Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.mft
File: xBCR00cDwD74-NKcu9zZjD5wb4Q.mft (raw, json)
Hash identifier: ttRbg4hb2U+gR4NTXoY4To9VIUVXl6o6JGKZpiq3FjM=
Subject key identifier: 84:41:49:F2:4B:D5:C2:11:EC:B0:43:9C:05:98:00:FC:E5:B1:90:7B
Authority key identifier: C4:10:91:D3:47:03:C0:3E:F8:F8:D2:9C:BB:DC:D9:8C:3E:70:6F:84
Certificate issuer: /CN=c41091d34703c03ef8f8d29cbbdcd98c3e706f84
Certificate serial: 0198D5F1C8B4E72EC73E6126DA935C509939
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xBCR00cDwD74-NKcu9zZjD5wb4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.mft
Manifest number: 0BAC
Signing time: Sat 23 Aug 2025 08:00:49 +0000
Manifest this update: Sat 23 Aug 2025 08:00:49 +0000
Manifest next update: Sun 24 Aug 2025 08:00:49 +0000
Files and hashes: 1: kF7mXs8Y_UB13udEpA0xGHCjAro.roa (hash: /PhN9JbWE0fzSWBg1QkZrpWYEK+tJrQFKSHOqe1g6qY=)
2: xBCR00cDwD74-NKcu9zZjD5wb4Q.crl (hash: Dxzwfsx3ImoD0FELIdlYfkZRvXmlxig4RdpZDUkDpLo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/xBCR00cDwD74-NKcu9zZjD5wb4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:c8:b4:e7:2e:c7:3e:61:26:da:93:5c:50:99:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c41091d34703c03ef8f8d29cbbdcd98c3e706f84
Validity
Not Before: Aug 23 08:00:49 2025 GMT
Not After : Aug 24 08:00:49 2025 GMT
Subject: CN=844149f24bd5c211ecb0439c059800fce5b1907b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:22:16:4c:50:8f:cb:be:2b:c0:4a:2e:7a:40:
55:a1:3b:b2:83:f2:18:6e:b3:39:ef:73:c4:70:a7:
3f:3b:09:d9:f1:42:5d:8c:d9:70:2c:ba:11:2a:50:
6e:92:22:0a:a1:b7:41:49:51:59:f0:26:cb:1b:88:
27:a7:29:78:4a:0d:61:c0:4d:21:a1:9c:e4:76:79:
4e:ff:f6:45:46:ab:a4:1b:df:27:80:d9:29:0f:58:
f3:c8:f7:a3:83:9e:a4:e0:dc:5b:1f:48:57:43:6b:
3a:c1:2c:7e:7c:6d:10:d4:7e:5e:4b:dd:24:1e:5b:
dc:4b:ff:23:c7:d0:3e:ca:11:54:51:11:73:8d:29:
4f:d8:5a:49:d0:ce:97:14:4c:b8:98:9b:cc:79:dc:
5c:06:50:08:9b:1d:37:22:b4:ce:5e:5d:42:0a:ce:
46:44:dd:66:7d:4e:f3:54:aa:2a:d4:34:3f:ee:17:
20:ae:08:b5:88:21:10:be:15:5d:09:73:32:6c:c2:
fa:e5:df:89:cc:c7:df:fa:0f:97:e1:2a:21:c1:c2:
37:62:ad:44:82:83:82:2a:f4:e9:27:94:2d:c6:ef:
a5:d8:0b:c8:0c:94:c4:02:b0:8d:62:20:f6:90:fe:
2b:15:47:22:44:92:f9:45:35:d8:e1:69:3c:aa:80:
3e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:41:49:F2:4B:D5:C2:11:EC:B0:43:9C:05:98:00:FC:E5:B1:90:7B
X509v3 Authority Key Identifier:
keyid:C4:10:91:D3:47:03:C0:3E:F8:F8:D2:9C:BB:DC:D9:8C:3E:70:6F:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xBCR00cDwD74-NKcu9zZjD5wb4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/278952-9353-4afd-a00d-f7e7bb014db8/1/xBCR00cDwD74-NKcu9zZjD5wb4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:e6:7d:00:dc:12:f6:88:fe:c2:2a:45:b4:93:89:cd:9e:ac:
fb:e8:ad:59:97:94:77:73:e5:c5:52:21:59:20:3b:8b:21:de:
02:d1:83:16:55:b8:5d:3b:0a:d2:83:6e:47:29:1a:99:92:4c:
d2:ac:3b:2d:6f:bd:93:3a:82:bf:fd:72:5e:87:a4:54:1d:b3:
e8:21:49:fa:dc:31:e9:0c:f7:aa:e3:94:de:b1:ae:7e:55:e4:
3e:e7:3f:5a:f6:e4:41:09:32:d3:11:18:97:a1:71:37:c6:1f:
7c:93:1a:b8:a7:77:c2:d1:b0:24:f6:cd:58:b1:46:4b:f0:1f:
49:5a:7a:5c:9c:bf:ae:25:3b:eb:2d:7b:d8:14:c9:c7:b2:67:
89:7a:aa:bf:9b:f0:cc:67:e4:75:72:f8:42:98:a3:2d:8d:00:
84:24:ca:76:d9:35:4f:e9:07:ac:f0:aa:85:07:ff:02:28:b7:
d5:3c:3e:e8:6e:5c:1a:0a:90:e6:f6:74:e9:c4:98:ce:53:f2:
34:14:33:5b:d6:92:00:e9:e0:e9:a9:d0:94:3f:f9:aa:ec:33:
c8:eb:ce:f1:49:de:16:88:a8:e0:19:94:3e:76:58:3d:5b:3d:
8f:e5:48:f4:b9:89:84:04:d4:d1:52:4e:fc:51:14:5e:7f:97:
01:a5:8d:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:05:25 2025 by rpki-client