
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/f6fdc3-9cfc-47fd-bba8-79cbf395d726/1/b1dizVOgPjIkIEagGo4cyslGtt0.mft
File: b1dizVOgPjIkIEagGo4cyslGtt0.mft (raw, json)
Hash identifier: HT96ku7d1OvDvHPwlabcLgWzh/cGxPJDv5sGcCFvQwc=
Subject key identifier: F0:8D:2F:61:2B:92:06:08:63:99:44:7B:6A:FE:A1:14:D9:CD:74:78
Authority key identifier: 6F:57:62:CD:53:A0:3E:32:24:20:46:A0:1A:8E:1C:CA:C9:46:B6:DD
Certificate issuer: /CN=6f5762cd53a03e32242046a01a8e1ccac946b6dd
Certificate serial: 0198D6982BD8FB9F33A06119034B6D3A1646
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b1dizVOgPjIkIEagGo4cyslGtt0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/f6fdc3-9cfc-47fd-bba8-79cbf395d726/1/b1dizVOgPjIkIEagGo4cyslGtt0.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 11:02:33 +0000
Manifest this update: Sat 23 Aug 2025 11:02:33 +0000
Manifest next update: Sun 24 Aug 2025 11:02:33 +0000
Files and hashes: 1: 6BpgCrxCXZbdJqbyAxHujz06qK4.roa (hash: f/x5QoRJQO0akFB/+sOaWahUSMLdwrmuI7CYvjTppDI=)
2: b1dizVOgPjIkIEagGo4cyslGtt0.crl (hash: lQAsMX/3/C6CLWUuqHZvTsIpi4+qvlvalN9tbghDnR4=)
3: gLGnZHyxZ4IIbPZ5Ki6wiGCKWc0.roa (hash: 0298GG5PDrm0T8wMd30AmNaheumCEMviVlo74f76BNw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/f6fdc3-9cfc-47fd-bba8-79cbf395d726/1/b1dizVOgPjIkIEagGo4cyslGtt0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/f6fdc3-9cfc-47fd-bba8-79cbf395d726/1/b1dizVOgPjIkIEagGo4cyslGtt0.mft
rsync://rpki.ripe.net/repository/DEFAULT/b1dizVOgPjIkIEagGo4cyslGtt0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:2b:d8:fb:9f:33:a0:61:19:03:4b:6d:3a:16:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f5762cd53a03e32242046a01a8e1ccac946b6dd
Validity
Not Before: Aug 23 11:02:33 2025 GMT
Not After : Aug 24 11:02:33 2025 GMT
Subject: CN=f08d2f612b9206086399447b6afea114d9cd7478
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:51:1b:9c:f1:ba:b8:cf:d1:68:6f:99:c2:92:
ed:bb:d9:51:3b:1e:11:52:2d:6f:63:87:4b:11:7f:
1a:6f:7d:ed:ca:a0:2c:af:5e:59:6c:df:7a:08:2a:
55:7b:82:92:7f:7e:c8:99:58:a0:97:dc:2e:55:12:
8a:34:d5:b7:01:9c:bb:c6:50:f5:af:5f:41:3f:1b:
35:59:13:86:67:0c:a2:81:37:77:99:96:c3:1e:b3:
aa:3b:35:4d:6f:ed:c6:1d:cc:cd:f1:49:ee:1d:d1:
03:9f:d2:49:90:29:74:c6:2d:f8:f6:17:ed:27:f2:
61:21:c4:a2:6b:d9:5e:ee:e9:1b:cd:4f:ac:a3:2a:
dc:42:3d:08:97:61:f9:2d:28:fe:fb:4b:73:6a:4f:
ed:2d:7b:99:da:1c:71:92:8d:df:eb:ed:fc:1d:01:
48:3e:aa:d6:71:63:6f:08:55:51:e0:16:24:52:a6:
96:cb:db:90:a6:59:28:a9:16:17:3a:21:54:e2:44:
7c:8a:71:59:95:9b:ed:58:00:43:7d:36:60:27:74:
08:f2:36:2d:6d:57:a2:67:25:ad:6e:8c:f0:c2:f8:
cc:e2:45:09:6f:f2:c1:e5:90:c5:e8:d1:58:a5:db:
be:08:78:2a:76:98:9d:85:70:5c:a6:ff:14:7d:4f:
79:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:8D:2F:61:2B:92:06:08:63:99:44:7B:6A:FE:A1:14:D9:CD:74:78
X509v3 Authority Key Identifier:
keyid:6F:57:62:CD:53:A0:3E:32:24:20:46:A0:1A:8E:1C:CA:C9:46:B6:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1dizVOgPjIkIEagGo4cyslGtt0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f6fdc3-9cfc-47fd-bba8-79cbf395d726/1/b1dizVOgPjIkIEagGo4cyslGtt0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/f6fdc3-9cfc-47fd-bba8-79cbf395d726/1/b1dizVOgPjIkIEagGo4cyslGtt0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:dd:25:29:0f:62:01:f6:f6:3b:5d:10:92:b0:ea:63:1e:e3:
57:18:78:ea:06:f3:f0:20:ad:25:53:b6:bd:dd:42:c4:74:44:
79:07:e6:9c:d3:35:a4:94:44:5e:1f:43:85:6e:cb:50:a4:a4:
e2:c4:91:ea:5b:a4:8f:89:20:8e:5e:a1:7e:7b:cf:a8:78:51:
fe:e1:39:3e:9d:ad:61:f6:34:9c:e6:62:e7:4d:0b:86:ef:23:
e7:6a:6d:0c:ec:04:f0:43:fd:91:9e:8d:12:19:c5:6a:a7:64:
f6:62:d7:13:b2:24:ba:10:d7:07:f8:85:bf:f4:70:1c:bc:ad:
35:f3:89:a7:4e:e5:c3:83:7f:68:a2:cc:49:d9:da:eb:5b:f9:
05:71:61:85:92:89:b5:bb:8b:60:ee:1b:82:5c:ae:86:e5:62:
5f:f1:e5:11:2f:15:a1:15:8b:55:3f:51:c6:93:6a:43:a9:de:
95:ed:ac:62:43:b8:0a:6f:18:d4:45:a5:78:ff:ab:e9:5a:4b:
f7:38:75:a7:2f:08:c9:ba:ed:72:2e:f6:04:e7:ce:3d:47:85:
46:97:c0:23:38:9f:5c:52:62:46:ab:18:57:e5:e3:e8:ed:5f:
3c:ac:93:bb:5d:42:aa:be:8e:1f:9b:bb:66:47:d0:e0:c8:85:
6c:3d:24:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:03:03 2025 by rpki-client