Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/7d03ea-8702-4b4c-a117-6b1c82ce716d/1/bkPVLPXHIWFmOKGrnD2J-pqX3G0.mft
File: bkPVLPXHIWFmOKGrnD2J-pqX3G0.mft (raw, json)
Hash identifier: 5Cik0K7SQz+VSOkNQlxPvxnl3xtqOJzc2vMtgxIAqAk=
Subject key identifier: 00:07:3A:6E:BA:8B:98:BB:F9:32:0A:B3:79:7F:5C:38:2B:95:3A:3A
Authority key identifier: 6E:43:D5:2C:F5:C7:21:61:66:38:A1:AB:9C:3D:89:FA:9A:97:DC:6D
Certificate issuer: /CN=6e43d52cf5c721616638a1ab9c3d89fa9a97dc6d
Certificate serial: 0198D73AE5C229D4C16D820649B934071895
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bkPVLPXHIWFmOKGrnD2J-pqX3G0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/7d03ea-8702-4b4c-a117-6b1c82ce716d/1/bkPVLPXHIWFmOKGrnD2J-pqX3G0.mft
Manifest number: 1650
Signing time: Sat 23 Aug 2025 14:00:17 +0000
Manifest this update: Sat 23 Aug 2025 14:00:17 +0000
Manifest next update: Sun 24 Aug 2025 14:00:17 +0000
Files and hashes: 1: bkPVLPXHIWFmOKGrnD2J-pqX3G0.crl (hash: Zb4sNIni+3JXDcaIZ2t0W5IelOubROIb278FzC2lBuQ=)
2: f0mlI3uPHkGxNxppJH1FzET7hkE.roa (hash: fzr3RtH6R3YRfxpidUV64dO9I/Erlus13YAGX+wIcwA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/7d03ea-8702-4b4c-a117-6b1c82ce716d/1/bkPVLPXHIWFmOKGrnD2J-pqX3G0.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/7d03ea-8702-4b4c-a117-6b1c82ce716d/1/bkPVLPXHIWFmOKGrnD2J-pqX3G0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bkPVLPXHIWFmOKGrnD2J-pqX3G0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:50:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3a:e5:c2:29:d4:c1:6d:82:06:49:b9:34:07:18:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e43d52cf5c721616638a1ab9c3d89fa9a97dc6d
Validity
Not Before: Aug 23 14:00:17 2025 GMT
Not After : Aug 24 14:00:17 2025 GMT
Subject: CN=00073a6eba8b98bbf9320ab3797f5c382b953a3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:d6:e1:ce:3e:d8:1b:86:e3:40:e7:52:a8:ce:
2e:6a:2c:16:37:a7:5b:15:85:4f:c4:1c:81:1f:43:
8c:59:10:b1:30:61:36:d9:6b:5a:45:98:d3:b2:2d:
25:8c:4a:19:20:e3:8c:c0:f0:ee:0f:d6:ee:87:0d:
ec:30:8e:cb:d3:11:73:87:00:3a:92:22:9b:4e:9d:
73:2a:16:e0:23:13:8c:0d:9a:ea:d4:a6:a3:78:09:
73:ed:0d:0d:55:45:2a:ac:c8:f7:ba:66:5e:7e:79:
29:85:45:88:52:96:94:e8:da:c7:6c:86:bb:d2:3d:
74:fd:e5:f1:f3:12:0f:98:4b:41:14:4c:46:a4:14:
d0:54:5e:17:77:ee:52:27:24:93:18:32:cf:2d:5f:
31:5a:a4:48:63:41:1d:23:44:98:9b:22:c5:e0:d6:
bc:c9:9e:f0:8d:3e:4d:37:a2:b3:db:d5:41:92:d5:
ad:99:95:02:5e:1b:10:c6:96:69:f9:6a:21:0c:f1:
72:8f:f3:d4:0e:d7:ac:23:1e:33:09:62:79:1b:25:
a2:f8:91:69:75:f5:cf:ec:02:7a:33:f5:10:92:c1:
a2:1e:2e:41:b1:f4:cc:e7:cc:0a:b8:9f:66:41:51:
2e:9d:f4:a1:77:1e:9e:05:13:3f:86:70:b6:28:0a:
7c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:07:3A:6E:BA:8B:98:BB:F9:32:0A:B3:79:7F:5C:38:2B:95:3A:3A
X509v3 Authority Key Identifier:
keyid:6E:43:D5:2C:F5:C7:21:61:66:38:A1:AB:9C:3D:89:FA:9A:97:DC:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bkPVLPXHIWFmOKGrnD2J-pqX3G0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7d03ea-8702-4b4c-a117-6b1c82ce716d/1/bkPVLPXHIWFmOKGrnD2J-pqX3G0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7d03ea-8702-4b4c-a117-6b1c82ce716d/1/bkPVLPXHIWFmOKGrnD2J-pqX3G0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:80:c2:91:16:b1:a3:8f:b3:3f:71:3b:19:d8:50:91:0f:43:
7a:ab:de:29:4d:e6:4a:d3:15:64:4f:cf:3c:c9:f4:2d:c9:2e:
1f:a0:d7:d2:95:9e:ee:84:94:0b:e4:fc:c9:31:db:af:13:32:
cb:64:48:70:8b:3c:32:e8:99:e0:62:ac:0d:65:e4:2f:b1:1f:
1b:46:16:6e:18:68:cb:66:be:4d:35:e2:74:10:0f:6c:81:f8:
51:eb:d9:17:41:3b:a2:46:f7:62:07:4e:4e:d1:6b:02:38:06:
52:2b:49:f3:47:cc:82:d4:b8:77:54:65:81:95:5c:e1:db:6c:
6c:6b:c1:c6:98:31:52:db:02:7e:2b:69:51:67:fe:d7:5d:f9:
ce:57:ba:b8:f5:b9:53:e5:1a:88:9f:50:0d:4b:2e:d0:fc:f0:
7b:69:35:cf:f6:83:ef:a7:ae:b8:03:19:5b:3f:19:cd:bd:d2:
07:ce:06:15:5a:29:98:87:4a:b3:29:bc:09:70:a0:ef:bf:98:
6a:07:84:90:6b:4c:59:71:ea:4a:78:eb:1d:1a:36:f6:91:93:
e0:c0:31:af:39:05:d0:8c:17:39:74:e5:5c:af:b1:39:d2:e3:
1c:46:b8:1a:69:21:84:86:5c:87:63:80:79:e1:5f:44:c4:26:
63:e2:b3:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:43:50 2025 by rpki-client