Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.mft
File: bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.mft (raw, json)
Hash identifier: ycMorczrHMlsW2Y8K4AdZEsXioY8ehUI1I9O+tmpJ4g=
Subject key identifier: F5:44:6F:13:BC:F0:B2:E1:93:D5:68:EF:F5:93:4C:E8:4B:F2:09:DB
Authority key identifier: 6C:FF:3D:89:9E:26:FC:84:FB:43:79:FB:32:5F:17:4B:50:75:CE:0D
Certificate issuer: /CN=6cff3d899e26fc84fb4379fb325f174b5075ce0d
Certificate serial: 0198D4724647E336A66D32126AA8A0C940FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 01:01:55 +0000
Manifest this update: Sat 23 Aug 2025 01:01:55 +0000
Manifest next update: Sun 24 Aug 2025 01:01:55 +0000
Files and hashes: 1: bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.crl (hash: RcN1yaGewBGMOKyEOcUXc1TU4/GfxS0DPpyr5hkzEfA=)
2: gKY4N4flGE3w8VGawvt5MmzbsEY.roa (hash: n6hPnIZKkrQ9PZ3CvwgI/ENozP0XURH/9HKr+aSdN00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:46:47:e3:36:a6:6d:32:12:6a:a8:a0:c9:40:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cff3d899e26fc84fb4379fb325f174b5075ce0d
Validity
Not Before: Aug 23 01:01:55 2025 GMT
Not After : Aug 24 01:01:55 2025 GMT
Subject: CN=f5446f13bcf0b2e193d568eff5934ce84bf209db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b2:b9:f3:7a:37:1a:8f:e4:14:11:b0:86:a3:
00:b2:e1:93:6c:f4:f9:34:68:df:0b:3c:48:81:8d:
cf:3c:a7:d1:32:19:e5:64:9f:0b:93:c8:14:a3:c6:
72:4c:1e:39:3e:30:41:df:aa:59:89:c8:65:eb:3f:
42:b1:20:1d:6c:13:6c:6d:01:65:f6:c5:bd:a0:97:
5d:8d:29:2e:77:5a:ea:13:86:30:71:fe:63:ca:75:
00:d9:ce:ce:4b:85:91:7b:bd:41:c5:14:60:3c:01:
00:b8:a5:e3:fa:ff:8d:e1:6c:18:ce:61:d5:00:5f:
bd:b4:12:ee:b7:8f:d5:cd:82:56:98:93:9f:fd:35:
a2:1d:01:65:2e:c2:7f:7e:82:8d:3f:af:28:95:cd:
7b:b7:b9:26:4c:a1:11:bd:7b:8c:2a:6d:f0:90:28:
fe:43:70:d4:cc:74:d1:58:99:0f:66:97:a3:cd:46:
52:c6:4f:1d:22:1f:fd:ab:a4:3d:43:0b:5c:8e:fe:
43:d7:e6:93:93:c8:87:f9:a5:68:1c:b3:43:01:b2:
57:76:34:e1:79:cd:86:01:7b:b4:5e:5a:aa:f0:a6:
48:3d:16:eb:8e:64:fe:88:aa:1d:51:fd:3b:01:91:
cd:32:e7:0e:36:4f:41:80:1d:d7:e9:88:53:33:70:
ae:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:44:6F:13:BC:F0:B2:E1:93:D5:68:EF:F5:93:4C:E8:4B:F2:09:DB
X509v3 Authority Key Identifier:
keyid:6C:FF:3D:89:9E:26:FC:84:FB:43:79:FB:32:5F:17:4B:50:75:CE:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b0c875-24e1-444d-b01d-5408f8d9dfb1/1/bP89iZ4m_IT7Q3n7Ml8XS1B1zg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:41:5b:1e:b7:87:51:e8:e3:89:c1:ac:bc:af:56:8c:0d:7b:
a9:a2:f3:9c:9a:75:71:c7:ce:ae:c3:64:17:dd:3e:df:6f:b0:
5c:de:8f:71:1c:02:97:e8:d1:17:9e:c7:f0:a7:fb:9d:7b:60:
ac:c4:d2:11:f3:c6:48:02:9d:d8:c1:e1:03:d0:27:36:21:c4:
b9:4d:9e:8a:35:07:01:04:3b:e4:a8:51:ca:39:71:89:a4:76:
79:ae:a6:3b:c4:96:5a:62:7f:31:55:0c:b2:c6:fe:74:a2:e3:
7d:85:78:bf:0f:88:a4:81:70:f4:7c:41:40:ee:9f:58:95:d8:
30:fa:2d:e3:f0:df:a1:7f:02:05:3c:3a:1f:dd:24:4a:66:96:
cb:d9:26:1e:7c:d0:0c:f9:f5:1d:29:ba:18:e2:ab:96:28:b0:
c6:cb:23:25:8a:63:c7:6a:17:5d:b3:d9:05:c8:6a:1d:93:ba:
d8:4b:13:48:25:f4:55:63:c5:65:69:e6:12:36:04:56:3c:d6:
bd:67:ed:94:cc:f6:13:09:97:58:24:0f:8a:2c:35:03:ae:f6:
bd:43:bd:61:28:2d:a7:01:de:ef:89:94:61:2b:23:26:4c:83:
6c:66:a0:d4:1c:fd:71:c5:bd:c1:6f:12:aa:c5:0c:5d:a6:b5:
83:09:e7:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:15:02 2025 by rpki-client