
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/496525-2c0d-43e4-8188-5fbc230abdc2/1/bs1crU0zBsT3LEKvwG5c0fuv46M.mft
File: bs1crU0zBsT3LEKvwG5c0fuv46M.mft (raw, json)
Hash identifier: Raou3HWT1iBLiJcXuiELJ1EmoOGrm/9NjvVhNXFlZVY=
Subject key identifier: FB:3D:4D:0C:67:12:CD:AE:FA:A4:60:63:70:4A:87:76:4F:10:AF:10
Authority key identifier: 6E:CD:5C:AD:4D:33:06:C4:F7:2C:42:AF:C0:6E:5C:D1:FB:AF:E3:A3
Certificate issuer: /CN=6ecd5cad4d3306c4f72c42afc06e5cd1fbafe3a3
Certificate serial: 0198451A5F0762D2DD8398FECF151DC06880
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bs1crU0zBsT3LEKvwG5c0fuv46M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/496525-2c0d-43e4-8188-5fbc230abdc2/1/bs1crU0zBsT3LEKvwG5c0fuv46M.mft
Manifest number: 1603
Signing time: Sat 26 Jul 2025 05:00:12 +0000
Manifest this update: Sat 26 Jul 2025 05:00:12 +0000
Manifest next update: Sun 27 Jul 2025 05:00:12 +0000
Files and hashes: 1: IVWLNAUIsWDuNfRfR17vH-v5XfI.roa (hash: OmbLmtXQG4MyTcSNnTCa+QZsFqNmOgdwU2G3Jors4PA=)
2: bs1crU0zBsT3LEKvwG5c0fuv46M.crl (hash: 4BU6E8sRxbVJQZTvfovk1AfXUhf6nGyPvwfXcJMpM0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/496525-2c0d-43e4-8188-5fbc230abdc2/1/bs1crU0zBsT3LEKvwG5c0fuv46M.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/496525-2c0d-43e4-8188-5fbc230abdc2/1/bs1crU0zBsT3LEKvwG5c0fuv46M.mft
rsync://rpki.ripe.net/repository/DEFAULT/bs1crU0zBsT3LEKvwG5c0fuv46M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 05:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:1a:5f:07:62:d2:dd:83:98:fe:cf:15:1d:c0:68:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ecd5cad4d3306c4f72c42afc06e5cd1fbafe3a3
Validity
Not Before: Jul 26 05:00:12 2025 GMT
Not After : Jul 27 05:00:12 2025 GMT
Subject: CN=fb3d4d0c6712cdaefaa46063704a87764f10af10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:04:75:2f:52:e6:97:38:40:6d:9a:f1:b5:fc:
23:24:43:58:e1:1a:51:5f:02:39:af:81:42:d8:c0:
69:fc:d2:4f:f8:d0:50:c6:3d:a9:66:02:a7:8a:8b:
61:9c:70:78:db:a1:ae:58:8f:89:48:42:fa:0f:48:
6b:78:0e:8f:4f:c8:0f:33:58:f5:18:6d:e9:3c:c2:
5e:29:4d:73:b2:4a:ed:a1:0b:19:3b:07:b4:1b:56:
5f:1b:5a:3d:52:9e:e1:93:42:9c:60:a5:cb:53:3e:
21:f3:a9:b9:11:db:7d:26:52:8f:c5:a9:a2:5f:47:
7b:89:bb:1d:a6:07:48:44:d2:dd:b5:33:8f:b4:c2:
24:80:f4:e2:5f:b1:11:b0:9c:7e:89:73:8f:bd:c8:
6e:56:73:f2:d2:e4:c9:da:b5:0b:0d:43:b0:fa:00:
08:3b:f9:76:56:3d:14:e8:54:6f:26:98:b1:45:d3:
2e:a7:82:fd:e3:3b:97:8a:96:95:08:68:da:c0:be:
16:a0:8a:97:c5:45:1f:b3:cd:19:41:ce:15:51:85:
f9:32:2f:26:4f:c0:93:f4:f5:7c:96:d9:a0:f0:6f:
6e:35:06:a2:e1:3e:c0:e3:3c:f2:4f:dd:0b:e4:25:
09:08:e9:c7:27:60:c4:4b:cc:21:fd:f2:03:aa:cd:
69:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:3D:4D:0C:67:12:CD:AE:FA:A4:60:63:70:4A:87:76:4F:10:AF:10
X509v3 Authority Key Identifier:
keyid:6E:CD:5C:AD:4D:33:06:C4:F7:2C:42:AF:C0:6E:5C:D1:FB:AF:E3:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bs1crU0zBsT3LEKvwG5c0fuv46M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/496525-2c0d-43e4-8188-5fbc230abdc2/1/bs1crU0zBsT3LEKvwG5c0fuv46M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/496525-2c0d-43e4-8188-5fbc230abdc2/1/bs1crU0zBsT3LEKvwG5c0fuv46M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:05:d9:9b:d3:10:22:a0:1e:e2:f9:ad:70:ae:18:b6:29:c6:
06:e2:50:e9:d3:ff:18:d0:83:b1:9f:8e:d5:d6:f3:ca:de:9e:
7f:d6:74:f2:02:27:e1:2a:56:da:5a:9d:5a:45:c7:aa:76:88:
cd:b4:c5:ce:c3:95:51:dd:8b:92:47:69:12:fd:79:0d:4f:4a:
8c:8a:75:2c:6b:b5:19:8a:1d:b4:79:9f:1d:9d:38:27:b6:59:
3d:da:81:1a:4a:f2:ab:a8:ac:ee:51:f5:53:78:b5:90:9d:98:
e5:05:04:cf:5b:13:44:0e:b7:35:8f:12:37:1e:25:b8:29:80:
4e:32:3b:3f:92:26:c8:d8:54:9d:4e:a4:1a:c6:f5:7e:f9:67:
54:aa:02:50:20:f2:22:25:55:90:73:10:15:03:6e:af:9d:d7:
bc:58:f9:0d:7c:69:c2:bd:a2:6a:e4:f9:b7:1f:2a:4b:5f:6d:
0a:43:63:08:6e:68:7c:93:89:03:7a:17:16:f5:4b:e3:c7:2b:
b6:dc:ff:e9:f7:1f:98:70:79:12:9f:4d:df:d9:80:34:f4:c9:
aa:a8:79:11:fa:9c:a9:81:78:23:7e:22:dd:51:0d:64:56:3f:
75:a3:7f:14:44:cd:c5:c9:41:c0:43:69:56:f6:5f:b0:ca:0d:
48:d9:3c:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 15:01:41 2025 by rpki-client