Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/c7bf4a-da97-4b5b-8719-37b3e244c063/1/b1frSRlt0uBgbVl3wrdLEBt5vAs.mft
File: b1frSRlt0uBgbVl3wrdLEBt5vAs.mft (raw, json)
Hash identifier: fu3HSqI2UTBtr/qv0OL1njv06hRa/5TavZPEL4oVHgs=
Subject key identifier: D0:92:7C:5D:78:3B:4C:02:93:42:8B:1F:16:E9:9C:CF:41:00:DC:6E
Authority key identifier: 6F:57:EB:49:19:6D:D2:E0:60:6D:59:77:C2:B7:4B:10:1B:79:BC:0B
Certificate issuer: /CN=6f57eb49196dd2e0606d5977c2b74b101b79bc0b
Certificate serial: 019844E3D6A858C021DCABA4902FB0297164
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b1frSRlt0uBgbVl3wrdLEBt5vAs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/c7bf4a-da97-4b5b-8719-37b3e244c063/1/b1frSRlt0uBgbVl3wrdLEBt5vAs.mft
Manifest number: 088E
Signing time: Sat 26 Jul 2025 04:00:38 +0000
Manifest this update: Sat 26 Jul 2025 04:00:38 +0000
Manifest next update: Sun 27 Jul 2025 04:00:38 +0000
Files and hashes: 1: b1frSRlt0uBgbVl3wrdLEBt5vAs.crl (hash: /v7+m5Y800lX84vuyRrPu2DHfVnHQLVccHVcgiyRwoc=)
2: qPQvBbAxayZH2DtXKePm47b3aIg.roa (hash: +EzjnlPCeBdtqBhNoYoGX7VYz3jpTXt4JQidHMxpNYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/c7bf4a-da97-4b5b-8719-37b3e244c063/1/b1frSRlt0uBgbVl3wrdLEBt5vAs.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/c7bf4a-da97-4b5b-8719-37b3e244c063/1/b1frSRlt0uBgbVl3wrdLEBt5vAs.mft
rsync://rpki.ripe.net/repository/DEFAULT/b1frSRlt0uBgbVl3wrdLEBt5vAs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:e3:d6:a8:58:c0:21:dc:ab:a4:90:2f:b0:29:71:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f57eb49196dd2e0606d5977c2b74b101b79bc0b
Validity
Not Before: Jul 26 04:00:38 2025 GMT
Not After : Jul 27 04:00:38 2025 GMT
Subject: CN=d0927c5d783b4c0293428b1f16e99ccf4100dc6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:5e:50:6a:f0:fe:7e:30:3a:36:0b:5f:75:c3:
4b:a6:c2:f8:03:e0:71:18:e0:4d:07:b8:07:a1:4d:
d9:c7:6b:bd:f5:2e:2a:15:73:65:35:2b:1d:d4:8a:
08:38:b1:98:98:ae:84:36:8d:d7:f9:36:3d:c7:66:
8c:79:70:64:86:08:f8:30:5f:31:68:a5:90:6d:1b:
c9:0d:ef:c1:2a:dc:e2:5f:72:99:c5:92:b0:78:14:
13:45:db:f9:da:b0:6e:6f:7c:14:dd:d4:41:e2:bf:
f5:0a:1e:8c:96:d1:f3:fc:99:1a:2b:23:0c:ee:75:
25:b2:42:19:89:7c:7e:b8:ef:6c:63:dd:5a:98:12:
f1:df:fc:38:0a:03:7a:c0:da:88:5b:ec:05:33:03:
69:b1:7c:2e:2b:41:25:83:8e:b6:a9:bc:c6:ca:8c:
d8:c5:69:90:95:3b:d7:90:43:1a:96:db:9e:22:42:
fc:5e:29:f4:5c:1f:a5:29:4d:43:47:df:64:5f:d8:
10:7e:25:27:f2:7b:c7:17:3a:80:20:09:97:81:d2:
82:ce:14:76:84:4d:3e:de:eb:28:87:85:60:97:84:
87:00:69:0f:8e:b8:80:69:6f:14:86:f4:c4:4d:9c:
ec:c8:70:0c:b8:c5:56:cf:0e:b4:99:2f:20:32:51:
a3:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:92:7C:5D:78:3B:4C:02:93:42:8B:1F:16:E9:9C:CF:41:00:DC:6E
X509v3 Authority Key Identifier:
keyid:6F:57:EB:49:19:6D:D2:E0:60:6D:59:77:C2:B7:4B:10:1B:79:BC:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1frSRlt0uBgbVl3wrdLEBt5vAs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/c7bf4a-da97-4b5b-8719-37b3e244c063/1/b1frSRlt0uBgbVl3wrdLEBt5vAs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/c7bf4a-da97-4b5b-8719-37b3e244c063/1/b1frSRlt0uBgbVl3wrdLEBt5vAs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:5c:f5:e1:43:3e:b1:b1:7d:ad:1b:08:07:5e:fc:0f:77:ea:
97:6a:12:da:e7:28:fa:b8:68:45:15:b9:12:70:d0:9d:19:c6:
84:d8:4e:bb:b2:6d:a4:c3:c7:18:ed:8a:d1:96:09:ce:89:5e:
ff:1b:49:56:2e:63:05:77:19:4e:d0:1e:81:12:50:8b:0d:eb:
24:1f:4f:9e:b0:b5:ef:39:26:db:7d:3f:c6:e0:c4:9b:b7:d5:
bc:f2:dc:53:25:9d:ca:37:d9:4c:1b:3d:15:7f:f1:80:14:d7:
be:cc:0c:1e:fc:8c:ba:ff:60:be:e5:b8:05:cb:47:bb:0e:d3:
9a:87:b5:60:c4:d4:41:cf:20:ff:09:83:52:21:7d:89:24:aa:
89:b4:e2:ac:31:38:68:56:ff:4e:24:83:6b:05:6e:c7:4a:a7:
e7:32:0a:d6:7a:22:b1:f2:d8:2c:7d:28:cc:e4:a4:9f:6a:ac:
92:77:ac:e3:78:3d:de:5e:09:d3:90:e5:34:d2:7c:3e:06:df:
5f:c7:ff:d0:4b:ea:8d:00:40:c1:19:c7:85:f0:8b:10:e0:8e:
e8:64:6a:d7:f0:ce:1b:87:c2:cd:85:8b:c0:1c:1e:8e:03:25:
a4:96:1e:9d:d6:df:a5:f6:b1:9c:c0:6c:78:73:4b:7b:54:4e:
a6:2c:de:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:20:25 2025 by rpki-client