Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.mft
File: bFN3u52kHKoRdvQyJi3KqZxHb5o.mft (raw, json)
Hash identifier: kkUWF8Tg2Joj1zmhFtlYf30bQAxwholdoZhEmIZFDFM=
Subject key identifier: AC:70:34:3C:8A:67:91:50:08:49:1D:DA:44:AB:50:1B:B3:83:28:9B
Authority key identifier: 6C:53:77:BB:9D:A4:1C:AA:11:76:F4:32:26:2D:CA:A9:9C:47:6F:9A
Certificate issuer: /CN=6c5377bb9da41caa1176f432262dcaa99c476f9a
Certificate serial: 0198D6CDA53984E4FCA76253C21B2C1567E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bFN3u52kHKoRdvQyJi3KqZxHb5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.mft
Manifest number: 07B8
Signing time: Sat 23 Aug 2025 12:00:58 +0000
Manifest this update: Sat 23 Aug 2025 12:00:58 +0000
Manifest next update: Sun 24 Aug 2025 12:00:58 +0000
Files and hashes: 1: 02ZPMrkxrv9TSRNG7JSudAlDYd8.roa (hash: 1pjHbb+bmeJiA9CJ5xGCBjxXea42uVA7wH4sLUyonyA=)
2: 3L6JAHHrLKqNS5i1HV40c9xyyEM.roa (hash: qyyZT9D9IGcDrviVnxZxLdBd6LOM1Me+aqwZJ6D1tPM=)
3: bFN3u52kHKoRdvQyJi3KqZxHb5o.crl (hash: 7u6i2QomGhkGSmMZwlbzvJIduUTNnjAwvryQ/mlEOZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/bFN3u52kHKoRdvQyJi3KqZxHb5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:a5:39:84:e4:fc:a7:62:53:c2:1b:2c:15:67:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c5377bb9da41caa1176f432262dcaa99c476f9a
Validity
Not Before: Aug 23 12:00:58 2025 GMT
Not After : Aug 24 12:00:58 2025 GMT
Subject: CN=ac70343c8a67915008491dda44ab501bb383289b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:30:89:41:01:ab:47:a2:51:e2:1e:4a:e8:b9:
f8:1f:c9:f0:84:96:9a:12:30:21:dd:d9:de:a3:34:
c7:6b:49:1f:9a:c8:d4:f5:8a:b0:d7:a2:7b:87:90:
57:d6:02:66:71:50:1c:39:7f:f5:0e:a2:24:10:43:
e9:6a:46:a3:99:ac:f8:b5:27:7a:50:d8:ca:f4:e2:
01:51:92:af:eb:a5:f7:ae:82:57:e4:db:ec:13:30:
13:31:aa:2d:f4:99:d2:e5:ab:15:19:54:3a:91:ad:
0b:57:fe:a8:93:46:ae:09:90:37:1e:c5:51:8b:85:
8e:bf:83:49:c2:75:e3:92:f5:9f:27:fb:3b:d2:93:
b6:2a:56:c7:c0:d4:9e:c0:fe:a2:76:12:f6:58:34:
3b:7f:c2:e3:8b:dc:7e:28:25:42:1b:2d:85:9a:e9:
a6:e0:d2:88:33:a5:c8:7b:1c:e4:03:9d:cd:18:1e:
d8:56:20:87:b0:a9:24:97:dd:39:12:54:a0:d7:9b:
51:21:8e:29:50:90:0b:02:c5:02:af:d9:ca:64:24:
6d:b5:69:44:58:13:2e:a5:07:07:c8:0e:9d:d8:80:
92:dd:fd:52:15:3b:c6:4a:a1:2c:db:34:00:ee:a7:
34:27:cc:7b:90:0f:cd:d7:bb:23:b4:bb:4f:cc:48:
db:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:70:34:3C:8A:67:91:50:08:49:1D:DA:44:AB:50:1B:B3:83:28:9B
X509v3 Authority Key Identifier:
keyid:6C:53:77:BB:9D:A4:1C:AA:11:76:F4:32:26:2D:CA:A9:9C:47:6F:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bFN3u52kHKoRdvQyJi3KqZxHb5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:df:50:c7:d6:88:26:dc:ad:07:b4:79:6d:ab:a2:96:2b:39:
62:2c:f4:92:42:98:71:31:b9:32:6f:92:8d:97:9a:6f:60:f2:
7c:d1:e3:8a:f1:12:19:4f:5d:15:fd:f2:a3:c7:df:f1:e0:75:
ef:12:97:db:f1:55:e4:a1:9b:e6:10:2c:6f:e9:ea:b4:8d:b7:
06:06:9c:bd:81:62:fb:1e:03:a4:86:78:de:6e:54:88:e3:47:
f5:c9:8b:9d:51:47:b0:d3:ba:ab:b9:d0:15:95:ff:f8:d3:09:
a2:55:81:fe:8e:33:0c:81:12:a8:f8:93:f7:eb:5e:c7:e6:b5:
f5:97:aa:18:63:2a:be:90:60:dd:d1:1b:31:49:c1:6a:5e:a6:
29:40:2f:31:b7:c0:cb:d8:79:32:c1:a1:8e:c6:59:42:6c:97:
21:19:1f:85:0f:32:ad:c6:49:b4:0d:60:d7:a7:c9:83:39:29:
de:1d:50:83:3d:c6:ac:a2:8e:c5:6e:ae:e2:b1:9a:d2:90:d6:
6e:11:3a:f5:2b:b5:3a:15:a7:de:67:4d:f4:9b:d3:35:48:17:
a5:df:19:22:a0:b9:b3:cc:73:4a:bd:1a:d0:ac:4f:a2:bd:64:
f7:74:6a:5c:d3:5c:bf:82:61:6c:11:1b:d7:33:86:7d:43:83:
5c:92:62:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 19:48:24 2025 by rpki-client