Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/d31361-096d-4a8d-ab4f-c3dc739425a1/1/BpilU2SQ1wyON7dvMtpoTxIp2bo.mft
File: BpilU2SQ1wyON7dvMtpoTxIp2bo.mft (raw, json)
Hash identifier: /rlWj7jxYfqgeCnBvY9sQRGdiS7a/HTth6GFDgZ7hgk=
Subject key identifier: CC:87:D3:B4:C3:52:AE:D1:02:26:11:C9:61:99:D1:50:35:5A:91:51
Authority key identifier: 06:98:A5:53:64:90:D7:0C:8E:37:B7:6F:32:DA:68:4F:12:29:D9:BA
Certificate issuer: /CN=0698a5536490d70c8e37b76f32da684f1229d9ba
Certificate serial: 0198D6983963A90D74701AE7E22A37DC5E82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BpilU2SQ1wyON7dvMtpoTxIp2bo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/d31361-096d-4a8d-ab4f-c3dc739425a1/1/BpilU2SQ1wyON7dvMtpoTxIp2bo.mft
Manifest number: FF
Signing time: Sat 23 Aug 2025 11:02:37 +0000
Manifest this update: Sat 23 Aug 2025 11:02:37 +0000
Manifest next update: Sun 24 Aug 2025 11:02:37 +0000
Files and hashes: 1: 6I3Ul79wxRN6W37mo7nUpqwqt0s.roa (hash: J9bvPeLp8sfcjLoyxN9ggYT+mX3AB6I6+8a1daK3z1U=)
2: BpilU2SQ1wyON7dvMtpoTxIp2bo.crl (hash: PxFNCMfTiK/BIOvohBfPBNdQCTwmb6M0cjmS7FLah04=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/d31361-096d-4a8d-ab4f-c3dc739425a1/1/BpilU2SQ1wyON7dvMtpoTxIp2bo.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/d31361-096d-4a8d-ab4f-c3dc739425a1/1/BpilU2SQ1wyON7dvMtpoTxIp2bo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BpilU2SQ1wyON7dvMtpoTxIp2bo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 11:02:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:39:63:a9:0d:74:70:1a:e7:e2:2a:37:dc:5e:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0698a5536490d70c8e37b76f32da684f1229d9ba
Validity
Not Before: Aug 23 11:02:37 2025 GMT
Not After : Aug 24 11:02:37 2025 GMT
Subject: CN=cc87d3b4c352aed1022611c96199d150355a9151
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7b:9a:28:48:71:81:dc:9a:70:6e:8a:a2:23:
e5:91:33:89:87:e0:84:9e:db:c1:43:b7:13:64:4b:
d7:d9:d8:b0:09:a6:b5:3e:b0:7a:e7:33:61:82:0a:
a7:76:ad:19:35:27:68:d9:05:1b:b0:69:aa:b6:e9:
48:5b:31:cb:9d:58:60:03:a7:4e:99:55:31:30:d8:
0b:96:e7:15:2d:aa:8f:21:29:11:40:64:46:c1:be:
4c:00:75:a9:1f:2f:65:39:3f:92:90:93:41:ed:8c:
8c:1f:57:0b:26:52:c3:71:ca:ed:0c:f9:13:d9:99:
2c:de:3d:f1:72:11:1f:23:f3:be:c2:4b:7d:69:b8:
81:6a:ec:86:54:b0:70:ac:0a:0f:8f:5e:25:e8:17:
3d:1a:c8:35:af:b4:23:f5:42:9e:7a:fd:37:8e:57:
71:7f:00:ab:92:a1:b8:c1:4f:c1:b8:0c:39:6d:69:
61:ab:98:c6:71:27:31:8b:27:20:15:bf:82:d7:df:
70:bc:e9:c4:7a:62:e9:e8:6e:e0:99:1d:ac:22:d5:
ae:81:85:95:ad:91:0e:45:e1:9c:b6:74:1a:18:0a:
85:bd:06:bf:d2:eb:8a:f0:cf:e6:e1:bd:30:6c:68:
4a:cb:6b:c2:dc:d8:4d:a2:48:f8:3a:41:aa:4d:a3:
38:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:87:D3:B4:C3:52:AE:D1:02:26:11:C9:61:99:D1:50:35:5A:91:51
X509v3 Authority Key Identifier:
keyid:06:98:A5:53:64:90:D7:0C:8E:37:B7:6F:32:DA:68:4F:12:29:D9:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BpilU2SQ1wyON7dvMtpoTxIp2bo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d31361-096d-4a8d-ab4f-c3dc739425a1/1/BpilU2SQ1wyON7dvMtpoTxIp2bo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d31361-096d-4a8d-ab4f-c3dc739425a1/1/BpilU2SQ1wyON7dvMtpoTxIp2bo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:57:ca:e4:d3:7a:db:da:1f:eb:17:30:8e:26:95:56:97:4e:
9b:e6:95:02:f3:e3:de:c6:c1:b7:30:b5:90:ae:52:6d:e3:44:
4f:64:7f:a3:41:bc:e1:67:14:54:82:f8:da:c3:1c:78:b8:d6:
ab:68:e2:01:d5:5e:c3:29:00:9b:80:d9:97:19:59:2d:a6:12:
62:95:d0:aa:35:35:30:8d:a8:78:7d:e8:e6:2d:da:21:8a:ab:
2c:4b:c4:9f:b8:04:e6:31:13:86:55:ce:c6:41:ba:5a:bb:88:
45:fa:17:96:3a:ac:00:be:30:59:cc:4a:99:5e:73:32:af:0a:
97:34:ee:4f:f3:c0:27:78:78:bf:ba:b4:20:c8:b7:65:5b:7c:
02:6f:b8:81:c9:bf:0b:33:a7:c6:13:38:f9:d5:09:49:ce:bc:
52:40:1b:f1:9a:a4:c1:a5:84:3f:9f:f0:a0:2d:50:35:05:2d:
6c:44:57:06:62:10:6d:a4:41:7a:2d:9c:5c:fd:08:b5:bf:29:
75:c8:18:aa:f6:4b:3c:96:3b:92:d6:cd:49:1c:7d:74:a5:99:
b0:be:9c:a3:2b:d2:21:44:52:7f:3a:09:09:7e:33:10:5a:df:
7f:94:5d:9f:76:2c:1a:ae:96:16:c2:d7:f9:60:f5:93:6b:24:
71:70:f1:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:13:57 2025 by rpki-client