Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/06803f-dd2e-4fd1-9a7f-bbf826aa67c0/1/bnED-oWs7FfEZIWRzD5Bzff-45c.mft
File: bnED-oWs7FfEZIWRzD5Bzff-45c.mft (raw, json)
Hash identifier: TcbOqTFFemeDffUtwZfOm1EdkhIBpq7NhGVpXbFdHNo=
Subject key identifier: 37:F1:45:8B:6C:B8:28:CE:94:C2:04:DF:19:45:56:78:38:7C:75:AB
Authority key identifier: 6E:71:03:FA:85:AC:EC:57:C4:64:85:91:CC:3E:41:CD:F7:FE:E3:97
Certificate issuer: /CN=6e7103fa85acec57c4648591cc3e41cdf7fee397
Certificate serial: 0198D5F18DC9459A74E8CDC34B3AB1B48163
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bnED-oWs7FfEZIWRzD5Bzff-45c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/06803f-dd2e-4fd1-9a7f-bbf826aa67c0/1/bnED-oWs7FfEZIWRzD5Bzff-45c.mft
Manifest number: 0DFE
Signing time: Sat 23 Aug 2025 08:00:34 +0000
Manifest this update: Sat 23 Aug 2025 08:00:34 +0000
Manifest next update: Sun 24 Aug 2025 08:00:34 +0000
Files and hashes: 1: Q75VcKpJN1_xp-QM_NM8W4Tp-04.roa (hash: Wt2+g51E+wWSkSdRcanf7BFfmX/qewZOJ77oXxIMQTM=)
2: bnED-oWs7FfEZIWRzD5Bzff-45c.crl (hash: fxvr/yV6LNQHz93UD6qE/2ewNqYIu2f3jRa4DjFfBNU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/06803f-dd2e-4fd1-9a7f-bbf826aa67c0/1/bnED-oWs7FfEZIWRzD5Bzff-45c.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/06803f-dd2e-4fd1-9a7f-bbf826aa67c0/1/bnED-oWs7FfEZIWRzD5Bzff-45c.mft
rsync://rpki.ripe.net/repository/DEFAULT/bnED-oWs7FfEZIWRzD5Bzff-45c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:8d:c9:45:9a:74:e8:cd:c3:4b:3a:b1:b4:81:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e7103fa85acec57c4648591cc3e41cdf7fee397
Validity
Not Before: Aug 23 08:00:34 2025 GMT
Not After : Aug 24 08:00:34 2025 GMT
Subject: CN=37f1458b6cb828ce94c204df19455678387c75ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:29:4c:37:53:04:21:0a:58:cb:52:d5:0e:cb:
e9:23:4d:c6:20:7d:e8:4e:43:ad:0a:88:f5:74:d4:
5a:aa:c2:f7:c7:c9:83:97:94:2d:c0:42:5f:dd:84:
41:da:28:ac:68:50:10:c3:48:11:c6:64:4a:1d:c0:
66:a2:09:79:e6:fd:aa:36:8d:e7:e6:20:0a:86:e0:
47:e8:a8:46:3a:d5:3e:4e:2b:33:43:e8:1f:d8:49:
02:3d:53:e4:46:90:a5:3b:a8:83:cd:b2:2a:a9:34:
8f:a3:76:b5:5b:ad:89:c3:9f:a6:48:96:40:75:df:
42:3d:39:91:b0:22:ec:4f:10:ca:a3:94:d1:8e:25:
b2:94:92:c5:d6:c2:80:b7:f2:2b:10:f7:86:f1:2e:
39:f1:9a:e6:7e:06:fc:56:58:17:a6:87:19:3c:cf:
4b:1a:5d:b4:22:77:1f:0c:60:a8:11:46:8f:09:ba:
21:bf:de:70:6c:49:12:8f:6a:10:0b:1a:88:d0:fe:
60:2e:41:bf:ce:ee:1f:e7:70:6c:09:20:d9:1f:52:
72:55:57:57:76:0f:cb:cf:73:28:e5:43:97:1f:1b:
bc:28:ab:eb:53:83:ab:89:d4:a1:bd:8e:eb:1e:03:
07:07:f9:2b:bb:58:69:a4:0f:cd:cc:12:cd:53:9a:
e5:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:F1:45:8B:6C:B8:28:CE:94:C2:04:DF:19:45:56:78:38:7C:75:AB
X509v3 Authority Key Identifier:
keyid:6E:71:03:FA:85:AC:EC:57:C4:64:85:91:CC:3E:41:CD:F7:FE:E3:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bnED-oWs7FfEZIWRzD5Bzff-45c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/06803f-dd2e-4fd1-9a7f-bbf826aa67c0/1/bnED-oWs7FfEZIWRzD5Bzff-45c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/06803f-dd2e-4fd1-9a7f-bbf826aa67c0/1/bnED-oWs7FfEZIWRzD5Bzff-45c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c9:29:5c:e6:b3:8c:64:68:4f:69:10:f9:dc:a2:03:05:9c:ea:
b9:47:b7:a4:b9:00:01:1b:9c:4d:46:28:a7:ba:b7:5e:73:e1:
ed:b3:f9:61:a5:c3:d1:ac:54:c0:ec:56:45:1e:44:a4:1c:79:
e1:86:5d:2d:53:ca:88:0c:2e:4a:91:2e:78:01:56:d6:dc:18:
96:0b:31:e6:21:ec:24:ae:24:3b:96:c4:f6:28:14:ce:0c:5b:
11:33:d4:19:0f:9e:79:2b:ed:0a:b2:21:1b:e0:04:27:a5:6e:
59:6b:93:3b:34:c8:16:ad:ab:43:2c:45:26:d8:1c:5c:ed:3d:
0e:7d:ae:20:3b:37:aa:3a:9c:12:fb:3a:fd:58:96:c2:cd:2c:
46:ae:7d:38:5e:b6:f3:62:5b:ef:61:22:ae:22:30:91:54:98:
c7:70:25:ca:af:ef:ea:07:a9:5e:35:cc:0c:c5:1e:81:07:b1:
8b:90:3b:b7:1c:16:eb:df:51:44:e8:7c:bf:93:32:7c:06:f5:
ff:48:73:b7:74:09:6a:0a:6f:ab:d8:72:00:aa:ec:89:5c:9f:
70:8b:3e:6f:f4:b2:2a:d8:e9:46:73:a0:65:32:38:1d:00:16:
cf:11:58:a7:79:90:0d:c5:b6:81:a8:5b:3b:d5:72:c4:ab:e1:
84:dd:db:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:38:38 2025 by rpki-client