Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/bDgMi05V5ZCBr3OqGTXhCgEgV_o.mft
File: bDgMi05V5ZCBr3OqGTXhCgEgV_o.mft (raw, json)
Hash identifier: BpTa/HPIV6ZY+qpNttHGsj22zJ1JgEE/mcvA3KvME/g=
Subject key identifier: B0:AB:74:B4:21:85:12:E3:6B:93:0F:01:97:E0:E5:FE:E5:94:33:1B
Authority key identifier: 6C:38:0C:8B:4E:55:E5:90:81:AF:73:AA:19:35:E1:0A:01:20:57:FA
Certificate issuer: /CN=6c380c8b4e55e59081af73aa1935e10a012057fa
Certificate serial: 01984589830F6A591B8F5FFEE5D300C0C1CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bDgMi05V5ZCBr3OqGTXhCgEgV_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/bDgMi05V5ZCBr3OqGTXhCgEgV_o.mft
Manifest number: 15FF
Signing time: Sat 26 Jul 2025 07:01:36 +0000
Manifest this update: Sat 26 Jul 2025 07:01:36 +0000
Manifest next update: Sun 27 Jul 2025 07:01:36 +0000
Files and hashes: 1: G8ZxZv3rAsdyjkZIWbmu2tXV_Og.roa (hash: lGe21WZY7KMyNN8ysWzw0Q97lgbjrid4+uoj3fQOhEo=)
2: bDgMi05V5ZCBr3OqGTXhCgEgV_o.crl (hash: B/no+5R70OZYgDidu06xOVQd1F5y7cm9KEl66nK/D+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/bDgMi05V5ZCBr3OqGTXhCgEgV_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/bDgMi05V5ZCBr3OqGTXhCgEgV_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/bDgMi05V5ZCBr3OqGTXhCgEgV_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:89:83:0f:6a:59:1b:8f:5f:fe:e5:d3:00:c0:c1:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c380c8b4e55e59081af73aa1935e10a012057fa
Validity
Not Before: Jul 26 07:01:36 2025 GMT
Not After : Jul 27 07:01:36 2025 GMT
Subject: CN=b0ab74b4218512e36b930f0197e0e5fee594331b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:97:02:95:58:32:06:a6:f9:7b:b5:d4:fc:47:
65:b2:11:b1:05:a5:08:e5:b2:58:5c:00:79:62:d4:
74:8d:79:64:01:92:8e:a1:bd:76:34:ef:b0:45:54:
b9:7c:16:0c:1a:47:55:f3:1e:cc:51:c3:25:6b:9c:
d1:c5:e5:ae:61:a5:c3:b9:80:f9:27:b0:f0:77:6b:
30:2f:8d:45:f4:e9:df:bd:3f:78:4f:b9:5f:96:6e:
70:e5:c2:48:7e:b1:35:d6:49:92:3d:68:51:1a:6a:
f5:fb:5d:d1:ae:4e:a4:b9:72:81:7a:f6:74:b5:9c:
12:76:55:6e:c8:94:79:9d:df:78:7f:9d:8e:6b:0b:
e5:c4:3e:ec:6d:2a:b7:7b:96:b0:02:ad:94:ca:02:
e6:42:fb:8c:3f:3f:ec:a5:66:e6:80:74:93:9b:34:
15:35:0b:80:80:36:19:d3:7f:69:87:be:b6:05:77:
0f:93:de:7a:d4:0a:f3:16:8a:e0:23:7f:83:d5:38:
65:2e:c5:3e:c4:b9:c7:5c:9c:93:35:83:c8:70:61:
77:9e:78:3f:b4:c2:24:87:f2:80:f7:19:f7:6e:e3:
d4:a5:73:65:d6:ef:a9:48:61:e3:29:08:1f:43:74:
fd:a3:64:f0:22:51:cb:64:6e:6c:56:c8:80:2a:73:
73:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:AB:74:B4:21:85:12:E3:6B:93:0F:01:97:E0:E5:FE:E5:94:33:1B
X509v3 Authority Key Identifier:
keyid:6C:38:0C:8B:4E:55:E5:90:81:AF:73:AA:19:35:E1:0A:01:20:57:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bDgMi05V5ZCBr3OqGTXhCgEgV_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/bDgMi05V5ZCBr3OqGTXhCgEgV_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/bDgMi05V5ZCBr3OqGTXhCgEgV_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:93:c5:f5:0e:66:16:79:56:6c:8e:b8:0c:d8:77:90:26:eb:
79:50:84:70:2e:3f:4a:d8:c7:48:e8:9b:dd:77:84:32:5c:94:
11:ab:83:4d:54:0b:90:d3:f2:a1:35:74:bb:8b:e4:07:9c:fd:
c4:42:cf:35:73:e2:98:cb:4d:95:38:a9:4b:d7:3a:df:97:ce:
0e:e6:65:a3:ca:ef:f5:56:55:a4:33:79:3b:66:60:70:5c:42:
4b:be:7b:62:59:c3:a2:0e:d4:0b:7b:9c:c0:a4:27:11:96:6a:
c2:42:14:de:d7:4b:83:e7:00:09:fe:34:f1:1c:3d:61:00:51:
e3:1e:d5:1c:0f:61:c6:9d:73:1c:f7:cc:7b:f8:f3:ff:5d:f8:
69:3e:55:a5:b3:a9:c2:2a:ae:68:73:81:8b:20:de:56:f8:ae:
9c:3e:83:ef:00:85:b7:67:67:5b:07:83:b0:4d:d9:a2:f0:00:
95:d8:5f:c6:10:84:d1:ab:d5:ef:02:11:f8:78:a6:37:1f:4f:
f1:24:fc:6f:3e:80:1e:e0:37:4c:0b:92:91:37:81:ea:05:9b:
a9:2e:18:44:de:bd:d0:14:13:8d:09:9b:68:1d:ed:af:3c:e4:
af:f8:ba:be:58:00:bb:46:4e:7f:4a:e7:d0:69:04:89:12:ea:
9b:1a:e0:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:58:06 2025 by rpki-client