Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/318a26-52f5-4dc1-aa47-af1e2df5bdc3/1/1Bgd4bMrfBBQ0LDKbWQNRjpTUvQ.mft
File: 1Bgd4bMrfBBQ0LDKbWQNRjpTUvQ.mft (raw, json)
Hash identifier: YzZPDmRidxwMOGzF/EFToJ7UZaS7giLi6gvLbMudRYo=
Subject key identifier: 29:F9:BC:F7:68:89:A1:F2:EF:A9:13:CB:BB:CA:B1:EB:2D:F4:05:67
Authority key identifier: D4:18:1D:E1:B3:2B:7C:10:50:D0:B0:CA:6D:64:0D:46:3A:53:52:F4
Certificate issuer: /CN=d4181de1b32b7c1050d0b0ca6d640d463a5352f4
Certificate serial: 0198D6611B9A4C27987A2F5A9A85860CB1CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Bgd4bMrfBBQ0LDKbWQNRjpTUvQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/318a26-52f5-4dc1-aa47-af1e2df5bdc3/1/1Bgd4bMrfBBQ0LDKbWQNRjpTUvQ.mft
Manifest number: 06C0
Signing time: Sat 23 Aug 2025 10:02:24 +0000
Manifest this update: Sat 23 Aug 2025 10:02:24 +0000
Manifest next update: Sun 24 Aug 2025 10:02:24 +0000
Files and hashes: 1: 1Bgd4bMrfBBQ0LDKbWQNRjpTUvQ.crl (hash: dhNRBFeSIsJGhxu+Cnk5P1YXk/KVpNXxSQO+tsrMO+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/318a26-52f5-4dc1-aa47-af1e2df5bdc3/1/1Bgd4bMrfBBQ0LDKbWQNRjpTUvQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/318a26-52f5-4dc1-aa47-af1e2df5bdc3/1/1Bgd4bMrfBBQ0LDKbWQNRjpTUvQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Bgd4bMrfBBQ0LDKbWQNRjpTUvQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:02:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:61:1b:9a:4c:27:98:7a:2f:5a:9a:85:86:0c:b1:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4181de1b32b7c1050d0b0ca6d640d463a5352f4
Validity
Not Before: Aug 23 10:02:24 2025 GMT
Not After : Aug 24 10:02:24 2025 GMT
Subject: CN=29f9bcf76889a1f2efa913cbbbcab1eb2df40567
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6f:15:30:55:8b:fa:49:a5:26:73:11:f0:fc:
ed:b3:be:3f:d6:c5:cd:ea:15:c6:13:99:03:2f:33:
57:4b:a0:7f:80:9d:8d:b3:32:d9:23:96:8b:63:a5:
a7:8b:c6:14:1d:b8:c7:f6:23:ab:41:09:8f:7d:7d:
a1:ce:b0:17:af:cf:40:f0:88:db:d5:32:f0:9c:6c:
5f:58:cf:f3:7b:03:2a:6d:af:37:2c:16:1f:ea:79:
d9:37:e6:3f:d7:c6:16:a7:3c:c4:9b:79:70:2f:06:
16:2b:d9:3d:45:73:6e:96:3d:e3:99:8e:15:6c:41:
d9:c8:dd:a9:2b:1a:0b:3e:a5:ef:f8:56:e3:1f:74:
a4:e9:26:12:05:e4:08:92:51:c2:c3:de:04:5a:09:
08:dc:71:a1:b3:d8:19:3b:5a:fd:9c:da:06:fb:ff:
a5:94:db:1a:14:08:3b:62:11:1e:11:04:8b:ee:09:
89:9a:3d:22:aa:b3:c7:af:d0:c7:3f:6e:c4:5d:a9:
b8:20:b0:d0:53:29:df:87:d5:44:9b:b2:a4:94:c4:
e1:f1:01:a9:f1:3e:00:97:e0:7d:22:9e:14:a8:e8:
64:29:66:3a:91:77:57:21:fa:17:b8:02:18:3c:4d:
98:52:36:b7:0d:c8:a0:7e:8c:b4:8f:0a:8f:22:aa:
7c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:F9:BC:F7:68:89:A1:F2:EF:A9:13:CB:BB:CA:B1:EB:2D:F4:05:67
X509v3 Authority Key Identifier:
keyid:D4:18:1D:E1:B3:2B:7C:10:50:D0:B0:CA:6D:64:0D:46:3A:53:52:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Bgd4bMrfBBQ0LDKbWQNRjpTUvQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/318a26-52f5-4dc1-aa47-af1e2df5bdc3/1/1Bgd4bMrfBBQ0LDKbWQNRjpTUvQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/318a26-52f5-4dc1-aa47-af1e2df5bdc3/1/1Bgd4bMrfBBQ0LDKbWQNRjpTUvQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:17:d9:04:2f:bc:26:6a:84:bb:19:ce:1b:4e:3f:93:ca:bb:
d5:e8:bf:34:ed:57:1e:a4:b6:0a:93:79:e0:3a:87:1f:c4:00:
df:38:82:a4:5a:ed:65:de:8f:50:c3:b3:7f:5e:5c:6d:2a:8a:
c9:2b:82:3c:ef:13:17:de:f4:29:8a:2d:16:8b:32:47:74:98:
ae:ba:bd:81:f7:38:3c:63:6b:24:aa:77:5c:8d:4e:a0:04:a1:
38:95:90:d7:77:19:27:92:11:fa:f1:6b:f0:53:55:cd:38:76:
f2:1a:10:66:de:be:42:79:be:c6:86:59:38:39:f8:c1:17:60:
62:ff:33:82:3a:17:23:6d:a7:d5:21:5a:28:c2:14:88:55:d7:
fb:16:1d:92:03:76:73:6a:50:2f:2c:e8:a0:29:26:40:e9:71:
78:89:94:f2:82:26:15:66:e5:e0:9f:54:e2:43:d7:fc:20:26:
1a:4e:dd:92:94:d4:b6:b4:32:95:1a:e5:f6:45:d9:d2:34:69:
66:31:86:5e:74:63:50:81:cf:11:b1:f5:26:41:da:3d:cb:94:
9f:6b:ef:ec:11:b4:d5:2a:e6:0c:2f:78:b0:32:c4:b5:a6:e9:
88:c3:24:33:3a:f3:60:83:8e:54:1d:59:52:6f:3d:4d:80:59:
36:27:d2:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 16:12:11 2025 by rpki-client