Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.mft
File: Bdp1ccXrE7GuT0QXzv7CvXeQLi0.mft (raw, json)
Hash identifier: lK8BvZTNNdcOADA04hMrddPwljCm7ptnypZxkNnnwkw=
Subject key identifier: E5:0A:FC:7B:A0:CA:A8:61:3A:6E:6D:1A:94:A4:14:A3:94:99:4B:C5
Authority key identifier: 05:DA:75:71:C5:EB:13:B1:AE:4F:44:17:CE:FE:C2:BD:77:90:2E:2D
Certificate issuer: /CN=05da7571c5eb13b1ae4f4417cefec2bd77902e2d
Certificate serial: 0198D5F1C5D01A334F6A47A37E2A56A09047
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 08:00:48 +0000
Manifest this update: Sat 23 Aug 2025 08:00:48 +0000
Manifest next update: Sun 24 Aug 2025 08:00:48 +0000
Files and hashes: 1: AsYD6hoeMD1Ii3ouRsCjixk0isY.roa (hash: zcxHBop/y0fEgcQmkIj/4jrHcOuohd20eiO0g8A5mhM=)
2: Bdp1ccXrE7GuT0QXzv7CvXeQLi0.crl (hash: cX7dJW4YBP05hnSNgGcXZ+uAJ9I6XIBCFSiTvd+wE20=)
3: unS2BH6IRvMlWO0CeZZ9qSzMqA0.roa (hash: 7PVmOlO8Ugj501NmZwLgajumsSoAEyC9CKRs3IKLmtk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 08:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:c5:d0:1a:33:4f:6a:47:a3:7e:2a:56:a0:90:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05da7571c5eb13b1ae4f4417cefec2bd77902e2d
Validity
Not Before: Aug 23 08:00:48 2025 GMT
Not After : Aug 24 08:00:48 2025 GMT
Subject: CN=e50afc7ba0caa8613a6e6d1a94a414a394994bc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c0:cd:c1:c8:e3:fc:15:07:18:e5:10:b2:78:
b3:6c:6c:b7:21:01:33:d6:4b:ea:83:6e:46:c3:14:
c4:c5:36:c3:58:24:e5:cc:6f:9c:a4:1f:75:63:15:
0b:7b:d4:b3:be:9d:28:f1:f9:65:34:fc:fa:98:96:
b4:31:0c:43:23:8f:aa:d9:df:c4:04:94:1e:81:27:
12:3d:99:aa:22:4b:26:ce:3b:65:dd:63:51:a5:a1:
9b:59:2c:78:c5:af:77:a6:d2:b4:41:59:2b:bc:9e:
2e:a3:a2:fa:84:48:d6:ac:be:22:85:7e:69:e8:5a:
b7:ff:d5:65:ea:ff:10:8e:bb:3b:df:df:c6:39:a4:
fb:95:cb:2f:54:a3:1c:a1:47:18:d4:7b:89:02:de:
82:02:22:28:62:b3:1a:aa:6b:86:86:04:bc:48:82:
d5:b6:05:89:20:60:02:54:42:5e:d5:a0:2f:bc:66:
89:7c:bb:72:33:fb:12:e3:8b:fc:3f:de:38:69:9a:
fb:ea:a6:d3:41:54:ad:ce:cf:33:96:94:6d:0e:32:
23:14:2b:15:e7:3e:8c:f0:ff:d2:ba:72:e0:25:22:
40:13:f7:16:1e:47:ec:4d:8c:6b:14:27:b0:92:6b:
57:ff:89:59:e9:4f:73:fe:d3:af:ba:30:3a:73:d4:
9b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:0A:FC:7B:A0:CA:A8:61:3A:6E:6D:1A:94:A4:14:A3:94:99:4B:C5
X509v3 Authority Key Identifier:
keyid:05:DA:75:71:C5:EB:13:B1:AE:4F:44:17:CE:FE:C2:BD:77:90:2E:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:87:33:e7:d2:14:c7:44:32:de:8a:a3:a8:e9:7c:8d:86:22:
7c:c3:cb:57:49:97:af:34:00:1e:52:08:72:ae:c0:b1:12:24:
05:75:51:2e:96:0e:35:8a:ce:67:64:44:3e:3e:9f:7f:23:41:
c0:0a:36:fd:54:43:cd:ed:da:37:04:62:df:d0:81:46:3f:d5:
97:de:63:65:8c:27:78:c6:c6:79:4c:6e:5c:8e:b3:7e:b2:dc:
bc:a9:02:87:22:d7:76:5e:7f:cf:5e:8b:4e:69:d0:18:24:93:
3c:92:8e:bd:b1:cd:dc:21:0f:62:f9:f3:ca:5c:14:2b:ce:8d:
78:35:cf:f1:c1:64:ec:0b:eb:d8:f3:91:69:86:d1:3f:d8:a0:
9e:04:45:4a:f2:59:6c:64:a3:5d:32:65:ae:b4:c2:c2:69:10:
c2:de:de:e3:50:ff:20:2f:8e:d7:57:54:af:66:08:14:94:65:
3f:8a:34:71:32:e6:0c:85:63:00:97:70:fc:2f:60:e0:3e:78:
45:89:56:47:ff:c3:c3:8c:cf:5c:1c:e5:24:29:ee:09:65:e9:
e8:7b:dd:4d:77:0b:9a:71:e9:03:ee:6e:0b:47:e7:99:f9:78:
cb:48:26:52:d5:09:b2:03:25:ae:de:af:81:88:3f:37:e9:b3:
be:18:36:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:24:13 2025 by rpki-client