Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.mft
File: rrwz1bpYUjTMzvilethsoer8SqI.mft (raw, json)
Hash identifier: kSG4k2EoIy0oe4FxFeyuFXDSK/WQc3AFRZ5h6cP6eyE=
Subject key identifier: BF:A0:F9:01:77:B0:FD:8E:08:10:7D:BC:7F:16:9C:AD:A8:85:F2:00
Authority key identifier: AE:BC:33:D5:BA:58:52:34:CC:CE:F8:A5:7A:D8:6C:A1:EA:FC:4A:A2
Certificate issuer: /CN=aebc33d5ba585234cccef8a57ad86ca1eafc4aa2
Certificate serial: 0198D473026D1771D6642CEB90DACB6A9C15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rrwz1bpYUjTMzvilethsoer8SqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.mft
Manifest number: 05F4
Signing time: Sat 23 Aug 2025 01:02:43 +0000
Manifest this update: Sat 23 Aug 2025 01:02:43 +0000
Manifest next update: Sun 24 Aug 2025 01:02:43 +0000
Files and hashes: 1: rrwz1bpYUjTMzvilethsoer8SqI.crl (hash: V2s0yFY9kNgH6JJIFzvmIHwoGy4B50MQiGLmSoj/ZuY=)
2: s8WA6XbVKkNfKDWyIPbKv2MkdEI.roa (hash: cSlX1MSZ3bjIwkd1nKlEU1sHjeRq7ybsweqaQYPJx58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rrwz1bpYUjTMzvilethsoer8SqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:02:6d:17:71:d6:64:2c:eb:90:da:cb:6a:9c:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aebc33d5ba585234cccef8a57ad86ca1eafc4aa2
Validity
Not Before: Aug 23 01:02:43 2025 GMT
Not After : Aug 24 01:02:43 2025 GMT
Subject: CN=bfa0f90177b0fd8e08107dbc7f169cada885f200
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e9:fe:b0:f8:86:4f:27:3b:93:1a:8f:60:4a:
da:17:e6:79:7b:1d:13:29:ac:50:55:45:a1:da:1e:
28:cc:6c:5e:95:64:b0:84:85:50:c1:af:31:b0:ce:
74:71:12:ff:ea:53:b1:b2:d0:87:75:c2:fa:78:9a:
ad:f2:b5:3c:10:c0:3b:04:b2:29:7b:97:b3:a0:f4:
2f:1c:ae:8e:e0:d2:3d:f5:bb:60:01:6b:3b:83:82:
e8:e3:20:02:27:4d:9e:04:9b:e6:dc:37:d5:f9:98:
d8:e9:11:1a:eb:12:49:83:2f:fe:4d:6e:bd:f2:90:
af:bb:c4:20:60:79:56:3d:e9:40:d9:7d:bb:b8:eb:
27:57:eb:b2:b1:80:18:5a:6e:47:3d:9a:b8:98:89:
02:ae:dd:ee:64:f5:ba:60:4e:18:26:fc:ad:e6:6c:
05:ec:80:5f:18:32:97:f9:c9:84:28:a7:ed:d4:a7:
55:45:b2:a5:c6:3f:15:17:ca:77:5f:c7:02:44:e4:
56:8e:ee:ec:e3:2c:27:6c:67:40:d4:66:ea:8c:e1:
43:06:55:14:37:44:d2:70:d1:87:e7:7f:a7:a4:aa:
cc:ea:46:b0:10:a7:96:df:8f:a3:6e:e2:37:d6:e5:
39:44:36:7f:52:45:1b:99:11:27:b4:25:1c:c2:1f:
b3:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:A0:F9:01:77:B0:FD:8E:08:10:7D:BC:7F:16:9C:AD:A8:85:F2:00
X509v3 Authority Key Identifier:
keyid:AE:BC:33:D5:BA:58:52:34:CC:CE:F8:A5:7A:D8:6C:A1:EA:FC:4A:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rrwz1bpYUjTMzvilethsoer8SqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/b67551-35e3-42f1-912b-96a5b5dad671/1/rrwz1bpYUjTMzvilethsoer8SqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:20:b7:18:0a:ee:9b:05:c4:1a:9f:a3:6b:bb:b6:d2:e5:a0:
ba:6a:47:28:dc:1d:b2:ad:79:d0:80:3d:08:50:83:d7:45:88:
00:74:69:51:83:5c:c7:62:de:6e:fb:59:e4:16:a7:b2:4c:30:
6c:cf:c7:4e:9a:6c:a2:2d:e2:91:31:a7:a7:0c:4e:df:01:11:
f5:62:03:0c:9b:f1:68:25:0d:50:66:9e:c9:18:07:b9:bb:5c:
5e:30:8b:f0:4f:a4:8b:3f:b4:1f:bf:f5:61:44:df:9c:f3:82:
22:97:09:ce:07:e4:fc:ce:08:1f:97:df:3e:d8:02:1f:00:78:
d1:54:e6:4f:d1:8e:62:ab:80:02:9d:84:4a:02:13:6d:07:74:
3d:1e:4c:96:87:fd:49:28:d9:9c:54:3b:8e:23:db:08:39:8c:
0b:65:4b:06:f8:0f:17:58:cd:a4:68:c1:07:f0:70:d6:df:4f:
52:c3:51:ee:73:02:17:49:45:25:25:cd:79:33:72:42:05:1c:
01:13:87:61:a8:b3:24:1b:d2:c8:b7:6f:9a:ad:14:62:61:79:
07:56:ec:2b:8b:af:0c:33:cb:dd:cb:71:2e:a3:b6:ee:2c:ab:
43:4b:86:58:49:b1:9a:00:e1:00:50:35:1e:55:cb:cb:02:f3:
73:73:8d:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:41:34 2025 by rpki-client