Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/45c53d-aba9-42f7-8496-7cce34fe6b5d/1/bQmekI59iHniTR7eCdgSz0at4sw.mft
File: bQmekI59iHniTR7eCdgSz0at4sw.mft (raw, json)
Hash identifier: SqFHAcD4pCce0KgJNt5HuBIQTwVlaCFkBuXgdvNf9io=
Subject key identifier: 44:8A:4B:CF:9E:9C:85:D4:F9:29:06:0D:40:AF:E2:3C:F9:54:6B:3E
Authority key identifier: 6D:09:9E:90:8E:7D:88:79:E2:4D:1E:DE:09:D8:12:CF:46:AD:E2:CC
Certificate issuer: /CN=6d099e908e7d8879e24d1ede09d812cf46ade2cc
Certificate serial: 0198D4E06AA58A2A875BED0D9FCCA318BC65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQmekI59iHniTR7eCdgSz0at4sw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/45c53d-aba9-42f7-8496-7cce34fe6b5d/1/bQmekI59iHniTR7eCdgSz0at4sw.mft
Manifest number: 0545
Signing time: Sat 23 Aug 2025 03:02:13 +0000
Manifest this update: Sat 23 Aug 2025 03:02:13 +0000
Manifest next update: Sun 24 Aug 2025 03:02:13 +0000
Files and hashes: 1: bQmekI59iHniTR7eCdgSz0at4sw.crl (hash: mDx2Ap0U2IZvt2q6B4H3sYua3H0CN7rbwxJRR5L3HzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/45c53d-aba9-42f7-8496-7cce34fe6b5d/1/bQmekI59iHniTR7eCdgSz0at4sw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/45c53d-aba9-42f7-8496-7cce34fe6b5d/1/bQmekI59iHniTR7eCdgSz0at4sw.mft
rsync://rpki.ripe.net/repository/DEFAULT/bQmekI59iHniTR7eCdgSz0at4sw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:6a:a5:8a:2a:87:5b:ed:0d:9f:cc:a3:18:bc:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d099e908e7d8879e24d1ede09d812cf46ade2cc
Validity
Not Before: Aug 23 03:02:13 2025 GMT
Not After : Aug 24 03:02:13 2025 GMT
Subject: CN=448a4bcf9e9c85d4f929060d40afe23cf9546b3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:d4:1c:82:5a:bd:95:79:b9:ca:4e:f8:93:dc:
bd:1c:88:0e:41:f5:cd:9e:93:45:0e:03:a1:19:ef:
d2:ca:33:36:d3:7e:6b:0d:6a:20:fc:ce:f5:f4:0f:
2a:92:76:30:b2:bd:29:f8:3e:2e:be:1e:53:e2:18:
b0:ce:ee:85:77:3c:0e:fe:1f:8c:f2:2d:76:14:61:
20:b7:ea:57:9f:5a:17:20:0b:64:c6:25:57:52:c9:
55:17:e8:54:35:72:a3:e2:83:db:80:89:55:b8:4d:
de:ad:e1:e7:eb:c7:b6:f1:de:80:27:38:08:24:59:
48:ec:bb:9b:ad:2e:42:c4:5e:7b:bd:87:7a:43:fe:
2f:13:dc:e8:aa:58:b7:ec:d7:29:d8:5a:69:41:f5:
da:9f:13:87:05:56:1a:f0:3c:67:3c:c6:98:d4:71:
77:75:42:d3:d8:1f:c3:ac:02:75:0e:d1:67:98:3c:
63:f6:32:21:c4:43:4d:66:1d:29:4e:78:63:62:0e:
b3:2a:ba:0c:c0:ea:a1:a5:ba:18:fd:c9:9d:42:c1:
4a:09:e2:ef:af:40:ae:3b:25:56:ea:55:a9:a1:91:
9d:bb:03:d9:58:ca:1a:d7:45:96:25:24:d0:f9:c7:
11:f7:24:58:98:48:d8:3a:d0:1b:ac:aa:fd:86:da:
5f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:8A:4B:CF:9E:9C:85:D4:F9:29:06:0D:40:AF:E2:3C:F9:54:6B:3E
X509v3 Authority Key Identifier:
keyid:6D:09:9E:90:8E:7D:88:79:E2:4D:1E:DE:09:D8:12:CF:46:AD:E2:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQmekI59iHniTR7eCdgSz0at4sw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/45c53d-aba9-42f7-8496-7cce34fe6b5d/1/bQmekI59iHniTR7eCdgSz0at4sw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/45c53d-aba9-42f7-8496-7cce34fe6b5d/1/bQmekI59iHniTR7eCdgSz0at4sw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:56:2c:6d:03:80:0b:e2:c9:b0:ae:ce:38:79:48:ba:29:9d:
78:4b:21:08:c1:28:dc:9c:c9:3d:f0:e5:c6:81:b4:ab:0f:23:
51:83:ed:89:29:98:16:46:db:af:6e:8a:bf:67:fd:71:4c:28:
85:59:29:cb:5b:ef:9a:0a:c8:df:6c:68:49:0e:16:c9:e4:89:
4d:33:6d:e1:72:71:57:3e:9c:71:90:1a:6a:3a:a1:39:bc:18:
74:5e:64:97:e5:7c:92:de:4a:4d:39:08:56:82:b1:9b:15:76:
6b:e6:e6:b4:30:5a:84:f1:fb:77:2b:d2:c7:04:ea:e1:d5:b1:
ae:44:50:ac:25:2f:13:4b:68:b2:7a:47:fe:34:30:cf:12:cf:
69:3d:64:da:52:1e:29:23:d8:83:b2:ae:2a:7e:f7:5f:17:db:
0a:a0:69:99:4e:6e:c0:b5:e0:2a:cf:14:cc:30:3c:10:da:04:
ba:95:3d:d7:cc:b0:51:60:e4:8b:2a:d0:13:0d:e9:e7:18:cb:
90:86:f2:ca:a0:63:3b:15:3d:da:53:3c:81:ea:a4:4b:50:b2:
f8:f3:a4:1a:41:82:ae:98:43:fd:0f:36:d7:af:9b:13:8f:c8:
16:ec:f9:33:87:3f:29:2c:7c:fc:32:f6:71:b5:b2:a0:c8:ba:
32:85:7a:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:39:56 2025 by rpki-client