Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/12e679-856c-48ea-a062-959ebb905b3a/1/bBKrcGPIXf4i-nqZ2cb85eYWEDE.mft
File: bBKrcGPIXf4i-nqZ2cb85eYWEDE.mft (raw, json)
Hash identifier: QhxiyvGJGT8ODgjBUeOWsMfh7cpwT6nzHPvSFDkdiqQ=
Subject key identifier: 35:B0:D5:0E:2F:00:17:58:F5:9F:54:E0:DE:75:F0:B5:7E:F7:CE:8F
Authority key identifier: 6C:12:AB:70:63:C8:5D:FE:22:FA:7A:99:D9:C6:FC:E5:E6:16:10:31
Certificate issuer: /CN=6c12ab7063c85dfe22fa7a99d9c6fce5e6161031
Certificate serial: 0198D65FCD3BE940745CF268837DFE283744
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bBKrcGPIXf4i-nqZ2cb85eYWEDE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/12e679-856c-48ea-a062-959ebb905b3a/1/bBKrcGPIXf4i-nqZ2cb85eYWEDE.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 10:00:59 +0000
Manifest this update: Sat 23 Aug 2025 10:00:59 +0000
Manifest next update: Sun 24 Aug 2025 10:00:59 +0000
Files and hashes: 1: 4ZrViR6MQ2LLwx-EpgYcmNOkhLU.roa (hash: CcPs0/7vgqCna/xx+mVGMJUsG3faAZo8Ob5SJoRyZWw=)
2: bBKrcGPIXf4i-nqZ2cb85eYWEDE.crl (hash: TsnHdiBrW0kgNT8im2zE8tw9iKQbqmx4G2UALMOj+Cs=)
3: rUMFzM_6Km-2DqJ2YTtdSrWtUek.roa (hash: abXfjUUyhIhLutP9c/7/Y4Znd/9ps5Twdqn7uTEich0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/12e679-856c-48ea-a062-959ebb905b3a/1/bBKrcGPIXf4i-nqZ2cb85eYWEDE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/12e679-856c-48ea-a062-959ebb905b3a/1/bBKrcGPIXf4i-nqZ2cb85eYWEDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/bBKrcGPIXf4i-nqZ2cb85eYWEDE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:cd:3b:e9:40:74:5c:f2:68:83:7d:fe:28:37:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c12ab7063c85dfe22fa7a99d9c6fce5e6161031
Validity
Not Before: Aug 23 10:00:59 2025 GMT
Not After : Aug 24 10:00:59 2025 GMT
Subject: CN=35b0d50e2f001758f59f54e0de75f0b57ef7ce8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:eb:4a:3b:12:c1:6d:34:24:f3:04:de:e6:16:
ed:82:31:39:0e:76:61:85:ae:ca:68:40:11:72:5f:
f2:5f:3b:05:3e:4a:ac:90:d7:b8:d3:1d:35:e9:fb:
1b:0d:4a:3c:11:f9:7a:47:55:f8:5b:f4:7a:bb:f4:
e0:2f:85:51:93:d0:9a:d2:98:76:cc:03:3f:d2:12:
7f:17:d5:0a:33:af:9d:37:52:42:0b:87:32:33:47:
26:be:8c:53:a1:f6:bf:5f:b5:54:08:44:da:9f:31:
e4:80:df:8d:ba:58:c3:51:be:44:e1:1a:c7:9c:f9:
b7:b7:5c:f9:0a:3d:5d:8b:21:76:7d:59:1e:a8:02:
56:29:e0:ea:ec:3f:3b:96:b3:21:43:0a:95:70:a9:
3d:e3:48:7a:68:e6:48:5c:78:37:4f:93:64:3b:82:
72:fc:71:f9:0d:6a:6c:45:3d:07:21:6f:3f:c3:3f:
69:9a:7b:56:58:26:8a:f1:8a:b9:cc:ae:58:69:d4:
82:4b:00:ab:eb:a1:b2:cc:68:b0:ae:cb:af:52:9e:
bd:f4:95:81:95:c8:48:bc:36:36:ad:d2:61:a2:1c:
b4:df:0e:6e:04:2d:f5:d5:71:b3:de:5d:36:6e:fc:
7e:43:98:66:dd:81:25:18:d3:4d:69:d0:cf:93:31:
d8:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:B0:D5:0E:2F:00:17:58:F5:9F:54:E0:DE:75:F0:B5:7E:F7:CE:8F
X509v3 Authority Key Identifier:
keyid:6C:12:AB:70:63:C8:5D:FE:22:FA:7A:99:D9:C6:FC:E5:E6:16:10:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bBKrcGPIXf4i-nqZ2cb85eYWEDE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/12e679-856c-48ea-a062-959ebb905b3a/1/bBKrcGPIXf4i-nqZ2cb85eYWEDE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/12e679-856c-48ea-a062-959ebb905b3a/1/bBKrcGPIXf4i-nqZ2cb85eYWEDE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:c6:39:32:03:b2:e1:27:76:d2:ae:fa:ee:4a:67:58:c2:cb:
c8:49:1f:6b:55:41:88:c9:92:3e:72:d6:14:fd:b5:16:47:cd:
4e:13:d5:6d:82:e3:b1:da:7d:42:41:ea:46:1d:31:64:b3:15:
d5:2c:49:b4:d2:43:5d:da:b4:85:81:fd:e4:9c:b6:13:bd:41:
6e:07:95:6a:d2:4b:a3:e1:1c:f8:de:6c:ba:ab:c1:a8:f8:7a:
9c:4d:64:3c:ef:8a:86:b9:36:62:c4:1b:30:aa:8c:36:20:69:
a1:97:87:0f:33:d2:f5:67:40:51:57:5d:59:49:56:df:a7:fa:
9f:94:4d:16:91:81:05:73:5c:c7:ce:cc:ef:5b:1a:f6:1b:16:
31:7f:88:71:cc:c9:77:ca:a8:5f:ac:4e:ef:62:8c:d1:5a:5c:
f7:b9:55:8f:8d:63:ca:6a:1c:1c:55:3c:71:1c:51:27:67:b0:
24:ea:f8:06:3f:7c:f6:cb:a6:b4:55:cf:d6:e0:49:a4:c5:75:
f6:39:b7:36:ae:9c:f7:b6:47:e4:2e:50:ea:ed:76:6e:72:59:
e7:a5:3d:c9:73:4e:d1:61:d7:c0:ae:f6:58:ea:16:0d:ee:7e:
ff:e1:79:ad:ac:c0:59:97:42:3a:72:a4:52:07:ca:b7:9a:32:
cc:7d:7d:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:37:36 2025 by rpki-client