Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.mft
File: 1-BaGWSju7uXLyS9MTTiuXGAd7go.mft (raw, json)
Hash identifier: aCgYrh0olGIeFqt2lqEuUSp7XPIXx5sdm+U7ERO6vjM=
Subject key identifier: 19:78:0B:9C:9E:99:FB:A5:2B:FD:8F:87:D3:D3:DF:02:F3:7A:78:36
Authority key identifier: F8:16:86:59:28:EE:EE:E5:CB:C9:2F:4C:4D:38:AE:5C:60:1D:EE:0A
Certificate issuer: /CN=f816865928eeeee5cbc92f4c4d38ae5c601dee0a
Certificate serial: 0198D73AF1B508E9FEEBA648DC10E511015E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-BaGWSju7uXLyS9MTTiuXGAd7go.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.mft
Manifest number: 164A
Signing time: Sat 23 Aug 2025 14:00:20 +0000
Manifest this update: Sat 23 Aug 2025 14:00:20 +0000
Manifest next update: Sun 24 Aug 2025 14:00:20 +0000
Files and hashes: 1: 0rDYOCiVnQy1wBfGsCwgf4uCy6M.roa (hash: dtebcZBA/CIRFXc0hvNHRfZk/QfKnBn3jDoKUNxXxXo=)
2: 1-BaGWSju7uXLyS9MTTiuXGAd7go.crl (hash: PyNUmybCnAgdGJnUFTuCByCGrGXykBpkRFxEsMkvooI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-BaGWSju7uXLyS9MTTiuXGAd7go.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:3a:f1:b5:08:e9:fe:eb:a6:48:dc:10:e5:11:01:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f816865928eeeee5cbc92f4c4d38ae5c601dee0a
Validity
Not Before: Aug 23 14:00:20 2025 GMT
Not After : Aug 24 14:00:20 2025 GMT
Subject: CN=19780b9c9e99fba52bfd8f87d3d3df02f37a7836
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b2:26:fd:26:83:92:67:88:62:52:a7:d3:fa:
9a:d7:94:b1:be:20:1a:12:87:ef:26:27:08:8f:28:
5b:70:df:4e:33:43:a4:40:92:da:f8:d6:9a:5c:9b:
4b:d5:b3:8b:00:fe:50:3a:42:72:1e:38:58:a7:a1:
c4:34:31:85:f2:38:c7:f8:91:32:77:96:58:b0:fb:
18:6f:33:6d:a9:d6:0a:52:71:5f:6a:57:2d:ae:5d:
f0:91:b1:c5:97:03:c0:d5:0a:5c:cd:ea:22:40:9a:
2f:48:7e:a1:0e:11:7f:0d:66:6a:17:1c:48:42:d3:
9c:83:69:0f:9b:7d:61:ee:83:56:26:11:1f:51:39:
a0:40:6a:a2:dd:cb:09:55:34:38:37:eb:1a:f0:1a:
9f:4d:de:90:db:ab:63:80:58:1e:1c:67:8b:01:2b:
cb:c6:b3:a9:d5:26:d2:74:fd:54:bd:07:92:6e:30:
6b:b7:1f:7f:6c:be:66:e5:7b:9d:9f:f6:b2:ba:56:
9b:b3:82:dd:f0:eb:bf:cd:5b:16:c3:22:38:af:5b:
10:b5:7d:62:0d:ec:ef:5e:81:0a:b3:a6:c7:f1:a4:
99:9a:1d:c2:37:b1:64:d2:b7:7d:22:bc:eb:6b:8c:
00:bb:0f:6f:7a:5b:4f:9f:25:9e:25:15:86:aa:98:
fb:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:78:0B:9C:9E:99:FB:A5:2B:FD:8F:87:D3:D3:DF:02:F3:7A:78:36
X509v3 Authority Key Identifier:
keyid:F8:16:86:59:28:EE:EE:E5:CB:C9:2F:4C:4D:38:AE:5C:60:1D:EE:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-BaGWSju7uXLyS9MTTiuXGAd7go.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:bd:1e:63:7d:cf:fa:5b:5e:37:28:04:e1:ee:59:ee:04:af:
66:1c:1c:88:bd:82:67:f1:8d:88:70:d4:c9:dd:30:99:df:fe:
a7:f4:d6:61:d3:97:1f:91:e4:4b:44:33:26:8a:56:a9:13:1c:
a4:b3:3a:6d:ca:55:a9:14:4d:5f:57:6b:c4:59:a5:fd:bf:a2:
c7:39:92:63:6f:5c:ee:1d:c6:ff:66:52:91:03:19:ee:34:f1:
29:88:c4:bb:51:73:4d:d5:a7:12:c7:f6:59:c4:e6:50:0c:78:
34:6a:66:76:bb:8b:a9:36:47:e7:00:c3:aa:e0:9d:5d:9c:e6:
7c:2e:72:6d:51:87:a1:58:51:09:6a:24:98:4a:6d:41:07:67:
f9:01:26:5c:fb:5b:28:76:fd:f0:ce:22:72:21:a8:92:b0:43:
e6:e6:51:f3:78:41:c7:49:e4:dd:f2:73:38:4e:91:72:64:72:
82:dd:89:d5:b4:70:58:cd:5d:26:01:f7:b8:a2:e3:f0:e9:aa:
39:0d:1c:15:82:d1:9c:f2:8b:c6:b6:5e:9c:9e:fd:bd:f0:f3:
83:e8:12:cb:58:98:d7:e9:85:b7:f4:44:80:83:d0:2e:4e:9d:
3d:6b:46:48:c1:b5:5c:3f:77:07:d8:14:f0:de:5d:dc:45:ca:
23:fa:bb:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:04:15 2025 by rpki-client