Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/c978db-6569-4544-8197-ce6b7c9d559b/1/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.mft
File: bS9Y5jbYux3RA5bIJE3BGSFeeRQ.mft (raw, json)
Hash identifier: ILtseFU9ejexJUAemOcrlyw+dtZkedcU2ZcXFeJpNKs=
Subject key identifier: 7D:F8:13:74:24:21:24:97:B0:07:0D:52:95:C9:4F:45:8B:3A:36:96
Authority key identifier: 6D:2F:58:E6:36:D8:BB:1D:D1:03:96:C8:24:4D:C1:19:21:5E:79:14
Certificate issuer: /CN=6d2f58e636d8bb1dd10396c8244dc119215e7914
Certificate serial: 0198D5BB986F4A645552CC37193F5A46A1E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/c978db-6569-4544-8197-ce6b7c9d559b/1/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.mft
Manifest number: 1343
Signing time: Sat 23 Aug 2025 07:01:37 +0000
Manifest this update: Sat 23 Aug 2025 07:01:37 +0000
Manifest next update: Sun 24 Aug 2025 07:01:37 +0000
Files and hashes: 1: HlthH4j3pMmbo-FQP8AAkjQIPT4.roa (hash: 6d+RLZMl6NuFQdB3HSTDyU49VQw+vA1/721iQn3fpGo=)
2: bS9Y5jbYux3RA5bIJE3BGSFeeRQ.crl (hash: jueNPYJQwWgdSPKXZFBA/nIz8WQBnwq9W+UW4EXxfnE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/c978db-6569-4544-8197-ce6b7c9d559b/1/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/c978db-6569-4544-8197-ce6b7c9d559b/1/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:98:6f:4a:64:55:52:cc:37:19:3f:5a:46:a1:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d2f58e636d8bb1dd10396c8244dc119215e7914
Validity
Not Before: Aug 23 07:01:37 2025 GMT
Not After : Aug 24 07:01:37 2025 GMT
Subject: CN=7df8137424212497b0070d5295c94f458b3a3696
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:1c:1d:f0:8c:3b:06:ad:b0:6b:d0:16:43:8f:
bd:bf:ac:62:0b:38:9b:c9:ec:88:41:02:0f:c0:54:
d8:86:35:3d:7f:30:4c:ff:6c:13:97:62:3c:17:8c:
77:7b:e2:37:e9:1a:bb:88:9b:55:94:56:b2:02:d3:
56:5b:7d:2a:25:a5:f8:60:20:2a:58:48:30:b2:80:
0c:3f:2c:f1:aa:ff:53:54:ab:6b:1a:22:75:d4:9d:
f3:62:69:91:fd:8e:3e:ae:94:63:b6:93:4c:19:11:
81:53:fe:95:28:b4:52:00:6e:ea:58:7a:a9:cd:fd:
16:e6:96:da:18:d8:95:c6:d1:d7:87:12:62:6e:92:
89:d4:85:85:d3:92:2e:6e:8e:e7:d2:7b:5e:6d:ab:
42:3d:cc:5a:bf:19:cd:91:3d:63:9d:2f:65:fd:ba:
dc:a4:8c:66:7a:2f:5d:d3:e5:19:eb:e7:1d:80:8b:
a9:75:3d:c0:96:cd:89:54:8d:a6:c4:c2:3d:d9:ba:
7b:f9:72:38:f2:55:ac:f6:ac:fe:ef:2c:78:c1:72:
51:67:56:0a:be:a1:5e:2a:eb:2e:7a:7a:5f:66:40:
aa:39:ff:1f:5c:fc:b3:ae:0a:37:7a:fd:5d:22:fb:
01:92:a8:16:41:e6:fa:4e:9d:6d:bb:53:35:a3:07:
8a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:F8:13:74:24:21:24:97:B0:07:0D:52:95:C9:4F:45:8B:3A:36:96
X509v3 Authority Key Identifier:
keyid:6D:2F:58:E6:36:D8:BB:1D:D1:03:96:C8:24:4D:C1:19:21:5E:79:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c978db-6569-4544-8197-ce6b7c9d559b/1/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c978db-6569-4544-8197-ce6b7c9d559b/1/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:19:1e:82:51:4c:bf:a7:fc:d1:0c:cb:c1:63:fc:4e:b2:0e:
a7:f2:cb:08:06:5f:60:54:4e:cd:a1:c8:04:a6:7b:9c:ed:0f:
6a:f1:e2:58:01:cd:b7:85:a5:0b:62:65:3d:85:54:4a:e9:dc:
97:64:a8:2e:21:63:8d:9e:5a:b1:37:df:b5:49:39:81:42:4a:
6d:bc:87:89:0f:82:d6:bd:14:0d:f8:21:6d:05:cc:53:88:12:
d4:b9:15:e4:47:d6:ee:e6:e4:71:4b:75:f7:d8:e2:30:99:63:
11:d9:21:0c:39:ee:d2:fe:72:f7:ea:31:ab:cc:9c:52:1a:6d:
3c:cc:9c:ea:64:92:1e:91:2c:ec:86:f6:09:5e:9b:43:38:4a:
9f:f1:2a:31:12:0d:56:56:5b:33:f8:7c:4f:46:30:f9:f5:9b:
0f:eb:75:0a:71:b4:cd:91:35:7a:9c:be:22:c5:9e:fa:9f:dc:
6c:ec:00:9a:d3:9c:eb:9b:fb:43:cd:c0:6d:91:80:66:c2:4a:
70:ff:e5:ab:2a:b6:1c:7c:06:63:10:c5:c9:5f:40:54:db:7f:
68:fe:34:23:f4:c4:45:a5:28:e6:a0:9c:75:43:c8:50:d3:9f:
b2:16:e2:e8:0a:31:fc:8d:83:cf:b4:e7:b7:22:25:a3:15:73:
8b:7e:20:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:24:22 2025 by rpki-client