Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.mft
File: BW9-bE0T7qHlvZ-XIdyM-zac2_4.mft (raw, json)
Hash identifier: vCiLRcHjs36kbUa0vitJiDVan3J6UJfXk6rWI5s70l0=
Subject key identifier: C5:C6:1D:EC:9F:D0:04:8F:FB:6C:1E:87:54:7E:DB:B3:F1:31:B3:DF
Authority key identifier: 05:6F:7E:6C:4D:13:EE:A1:E5:BD:9F:97:21:DC:8C:FB:36:9C:DB:FE
Certificate issuer: /CN=056f7e6c4d13eea1e5bd9f9721dc8cfb369cdbfe
Certificate serial: 0198D7060641B9C0CCA8C786F7F9CAEC95ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BW9-bE0T7qHlvZ-XIdyM-zac2_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.mft
Manifest number: 164B
Signing time: Sat 23 Aug 2025 13:02:32 +0000
Manifest this update: Sat 23 Aug 2025 13:02:32 +0000
Manifest next update: Sun 24 Aug 2025 13:02:32 +0000
Files and hashes: 1: BW9-bE0T7qHlvZ-XIdyM-zac2_4.crl (hash: /IczBCQRd6JD7Pt254G3YLjpxdlrnyP1UV2n9NfINCs=)
2: ddJdWwJ-x_kxknxp8wqmg5-PURw.roa (hash: /8Ho4F9DZAAaxfNKmXvihlaELQ9Ew+7q5ew0DKDsGRY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BW9-bE0T7qHlvZ-XIdyM-zac2_4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 13:02:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:06:06:41:b9:c0:cc:a8:c7:86:f7:f9:ca:ec:95:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=056f7e6c4d13eea1e5bd9f9721dc8cfb369cdbfe
Validity
Not Before: Aug 23 13:02:32 2025 GMT
Not After : Aug 24 13:02:32 2025 GMT
Subject: CN=c5c61dec9fd0048ffb6c1e87547edbb3f131b3df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b1:70:ae:42:90:87:b4:18:70:29:ee:ec:41:
7b:8c:23:e2:42:43:7b:71:a4:15:2e:26:79:a5:8e:
d4:25:3a:40:32:64:ff:e9:26:37:f4:7b:f6:18:3b:
20:22:a9:9f:ac:69:40:c5:7c:64:72:42:4e:e1:02:
89:39:eb:13:80:ca:69:01:b5:70:a5:da:82:27:08:
0c:50:ed:9e:fa:c2:35:e3:1b:0c:16:da:95:86:4d:
d1:12:34:94:73:b7:75:f7:b3:44:4d:e4:f5:cd:41:
71:94:22:8f:05:af:17:be:6d:b5:59:d6:9a:d6:4a:
22:c9:d0:91:c1:dc:d1:42:9c:1a:dc:54:9f:5c:95:
8f:2a:09:e4:b2:a3:3b:b9:64:20:a5:2f:8e:f4:ea:
80:e4:63:50:f4:98:42:e0:d1:16:23:b4:6f:fc:c2:
f6:58:e2:c3:c4:79:6a:73:f5:07:ab:61:34:54:03:
99:d8:f1:51:b7:2c:85:84:43:da:dc:e4:2e:d0:73:
40:42:10:53:9e:eb:a6:c9:a4:c5:41:63:79:95:5f:
d6:38:3b:22:41:ee:56:bf:15:fa:ff:ba:5f:f8:7f:
c5:6a:6c:e4:de:f1:b7:37:12:61:de:62:07:ac:a2:
2e:71:1b:93:34:a6:c5:7c:2d:8f:f2:41:fb:03:7b:
44:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:C6:1D:EC:9F:D0:04:8F:FB:6C:1E:87:54:7E:DB:B3:F1:31:B3:DF
X509v3 Authority Key Identifier:
keyid:05:6F:7E:6C:4D:13:EE:A1:E5:BD:9F:97:21:DC:8C:FB:36:9C:DB:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BW9-bE0T7qHlvZ-XIdyM-zac2_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:62:4e:23:4d:61:85:f6:3e:07:1c:88:c4:7d:35:e7:73:0d:
13:96:0b:70:61:c9:c2:3f:7a:db:04:cd:38:95:8c:6e:9e:7d:
5e:86:74:38:cc:3b:a8:fd:b3:a3:03:b5:1b:04:28:1b:9c:3a:
df:2a:2e:45:2d:be:d6:8c:8b:f3:9c:03:f8:fa:08:b3:00:25:
0c:d1:57:64:b6:2d:01:d5:25:f5:e1:90:04:db:aa:cd:fb:fd:
e9:6c:b6:ed:cd:4f:2c:27:2b:1f:87:48:78:8c:3f:63:2e:d5:
99:21:ae:a3:c9:37:cd:cc:95:8b:93:d1:b1:bb:7e:e7:fe:eb:
84:b8:a0:44:8a:20:8a:d0:a9:22:1f:bb:bd:f1:4d:cc:85:e2:
94:f7:bf:7c:d3:e7:f2:48:ea:8c:10:ee:fe:eb:30:ae:ab:1e:
11:78:5a:5e:35:e2:74:0b:48:35:72:e2:6a:54:45:77:67:f3:
1d:55:6a:89:69:e7:a5:34:6b:59:00:06:37:b0:dc:6c:e9:92:
6b:b3:26:fa:14:21:4c:6a:df:56:70:73:7e:aa:36:8e:34:a0:
c8:53:e6:0f:4f:e0:39:cd:f7:e3:25:0d:d7:e1:3c:42:01:6d:
31:8e:fa:f2:9e:81:8e:33:9f:62:4c:e7:0a:a1:8f:ca:5c:96:
3b:df:9b:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:27:52 2025 by rpki-client