Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/7f997c-07cf-44c2-bdf0-66a329b6afad/1/bXcB1YUEkfUCme-T8tdAm3jNbJY.mft
File: bXcB1YUEkfUCme-T8tdAm3jNbJY.mft (raw, json)
Hash identifier: TQ2SV5d26r2yeICQ2OXQDe2LrQMSJosAKT4YLA1Wvkc=
Subject key identifier: 28:BD:54:82:19:D1:25:42:FE:C2:66:E7:EA:60:AE:38:8C:41:FC:49
Authority key identifier: 6D:77:01:D5:85:04:91:F5:02:99:EF:93:F2:D7:40:9B:78:CD:6C:96
Certificate issuer: /CN=6d7701d5850491f50299ef93f2d7409b78cd6c96
Certificate serial: 0198D6600D69DAEE07F38A94FDC5E5B01F14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXcB1YUEkfUCme-T8tdAm3jNbJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/7f997c-07cf-44c2-bdf0-66a329b6afad/1/bXcB1YUEkfUCme-T8tdAm3jNbJY.mft
Manifest number: 14B7
Signing time: Sat 23 Aug 2025 10:01:15 +0000
Manifest this update: Sat 23 Aug 2025 10:01:15 +0000
Manifest next update: Sun 24 Aug 2025 10:01:15 +0000
Files and hashes: 1: 2KIRExbLtGmhtukhHSshDYZqZYU.roa (hash: e/XJlDAv9fIgfof/gpzNCtKITxsPIC/gKrF0rJCVeE8=)
2: F_jHPU3_A3NtfG3Ak3x69UFaxVY.roa (hash: VOxoNM7Ut17hlIuVaKSt03PbZmGteVPLxGUSpYz/b7g=)
3: bXcB1YUEkfUCme-T8tdAm3jNbJY.crl (hash: XNa5NoZqaDdnHoh+E8b846+UwagNFDOSQh+FS+VhNLA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/7f997c-07cf-44c2-bdf0-66a329b6afad/1/bXcB1YUEkfUCme-T8tdAm3jNbJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/7f997c-07cf-44c2-bdf0-66a329b6afad/1/bXcB1YUEkfUCme-T8tdAm3jNbJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bXcB1YUEkfUCme-T8tdAm3jNbJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:0d:69:da:ee:07:f3:8a:94:fd:c5:e5:b0:1f:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d7701d5850491f50299ef93f2d7409b78cd6c96
Validity
Not Before: Aug 23 10:01:15 2025 GMT
Not After : Aug 24 10:01:15 2025 GMT
Subject: CN=28bd548219d12542fec266e7ea60ae388c41fc49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e6:71:b9:dc:15:10:ee:c6:cf:cf:ae:28:9c:
ae:8e:17:46:42:32:ce:03:4c:86:dc:a0:72:d5:55:
ff:ff:a6:66:0b:9c:0f:13:76:90:d0:7e:48:b7:64:
a7:ac:03:49:18:d2:14:10:b0:eb:4d:f3:f2:7a:61:
30:ef:50:ea:f9:18:cc:4b:24:77:1b:0d:bc:46:1d:
38:b7:a3:8c:b2:b4:a5:87:1b:0f:1a:aa:49:16:21:
67:05:b4:9a:cc:cc:b9:d1:bf:bf:04:92:f6:fc:ca:
e2:27:5a:17:f4:8b:77:c2:e4:96:d6:a5:22:62:f2:
04:12:7c:05:71:9f:ee:eb:e4:de:c4:95:fe:72:49:
4c:fb:90:9a:cb:6c:aa:17:d5:2c:ee:ee:80:75:0d:
21:c1:b8:5b:e8:db:45:45:6a:14:93:60:5f:9c:30:
c1:a3:77:d1:2f:f0:74:3b:f4:89:26:16:86:b8:f1:
d0:3b:51:56:be:05:aa:8a:d4:57:7c:1d:81:eb:7c:
6a:5c:c7:cd:ef:ef:bb:8b:ca:c8:de:e2:e0:0f:8c:
ad:75:c9:db:fd:9e:09:79:4c:54:f1:95:4d:47:5f:
1d:0a:a5:0c:e9:03:ae:65:49:4e:34:f1:72:18:a4:
c4:29:c3:30:2d:43:8b:9a:f6:81:b1:c4:76:60:81:
18:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:BD:54:82:19:D1:25:42:FE:C2:66:E7:EA:60:AE:38:8C:41:FC:49
X509v3 Authority Key Identifier:
keyid:6D:77:01:D5:85:04:91:F5:02:99:EF:93:F2:D7:40:9B:78:CD:6C:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXcB1YUEkfUCme-T8tdAm3jNbJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/7f997c-07cf-44c2-bdf0-66a329b6afad/1/bXcB1YUEkfUCme-T8tdAm3jNbJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/7f997c-07cf-44c2-bdf0-66a329b6afad/1/bXcB1YUEkfUCme-T8tdAm3jNbJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:a6:00:9d:53:5c:31:9a:7c:86:a2:c6:de:66:d6:7f:46:41:
b0:83:40:90:9f:ab:04:ee:93:27:8b:24:b9:55:01:9a:90:f7:
f8:aa:14:ad:b7:b1:f7:17:00:ea:3e:ab:73:a3:b9:2b:30:55:
45:5d:0e:dc:8d:f4:6e:d3:e4:16:97:b2:ed:c1:b2:9e:99:bb:
52:47:43:77:a3:dd:7f:e7:89:a9:1d:01:c8:4d:4a:e5:57:f5:
dc:e5:3c:ff:fc:38:ae:4b:33:1a:80:e6:62:33:8e:71:37:3b:
9b:a5:b7:ee:f8:46:48:dc:1b:e5:05:58:16:3a:26:1f:c5:f6:
67:90:c2:2e:d6:9d:5e:8e:92:ef:49:2e:35:17:5a:f9:fa:8e:
ce:3c:da:18:bc:af:cf:08:10:17:86:35:8f:78:9e:eb:5b:c4:
6f:a6:93:97:81:d5:f1:d2:ad:ba:e6:26:4d:34:72:9f:42:65:
04:f5:00:15:17:93:8e:71:02:9a:9a:fe:ee:6b:8e:b3:8d:d9:
04:5b:f9:07:2f:d9:77:41:cc:24:67:b7:c7:5b:bf:d2:d7:77:
0c:4c:1a:a0:bb:71:3c:9f:d1:ef:3d:41:8f:31:eb:47:e6:61:
1a:99:ec:48:f3:da:ee:d7:fb:0c:d0:7c:43:af:ef:8b:a2:55:
2c:24:ef:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:13:23 2025 by rpki-client