Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/bdHcTS63vyo_CNVFdVR3BVFD8XQ.mft
File: bdHcTS63vyo_CNVFdVR3BVFD8XQ.mft (raw, json)
Hash identifier: rYuHO7KK8SaZz7R6QNZbjfXqUqqq8D1YqVlmDs4y4aA=
Subject key identifier: EA:8E:58:13:37:95:B1:40:1C:FE:B3:E8:E4:59:AC:94:F4:6C:00:01
Authority key identifier: 6D:D1:DC:4D:2E:B7:BF:2A:3F:08:D5:45:75:54:77:05:51:43:F1:74
Certificate issuer: /CN=6dd1dc4d2eb7bf2a3f08d545755477055143f174
Certificate serial: 0198D583973A2881CA96E6DBD10401D46751
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bdHcTS63vyo_CNVFdVR3BVFD8XQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/bdHcTS63vyo_CNVFdVR3BVFD8XQ.mft
Manifest number: 164C
Signing time: Sat 23 Aug 2025 06:00:27 +0000
Manifest this update: Sat 23 Aug 2025 06:00:27 +0000
Manifest next update: Sun 24 Aug 2025 06:00:27 +0000
Files and hashes: 1: 49pxkgi7itIv6ImUGF743Hog5ps.roa (hash: hT65WPD3rxjKAyyXgkyC1Te/5QcBwu6G6s4Re/Tw2UE=)
2: Jyvq7rcCs6Qlew8Ff4iEMvVHpXo.roa (hash: cAmAOJsrcg5h/lolypAUDsWdoBjnFRvupRZVbDEj0XI=)
3: bdHcTS63vyo_CNVFdVR3BVFD8XQ.crl (hash: 2oL+CJWuSv7EKfVgRWM+hednWFYz7I5wqHn1jMvMHs4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/bdHcTS63vyo_CNVFdVR3BVFD8XQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/bdHcTS63vyo_CNVFdVR3BVFD8XQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/bdHcTS63vyo_CNVFdVR3BVFD8XQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:97:3a:28:81:ca:96:e6:db:d1:04:01:d4:67:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dd1dc4d2eb7bf2a3f08d545755477055143f174
Validity
Not Before: Aug 23 06:00:27 2025 GMT
Not After : Aug 24 06:00:27 2025 GMT
Subject: CN=ea8e58133795b1401cfeb3e8e459ac94f46c0001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6a:d2:66:a6:0b:5d:0e:92:59:c7:af:59:11:
bb:41:3d:f2:84:44:e0:23:20:05:ca:ce:1f:56:8f:
77:07:46:50:06:c7:35:49:3a:99:8d:3c:b0:c4:db:
6f:41:4b:b2:08:3e:33:0b:a5:3a:dc:70:1f:7f:49:
94:c1:c2:4e:40:cb:c2:53:5b:8d:00:3f:a2:f5:33:
a7:c1:c2:03:31:0a:69:39:44:f6:da:62:1e:31:b4:
2c:35:a9:44:6b:a9:33:d1:bd:b2:78:b3:43:ab:85:
7c:e8:9d:de:35:dc:b7:73:a0:e5:e9:8c:3c:55:36:
99:a9:87:c9:eb:40:79:c3:eb:c4:f7:5e:6d:9f:26:
bc:03:00:63:bb:a9:24:45:f3:e0:43:4c:e3:3c:dd:
85:02:12:9e:8a:3d:3f:44:0e:b2:7f:ab:fd:bb:35:
da:e1:d4:75:a6:12:a8:e7:05:9b:9e:97:60:13:c8:
14:5c:08:18:ca:5a:16:c5:35:75:e8:f2:2b:0c:32:
fb:7f:75:42:1a:36:a1:c4:f9:de:c9:c6:43:73:fa:
6a:2a:aa:da:63:0d:b0:1f:c1:70:8f:7d:47:a0:aa:
8f:c0:b8:35:f8:f2:1e:32:4a:5f:0e:97:3d:f7:b0:
f3:45:b7:a3:cb:d1:ed:c5:a5:00:04:a7:21:d2:bb:
d0:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:8E:58:13:37:95:B1:40:1C:FE:B3:E8:E4:59:AC:94:F4:6C:00:01
X509v3 Authority Key Identifier:
keyid:6D:D1:DC:4D:2E:B7:BF:2A:3F:08:D5:45:75:54:77:05:51:43:F1:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bdHcTS63vyo_CNVFdVR3BVFD8XQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/bdHcTS63vyo_CNVFdVR3BVFD8XQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/bdHcTS63vyo_CNVFdVR3BVFD8XQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:25:38:fb:e0:81:0b:8c:2c:d0:9c:a6:5a:15:06:dd:ae:8c:
d9:30:ff:42:25:5a:6b:45:66:48:87:4f:d9:81:ad:fd:ff:ef:
22:fb:e1:cb:0c:40:72:79:10:67:49:aa:2d:9a:e4:1d:ec:3b:
7c:8e:c7:88:38:44:43:63:92:5f:5f:c7:37:55:51:48:b0:a5:
05:6b:75:bc:5d:84:ae:85:94:fb:79:e7:6d:24:20:de:16:b9:
ed:e7:a4:b2:af:46:93:81:34:df:46:99:ff:0b:a1:32:92:ac:
08:10:30:17:01:ff:d8:75:e4:65:af:30:fd:82:eb:1a:1b:25:
9d:a7:46:5e:4d:10:b8:8d:12:eb:a9:0d:16:0f:85:7f:3e:9c:
76:65:95:c8:c6:2c:06:7c:82:47:5a:18:fe:44:d8:21:12:8e:
07:27:56:f4:eb:f1:7c:00:49:b6:59:d7:27:76:69:8f:a4:2f:
c4:a4:7c:e4:bd:15:36:37:d7:dc:a2:da:84:51:1d:db:f5:d4:
a9:d6:9f:85:ac:20:2b:38:a3:27:e3:65:52:f8:4c:15:0d:77:
42:62:88:4c:4c:54:c5:cb:8b:eb:4a:eb:e1:34:83:9d:42:90:
ca:79:2c:2e:37:49:bc:28:cc:e0:67:ac:af:cb:25:e0:56:8e:
b8:c7:87:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 15:39:44 2025 by rpki-client