Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/822dc4-78e8-4801-b734-f1e55f537c87/1/b9qzLf1uW8aZ57826Bgpjcf7skY.mft
File: b9qzLf1uW8aZ57826Bgpjcf7skY.mft (raw, json)
Hash identifier: DzMd1lRVelxn4LifhARe/TGBBv2sJ2dBnOS6YIgILiM=
Subject key identifier: 74:4B:C8:6E:E8:EB:42:C5:24:E9:13:26:BB:FD:CF:B3:76:8D:07:88
Authority key identifier: 6F:DA:B3:2D:FD:6E:5B:C6:99:E7:BF:36:E8:18:29:8D:C7:FB:B2:46
Certificate issuer: /CN=6fdab32dfd6e5bc699e7bf36e818298dc7fbb246
Certificate serial: 0198D92B7BBCB0F05A8E74AFB7B9D79F55C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b9qzLf1uW8aZ57826Bgpjcf7skY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/822dc4-78e8-4801-b734-f1e55f537c87/1/b9qzLf1uW8aZ57826Bgpjcf7skY.mft
Manifest number: 06BE
Signing time: Sat 23 Aug 2025 23:02:42 +0000
Manifest this update: Sat 23 Aug 2025 23:02:42 +0000
Manifest next update: Sun 24 Aug 2025 23:02:42 +0000
Files and hashes: 1: b9qzLf1uW8aZ57826Bgpjcf7skY.crl (hash: /6SrN4Yg4XGbt/O5EddnomHTX12pqYc5Ri9K/LF4/xM=)
2: jDb6CVt7LMESu9TedWHpv82vXzQ.roa (hash: zvLg2bIhHSdnpMeV4b2spjUGOYu0nN5hkdLuTlMfXXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/822dc4-78e8-4801-b734-f1e55f537c87/1/b9qzLf1uW8aZ57826Bgpjcf7skY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/822dc4-78e8-4801-b734-f1e55f537c87/1/b9qzLf1uW8aZ57826Bgpjcf7skY.mft
rsync://rpki.ripe.net/repository/DEFAULT/b9qzLf1uW8aZ57826Bgpjcf7skY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 17:19:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d9:2b:7b:bc:b0:f0:5a:8e:74:af:b7:b9:d7:9f:55:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fdab32dfd6e5bc699e7bf36e818298dc7fbb246
Validity
Not Before: Aug 23 23:02:42 2025 GMT
Not After : Aug 24 23:02:42 2025 GMT
Subject: CN=744bc86ee8eb42c524e91326bbfdcfb3768d0788
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:84:de:8a:16:f5:c8:17:0f:ef:d5:cb:95:ad:
83:ce:77:0b:a8:ec:9c:10:ff:86:32:16:2b:94:a3:
2c:da:e5:40:53:5f:9c:86:bc:b2:d4:92:dd:08:af:
f8:26:af:31:07:cc:fa:7a:eb:c8:30:ff:d2:75:b8:
8b:58:d1:2f:57:07:2a:e2:cc:c6:94:83:ef:b3:61:
30:a7:7f:10:fb:cc:ba:03:09:77:f0:67:fa:1e:6b:
e2:37:2b:a0:27:88:82:2b:37:a4:28:43:eb:33:fb:
a3:f3:c8:b7:46:10:ae:d6:8f:95:a7:3b:ee:53:73:
06:61:40:df:a9:1e:61:83:85:c9:4d:9f:5c:14:68:
82:bb:f9:e9:83:ce:f3:b3:9f:d6:28:da:24:a8:2d:
f7:ee:e8:70:59:ff:b5:b3:30:a2:e6:2f:25:ae:13:
9f:23:0f:bb:4f:be:b7:20:b5:41:a5:76:b7:05:e6:
d9:60:4c:8a:d6:74:89:00:cd:c6:ff:b3:bc:93:6d:
c4:9f:c0:51:42:c7:be:30:dd:b7:7f:05:e1:f4:f5:
ee:73:81:18:37:14:22:01:01:11:3d:d7:ed:a4:22:
95:21:cd:2a:bf:37:9a:8f:12:61:91:02:90:b0:8e:
ca:a1:70:95:c1:df:58:3c:5c:37:85:a3:65:7f:f8:
26:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:4B:C8:6E:E8:EB:42:C5:24:E9:13:26:BB:FD:CF:B3:76:8D:07:88
X509v3 Authority Key Identifier:
keyid:6F:DA:B3:2D:FD:6E:5B:C6:99:E7:BF:36:E8:18:29:8D:C7:FB:B2:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9qzLf1uW8aZ57826Bgpjcf7skY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/822dc4-78e8-4801-b734-f1e55f537c87/1/b9qzLf1uW8aZ57826Bgpjcf7skY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/822dc4-78e8-4801-b734-f1e55f537c87/1/b9qzLf1uW8aZ57826Bgpjcf7skY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:29:3b:7b:ed:63:e2:56:be:ec:b6:7d:6a:6c:6b:08:3c:20:
e7:db:8a:ca:ce:e3:1c:05:f3:d0:b7:61:46:02:a8:e3:af:fb:
e5:9c:83:52:e5:2f:54:91:17:a2:b4:e8:e7:ab:23:97:80:ed:
ad:b0:f0:ba:fe:90:69:b2:9c:be:fb:29:49:58:0b:cf:cc:e8:
07:0d:86:91:67:2b:16:04:eb:71:62:07:b4:8f:4d:00:f6:2a:
96:38:8a:4d:2d:a9:03:2c:b4:2c:85:cb:55:bf:80:d2:29:a2:
13:75:3e:4e:e0:10:b4:57:a8:4b:78:af:23:65:e1:18:4f:03:
74:ce:05:5e:69:db:c6:1e:e2:03:76:fa:2c:30:3e:6f:c0:20:
a1:e7:c9:9a:46:81:4e:34:4a:0c:2f:c0:5f:ef:95:f6:39:c8:
ab:d4:ea:3e:85:54:e5:57:35:86:a8:62:46:1c:bf:61:0c:ff:
58:6d:1d:39:8c:ca:32:84:5e:82:d2:89:04:0c:a5:bc:f1:30:
09:b1:a2:1e:10:5c:8b:24:5f:14:0d:ad:95:96:33:5a:ef:7d:
a8:d4:49:e5:4c:ef:a7:fe:3a:39:6b:6a:07:63:df:c3:22:30:
b3:22:ca:88:ab:b9:3f:e2:fa:b3:84:fd:97:f3:ef:d5:c2:f0:
b5:31:88:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 02:31:54 2025 by rpki-client