Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/56cc91-ba62-4037-b57f-6bddb317e78b/1/B6BIbcC0unMJA3iP8_P3yCSbkh8.mft
File: B6BIbcC0unMJA3iP8_P3yCSbkh8.mft (raw, json)
Hash identifier: QtHObxcKClqNWATUfh4qpbvbtTtiX0eucn8kAW17HOs=
Subject key identifier: B9:95:B9:0D:34:EB:A8:34:7B:B2:F9:7B:B6:0A:0E:94:EC:08:58:1B
Authority key identifier: 07:A0:48:6D:C0:B4:BA:73:09:03:78:8F:F3:F3:F7:C8:24:9B:92:1F
Certificate issuer: /CN=07a0486dc0b4ba730903788ff3f3f7c8249b921f
Certificate serial: 0198D4E03F0DEC51E78F4068C1A633D19677
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B6BIbcC0unMJA3iP8_P3yCSbkh8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/56cc91-ba62-4037-b57f-6bddb317e78b/1/B6BIbcC0unMJA3iP8_P3yCSbkh8.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 03:02:02 +0000
Manifest this update: Sat 23 Aug 2025 03:02:02 +0000
Manifest next update: Sun 24 Aug 2025 03:02:02 +0000
Files and hashes: 1: B6BIbcC0unMJA3iP8_P3yCSbkh8.crl (hash: cFdofV93aoTgXvvZPv11ApigozwPuOery4J1wJzA8ic=)
2: xJFVozfHmoVSSAuYbjszEZbCInk.roa (hash: Gjo9VUU6W0ie3Sm+l3hGhli3h91M0ZQXuSrdhZEO8P0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/56cc91-ba62-4037-b57f-6bddb317e78b/1/B6BIbcC0unMJA3iP8_P3yCSbkh8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/56cc91-ba62-4037-b57f-6bddb317e78b/1/B6BIbcC0unMJA3iP8_P3yCSbkh8.mft
rsync://rpki.ripe.net/repository/DEFAULT/B6BIbcC0unMJA3iP8_P3yCSbkh8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:3f:0d:ec:51:e7:8f:40:68:c1:a6:33:d1:96:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07a0486dc0b4ba730903788ff3f3f7c8249b921f
Validity
Not Before: Aug 23 03:02:02 2025 GMT
Not After : Aug 24 03:02:02 2025 GMT
Subject: CN=b995b90d34eba8347bb2f97bb60a0e94ec08581b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:7b:76:09:2e:cb:ab:ec:aa:c1:a8:79:4b:5e:
01:d9:fc:64:11:dc:74:1b:35:41:e4:8e:74:39:e9:
c2:31:00:8a:c9:b6:e5:72:5a:38:f8:d5:95:e9:78:
3b:d1:55:bc:ef:1c:bd:0a:24:11:4b:b8:a7:de:f9:
e2:88:f0:27:87:45:31:1e:03:6d:29:91:9b:1d:4f:
c4:0e:08:38:a1:ad:48:1e:18:a0:a1:4b:22:aa:98:
e0:53:29:25:34:b2:32:7d:5a:b1:a8:fe:30:13:b9:
72:42:22:f7:3b:9d:6c:44:78:4f:ed:d9:17:c8:0f:
8c:56:99:56:43:72:15:a8:1e:d0:2b:fd:d0:f1:ae:
9f:55:20:d7:c2:d4:e9:ca:c4:4a:f8:93:9f:8c:df:
67:96:6d:2d:ed:1c:09:2f:d9:bc:68:8c:6e:18:c4:
80:9f:1c:54:24:32:10:d1:51:69:54:2d:10:2f:bf:
aa:cf:0d:e6:17:70:3f:18:f7:1e:13:bd:72:10:b8:
b9:91:8c:5e:80:57:af:80:ca:3f:2b:12:43:6e:33:
9e:21:8b:d2:f8:34:48:f9:60:86:d9:ce:58:9d:7d:
15:ed:08:02:84:a2:15:3d:8c:29:55:06:8f:67:79:
23:43:1a:30:5f:77:02:74:bb:98:58:ab:2f:71:5e:
fb:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:95:B9:0D:34:EB:A8:34:7B:B2:F9:7B:B6:0A:0E:94:EC:08:58:1B
X509v3 Authority Key Identifier:
keyid:07:A0:48:6D:C0:B4:BA:73:09:03:78:8F:F3:F3:F7:C8:24:9B:92:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6BIbcC0unMJA3iP8_P3yCSbkh8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/56cc91-ba62-4037-b57f-6bddb317e78b/1/B6BIbcC0unMJA3iP8_P3yCSbkh8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/56cc91-ba62-4037-b57f-6bddb317e78b/1/B6BIbcC0unMJA3iP8_P3yCSbkh8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:94:d4:ec:3e:30:fb:89:23:17:c6:3e:8b:2f:b0:c2:6c:dd:
bb:c9:23:3d:30:cd:c4:f0:3c:d2:a9:f8:8c:ad:8c:ea:48:06:
85:c1:8d:5e:fa:e5:77:f4:af:71:d5:62:51:9b:c1:a7:ea:93:
75:46:a6:bb:46:14:0b:3a:da:57:af:6c:fb:2b:fc:21:12:e1:
2f:c0:38:d9:2b:5a:31:54:6b:25:c1:fd:3c:48:35:e4:da:cd:
de:65:c4:c5:fe:02:68:ea:1d:3e:e2:5b:8d:bc:f4:d3:18:1b:
b7:ea:d2:df:af:04:fd:db:5a:40:05:00:7e:ee:78:71:6e:36:
28:ad:9d:ca:94:a9:59:06:7b:09:e0:60:83:10:0b:8f:bc:82:
56:24:d5:73:7c:69:ac:8c:e9:7b:3b:7c:56:68:ef:04:d7:a2:
1d:83:ec:62:55:34:00:b8:d5:25:d7:23:71:99:72:c4:1a:11:
6b:fa:ec:34:fc:48:26:bd:39:fa:63:bf:ca:7b:8c:ef:45:48:
38:ee:07:85:c4:44:fb:f1:58:f1:0a:0e:59:e3:90:26:65:dd:
08:55:62:77:be:32:52:8e:92:39:9f:dc:f5:33:c6:44:0b:2b:
5c:42:3a:29:3f:01:9a:a9:f4:33:99:a1:ae:13:8e:4a:2b:a6:
d9:5f:cc:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 12:27:51 2025 by rpki-client