Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/29cb2e-4680-4a36-b0a5-985182001e92/1/Bn3PV3ZU3KF6YQua9PLKdCHcu4E.mft
File: Bn3PV3ZU3KF6YQua9PLKdCHcu4E.mft (raw, json)
Hash identifier: gMofu3BMkvA5V5wPlIl2XJYnTNaEDl51oPO/7V3jGoI=
Subject key identifier: CB:1B:46:59:AA:DA:9D:01:44:EA:DC:7B:71:71:6E:A1:41:E5:58:44
Authority key identifier: 06:7D:CF:57:76:54:DC:A1:7A:61:0B:9A:F4:F2:CA:74:21:DC:BB:81
Certificate issuer: /CN=067dcf577654dca17a610b9af4f2ca7421dcbb81
Certificate serial: 0198D5F1C47EB3E10A1520FA3AABE4A67AFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bn3PV3ZU3KF6YQua9PLKdCHcu4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/29cb2e-4680-4a36-b0a5-985182001e92/1/Bn3PV3ZU3KF6YQua9PLKdCHcu4E.mft
Manifest number: 11D8
Signing time: Sat 23 Aug 2025 08:00:48 +0000
Manifest this update: Sat 23 Aug 2025 08:00:48 +0000
Manifest next update: Sun 24 Aug 2025 08:00:48 +0000
Files and hashes: 1: 1GqtXlpLHOQrMWA32pTa86lAWYQ.roa (hash: tnU3CSzBIjcvcUTrt2DgQBxjNJjtnLH3C2y91tIJFC8=)
2: Bn3PV3ZU3KF6YQua9PLKdCHcu4E.crl (hash: a9BbTi8TypaXzBQFyD+BjZOG4t2GH5banNh8vJ/LPYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/29cb2e-4680-4a36-b0a5-985182001e92/1/Bn3PV3ZU3KF6YQua9PLKdCHcu4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/29cb2e-4680-4a36-b0a5-985182001e92/1/Bn3PV3ZU3KF6YQua9PLKdCHcu4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bn3PV3ZU3KF6YQua9PLKdCHcu4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 08:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:f1:c4:7e:b3:e1:0a:15:20:fa:3a:ab:e4:a6:7a:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=067dcf577654dca17a610b9af4f2ca7421dcbb81
Validity
Not Before: Aug 23 08:00:48 2025 GMT
Not After : Aug 24 08:00:48 2025 GMT
Subject: CN=cb1b4659aada9d0144eadc7b71716ea141e55844
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:3d:8a:88:58:66:f1:da:f2:bb:79:02:11:9a:
5c:70:66:da:6d:62:14:23:82:76:70:81:5a:9a:8d:
0c:de:ba:2e:83:ad:c4:d2:3a:bd:65:63:e1:c6:b4:
11:6e:96:e1:5e:76:92:1e:55:94:11:94:e2:1c:ca:
ef:85:ae:f5:e1:3d:c8:92:cd:08:7e:c8:76:37:3b:
f6:a4:a1:eb:56:ed:29:76:44:05:0a:d8:10:39:bd:
fb:0d:07:50:8e:3e:76:20:ca:4d:cc:8e:90:63:d2:
44:87:2c:f7:d1:e1:f8:f6:7c:67:8b:b8:21:54:24:
7b:ee:8b:a1:6e:de:02:18:28:66:57:70:85:8d:e4:
c0:93:7a:59:c1:ac:1d:85:54:aa:e3:83:7b:81:36:
4b:8b:c1:04:c2:d6:2a:30:33:ed:5b:b8:3d:b7:f2:
63:47:fd:0c:ca:ed:43:fe:f1:5f:20:4d:1d:29:00:
f3:4c:19:8f:04:ba:7f:28:26:92:13:5d:3d:c0:77:
ad:ae:d0:8e:8c:c6:4d:29:61:67:a1:45:7b:d8:c4:
ac:ed:04:b9:07:44:57:89:a7:dc:0e:2f:fe:16:3f:
fe:49:52:b4:7c:6f:1b:4c:50:1a:1d:87:9f:8f:7a:
0b:df:b6:3e:8e:52:43:f0:c3:ed:fb:91:b3:2a:28:
99:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:1B:46:59:AA:DA:9D:01:44:EA:DC:7B:71:71:6E:A1:41:E5:58:44
X509v3 Authority Key Identifier:
keyid:06:7D:CF:57:76:54:DC:A1:7A:61:0B:9A:F4:F2:CA:74:21:DC:BB:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bn3PV3ZU3KF6YQua9PLKdCHcu4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/29cb2e-4680-4a36-b0a5-985182001e92/1/Bn3PV3ZU3KF6YQua9PLKdCHcu4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/29cb2e-4680-4a36-b0a5-985182001e92/1/Bn3PV3ZU3KF6YQua9PLKdCHcu4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:d0:f7:81:ae:cc:b9:ce:fb:4c:83:1c:cc:e3:50:3d:02:a8:
68:62:fd:5e:1e:2d:ee:b7:35:6d:32:96:e1:bd:2e:fd:b5:a7:
60:8a:47:cc:cb:96:04:1f:ef:a1:bd:43:9f:8e:b8:a3:29:e2:
60:c9:d5:fe:e4:14:9d:46:9d:48:86:6d:fe:c4:34:7b:d7:45:
4e:21:16:61:82:1a:6f:b5:4d:1c:9f:7f:f1:9e:76:d2:04:aa:
78:3a:80:90:88:0c:6b:b3:05:a7:2c:60:81:0a:ca:43:78:a9:
12:27:ac:22:53:39:32:df:fc:ac:24:b9:35:7f:f7:bc:8e:da:
8c:ad:67:ff:d1:81:21:b5:86:07:2d:84:5b:48:6b:0b:da:35:
fb:c5:81:2c:eb:25:9f:1a:02:6f:6c:88:17:f9:ab:03:da:1b:
78:61:04:59:67:f0:1c:42:d1:44:cd:57:2f:0d:49:a5:12:60:
6e:ba:7f:5b:a9:14:d4:18:22:27:20:f3:2e:72:0d:32:a2:23:
ed:69:3a:a7:ac:f5:25:b1:90:c6:08:dc:e6:21:74:7e:36:ae:
30:81:75:9d:17:6b:82:10:ce:46:05:3a:78:4a:bd:3b:bd:d5:
e0:d9:cc:c7:95:d8:0c:e1:59:c8:31:fe:a4:f7:0a:f5:25:bf:
4d:ea:58:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 18:15:05 2025 by rpki-client