Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/d983cd-3f8e-4d6e-a38c-4d8d62b18e89/1/bFMRpXzPy1E1Jh_zm9GaEV7z588.mft
File: bFMRpXzPy1E1Jh_zm9GaEV7z588.mft (raw, json)
Hash identifier: kHLWjUrHXN754M5ZAz09C8ZhRxdfplMUruNe5EID760=
Subject key identifier: 44:AC:70:21:4F:C8:4B:AF:DD:82:C6:9D:59:B7:61:98:C6:3A:2B:39
Authority key identifier: 6C:53:11:A5:7C:CF:CB:51:35:26:1F:F3:9B:D1:9A:11:5E:F3:E7:CF
Certificate issuer: /CN=6c5311a57ccfcb5135261ff39bd19a115ef3e7cf
Certificate serial: 0198D51607B4B4A112EDE944CEB4FEEDE62D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bFMRpXzPy1E1Jh_zm9GaEV7z588.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/d983cd-3f8e-4d6e-a38c-4d8d62b18e89/1/bFMRpXzPy1E1Jh_zm9GaEV7z588.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 04:00:47 +0000
Manifest this update: Sat 23 Aug 2025 04:00:47 +0000
Manifest next update: Sun 24 Aug 2025 04:00:47 +0000
Files and hashes: 1: YJycfGdeJ164QrjQ89Pquxal_pc.roa (hash: fDEXe9y2Vppryd4ojiqVG2aN2es1Vh/q/2xftzkXWbQ=)
2: bFMRpXzPy1E1Jh_zm9GaEV7z588.crl (hash: NPKtcsV1HCG1UjkXUNFProShV/LK2NHrUxaXdzqhEuc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/d983cd-3f8e-4d6e-a38c-4d8d62b18e89/1/bFMRpXzPy1E1Jh_zm9GaEV7z588.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/d983cd-3f8e-4d6e-a38c-4d8d62b18e89/1/bFMRpXzPy1E1Jh_zm9GaEV7z588.mft
rsync://rpki.ripe.net/repository/DEFAULT/bFMRpXzPy1E1Jh_zm9GaEV7z588.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:07:b4:b4:a1:12:ed:e9:44:ce:b4:fe:ed:e6:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c5311a57ccfcb5135261ff39bd19a115ef3e7cf
Validity
Not Before: Aug 23 04:00:47 2025 GMT
Not After : Aug 24 04:00:47 2025 GMT
Subject: CN=44ac70214fc84bafdd82c69d59b76198c63a2b39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d1:62:d8:f2:80:da:5b:c5:88:58:b5:b3:06:
06:d7:39:8d:29:e1:80:b4:cc:63:81:90:74:9c:e9:
46:83:0e:61:29:71:36:8c:87:aa:84:9e:5f:99:29:
f0:e1:35:38:ab:32:23:6f:16:c0:14:7d:d3:df:15:
62:ac:4f:d7:21:12:37:1e:e4:1c:7c:f8:8e:d3:c7:
55:b1:99:33:bf:b3:33:8a:df:3c:44:3c:4d:3a:5b:
fd:7d:40:5b:a6:dc:54:9a:4d:f9:eb:8a:bd:64:c4:
c0:a4:4d:43:31:4d:83:8f:14:5e:c7:e8:88:7b:b9:
9c:d6:21:19:c6:be:83:56:99:5f:d4:32:1c:f4:d6:
8f:09:b3:e4:d6:83:f1:59:37:2e:3c:21:d1:6b:46:
60:0a:c7:33:a8:c2:53:a1:e8:49:18:05:f2:2b:cb:
b4:3c:49:39:21:85:cd:a6:fe:b5:aa:e8:2b:e7:59:
54:1f:88:70:22:2f:3d:35:2d:9b:d3:ea:05:21:76:
4d:6d:10:a9:ae:b7:d5:a2:e6:cf:fd:bf:fb:64:11:
ba:9c:82:c9:01:1c:0f:50:93:63:98:bf:74:6b:0c:
a6:9d:31:58:f7:e2:87:4b:80:9b:85:08:bc:68:70:
9e:ab:fa:14:1a:34:ef:b4:ee:98:76:77:02:da:79:
5a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:AC:70:21:4F:C8:4B:AF:DD:82:C6:9D:59:B7:61:98:C6:3A:2B:39
X509v3 Authority Key Identifier:
keyid:6C:53:11:A5:7C:CF:CB:51:35:26:1F:F3:9B:D1:9A:11:5E:F3:E7:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bFMRpXzPy1E1Jh_zm9GaEV7z588.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/d983cd-3f8e-4d6e-a38c-4d8d62b18e89/1/bFMRpXzPy1E1Jh_zm9GaEV7z588.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/d983cd-3f8e-4d6e-a38c-4d8d62b18e89/1/bFMRpXzPy1E1Jh_zm9GaEV7z588.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:96:97:b8:88:55:3c:b8:2f:58:fd:08:f0:a5:cd:83:53:dc:
55:e3:c0:77:cd:01:35:33:0b:72:bc:e2:fd:2f:47:59:fe:73:
f6:ec:a8:c2:d1:9f:1e:fc:20:0b:6f:39:30:23:16:d8:ee:ca:
04:73:23:6a:f5:ca:6e:83:88:b5:92:ab:62:2a:73:0e:87:54:
40:b5:03:93:76:2e:07:af:09:4c:1e:5f:a9:f2:ce:7b:5f:9c:
90:0a:0a:21:16:e4:60:b4:cb:36:4c:1f:94:b0:76:c0:72:f7:
38:b2:84:ce:f7:7a:ac:2d:cd:4d:30:ef:7e:14:2b:ed:5b:01:
71:11:4c:8d:ae:af:8e:3f:74:59:be:d7:94:ce:85:58:bf:81:
08:82:fd:18:32:80:da:67:ac:3a:2f:ca:2b:70:99:2b:69:a3:
4c:67:b2:96:08:fc:f5:d9:bc:c5:e4:6a:cb:d3:35:de:0a:a0:
b2:4b:cb:c2:9f:1d:5c:18:31:e9:ab:be:82:b8:16:35:e3:9d:
e3:74:da:ef:89:b1:03:cc:0a:da:03:8d:28:9a:be:6a:bb:33:
34:2f:e6:d8:10:0d:0f:47:19:56:07:c4:2a:d3:8e:a3:2a:f1:
32:5a:35:e6:d1:80:e8:ce:e3:1a:30:95:ba:40:be:da:ce:e0:
87:a7:59:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:27:09 2025 by rpki-client