:ef:3b:de:13:3d:
5c:70:3e:0e:1c:c1:a6:6e:81:70:1a:90:31:f5:42:54:44:6d:
88:76:95:f1:15:48:dd:09:93:34:a7:da:c8:c6:21:5f:5e:a0:
8f:2f:78:78:75:6b:34:98:d1:c3:7d:17:0a:5e:5a:ce:7c:06:
78:81:b9:ab:0c:b0:68:ad:c1:25:b3:6b:a0:b7:0d:fb:0f:9c:
2c:00:8d:53:24:3d:fa:92:41:04:41:ae:3a:e3:40:5f:76:4f:
53:ed:18:3e:b0:a1:4b:81:0a:06:62:b3:3c:85:00:1c:b1:2d:
be:ba:82:fd:18:c5:fc:38:28:06:35:10:36:0c:85:d2:0e:dd:
75:b6:a8:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:46:30 2025 by rpki-client