Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/bKlE6qnH9tRXQG8ULG4oz1rMasg.mft
File: bKlE6qnH9tRXQG8ULG4oz1rMasg.mft (raw, json)
Hash identifier: yP4OwvCYL03CkMDBwtSzjoyvbgin655UKaRrO5/rCKg=
Subject key identifier: 9A:E6:EF:E8:3B:9F:27:F4:4C:C7:8E:36:65:E9:1D:5F:08:D7:5B:7A
Authority key identifier: 6C:A9:44:EA:A9:C7:F6:D4:57:40:6F:14:2C:6E:28:CF:5A:CC:6A:C8
Certificate issuer: /CN=6ca944eaa9c7f6d457406f142c6e28cf5acc6ac8
Certificate serial: 01983A6038017ADF4F9AFA83F4A75C736B8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bKlE6qnH9tRXQG8ULG4oz1rMasg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/bKlE6qnH9tRXQG8ULG4oz1rMasg.mft
Manifest number: 0BC3
Signing time: Thu 24 Jul 2025 03:00:40 +0000
Manifest this update: Thu 24 Jul 2025 03:00:40 +0000
Manifest next update: Fri 25 Jul 2025 03:00:40 +0000
Files and hashes: 1: U_3B74ujhAJrCWsRNX6BqqwgnVw.roa (hash: t7MohkwWoi0EopfC0Tnorl6v62Y4aRFAg2yz8Q6y9x8=)
2: bKlE6qnH9tRXQG8ULG4oz1rMasg.crl (hash: 2QR0OmE0wixlQpSr1IsxLcRmlqKZd4nbZJ2tdtVzZxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/bKlE6qnH9tRXQG8ULG4oz1rMasg.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/bKlE6qnH9tRXQG8ULG4oz1rMasg.mft
rsync://rpki.ripe.net/repository/DEFAULT/bKlE6qnH9tRXQG8ULG4oz1rMasg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:3a:60:38:01:7a:df:4f:9a:fa:83:f4:a7:5c:73:6b:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ca944eaa9c7f6d457406f142c6e28cf5acc6ac8
Validity
Not Before: Jul 24 03:00:40 2025 GMT
Not After : Jul 25 03:00:40 2025 GMT
Subject: CN=9ae6efe83b9f27f44cc78e3665e91d5f08d75b7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:27:d7:0f:48:9b:de:af:38:8f:d0:e8:42:f6:
5b:05:67:05:14:1f:f6:65:b6:f1:4c:80:d9:2b:b8:
17:06:a3:f4:c8:8c:ee:a5:de:f0:c7:ec:54:58:3d:
e0:1e:1c:83:44:af:be:e4:88:b4:b6:8d:5a:e9:6b:
36:3e:8b:7a:26:5b:cb:58:c6:7d:ff:da:33:98:a8:
d6:20:78:4d:f4:f1:18:cd:3d:70:44:c3:4c:95:19:
69:2f:e9:2c:08:6b:a1:1a:6b:85:c5:95:a7:32:0a:
18:d3:2e:d8:6f:ca:11:b3:11:4e:b1:8d:f1:34:76:
97:02:55:83:fd:20:df:6d:98:20:1d:86:34:16:d4:
ba:44:0d:55:72:3e:a2:3e:a1:22:ea:32:cf:21:19:
6a:33:7e:3b:e5:c7:ce:c4:44:97:50:51:2c:5f:1a:
e7:33:75:b5:a2:d1:78:94:af:68:0a:97:40:54:03:
7c:e4:54:55:7c:f5:d4:10:ee:c2:53:31:b1:1e:f7:
ce:41:37:56:7a:84:38:d3:f3:07:5f:ce:ae:4a:82:
e6:2f:8e:2e:a6:5b:15:d1:03:f1:93:06:bd:a0:f5:
03:a2:eb:da:22:ea:7b:92:74:d9:43:99:cd:79:dc:
30:bd:b6:88:d5:51:01:1b:eb:c7:cc:41:ef:22:b0:
e6:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:E6:EF:E8:3B:9F:27:F4:4C:C7:8E:36:65:E9:1D:5F:08:D7:5B:7A
X509v3 Authority Key Identifier:
keyid:6C:A9:44:EA:A9:C7:F6:D4:57:40:6F:14:2C:6E:28:CF:5A:CC:6A:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bKlE6qnH9tRXQG8ULG4oz1rMasg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/bKlE6qnH9tRXQG8ULG4oz1rMasg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/bKlE6qnH9tRXQG8ULG4oz1rMasg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:84:a4:5f:2b:03:ac:3b:ea:46:35:60:08:3d:2b:37:e8:00:
51:ae:38:95:e7:10:de:85:6e:cf:3a:c6:fe:63:c0:38:55:3c:
ba:5c:3c:f8:7d:ce:67:3c:31:17:7c:fe:33:aa:1a:39:26:ef:
d3:6e:1c:4d:a0:8d:51:a5:9f:a5:96:8c:a6:49:ca:05:e1:0d:
de:49:cb:49:fe:d5:78:a8:b8:72:31:9e:a4:a2:fe:88:e1:50:
4e:6e:22:43:09:68:ba:c8:9f:a1:6b:e4:9f:bf:0a:e8:82:a3:
93:f8:3e:36:3e:4a:9c:92:19:37:98:95:88:cb:26:9e:75:5c:
9c:4a:eb:be:dd:70:7a:17:0a:e9:ab:47:59:38:b3:49:32:2f:
83:f5:c9:ee:94:ed:79:2e:42:b2:1c:9f:52:0b:11:74:ec:f5:
0c:ad:b4:28:ed:04:65:fd:6f:04:8e:fb:d1:99:02:5f:af:15:
a3:d1:4b:ef:5e:c8:60:84:d4:9e:4a:63:96:05:3f:17:8f:7d:
27:6d:04:8e:9f:7f:39:32:81:7d:e9:59:f6:78:a7:51:09:8e:
60:ca:ca:fc:1a:7a:c3:99:f0:e8:3a:62:24:94:b4:18:b7:e8:
26:63:61:87:4e:2f:27:80:83:9e:c7:2e:41:ed:00:b4:cc:21:
de:df:22:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 24 04:53:54 2025 by rpki-client