Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/641f45-b933-4019-aa7a-ad513574a404/1/BaO2FkB7l-JhFjNId8aqkoqq7rI.mft
File: BaO2FkB7l-JhFjNId8aqkoqq7rI.mft (raw, json)
Hash identifier: CT4SXgLdjdSEPg2dtuo482HgUC1OugZi4QWt8G+lwHM=
Subject key identifier: 36:28:A7:95:AC:8F:6C:C7:4E:12:84:01:70:00:1A:C5:3A:7B:67:B4
Authority key identifier: 05:A3:B6:16:40:7B:97:E2:61:16:33:48:77:C6:AA:92:8A:AA:EE:B2
Certificate issuer: /CN=05a3b616407b97e26116334877c6aa928aaaeeb2
Certificate serial: 019844E3D6BFF20E42F504BAE8DCA12D1C64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BaO2FkB7l-JhFjNId8aqkoqq7rI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/641f45-b933-4019-aa7a-ad513574a404/1/BaO2FkB7l-JhFjNId8aqkoqq7rI.mft
Manifest number: 09ED
Signing time: Sat 26 Jul 2025 04:00:39 +0000
Manifest this update: Sat 26 Jul 2025 04:00:39 +0000
Manifest next update: Sun 27 Jul 2025 04:00:39 +0000
Files and hashes: 1: BaO2FkB7l-JhFjNId8aqkoqq7rI.crl (hash: QyXaGJHKcFODR5JttbMcaqmcu3hpqGNmtFPMKCTrbSA=)
2: bDkAt0CCYnB2xqRfpALpEK1gmgo.roa (hash: HzyjrIASJdGjjHtk6b54LHkaX+3Gt8eRcO+z/aYxOaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/641f45-b933-4019-aa7a-ad513574a404/1/BaO2FkB7l-JhFjNId8aqkoqq7rI.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/641f45-b933-4019-aa7a-ad513574a404/1/BaO2FkB7l-JhFjNId8aqkoqq7rI.mft
rsync://rpki.ripe.net/repository/DEFAULT/BaO2FkB7l-JhFjNId8aqkoqq7rI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:e3:d6:bf:f2:0e:42:f5:04:ba:e8:dc:a1:2d:1c:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05a3b616407b97e26116334877c6aa928aaaeeb2
Validity
Not Before: Jul 26 04:00:39 2025 GMT
Not After : Jul 27 04:00:39 2025 GMT
Subject: CN=3628a795ac8f6cc74e12840170001ac53a7b67b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d6:0c:6a:bc:27:9a:79:7f:f8:e9:cf:c6:f5:
02:4f:65:7d:c8:a3:af:71:8e:b0:57:36:68:d4:a5:
12:32:39:ed:f0:65:62:7e:e5:1d:fe:f4:a0:ec:84:
bc:5d:53:74:40:4f:6e:f5:0c:3d:c4:0a:21:df:6b:
0b:ac:f5:c1:a7:3d:c2:77:7f:57:84:61:a4:7c:0c:
74:4f:ba:9e:d2:f0:84:3f:bb:72:98:55:7d:3c:a8:
b4:0d:67:ab:ea:31:8d:06:54:ac:b3:1e:7e:8b:c8:
a6:b7:9f:45:b5:d4:1c:da:d0:88:ca:ef:19:d7:29:
9c:6e:1b:1c:a7:37:ca:47:d7:42:38:03:e8:74:2e:
cf:a6:a8:6f:12:bd:e9:2b:ac:9e:11:19:b0:02:50:
68:7c:a8:b0:e7:cf:5c:94:e7:f3:14:80:7d:70:40:
49:0e:75:49:fb:84:01:3e:0c:44:9b:b6:79:b4:69:
1b:d5:a1:f3:9c:3d:42:6d:c1:b6:49:d8:fd:55:b3:
c0:5e:5b:05:92:e5:45:46:68:98:2c:6b:59:a2:8e:
a8:cb:94:9b:09:5d:2d:43:70:4f:42:4c:17:f7:c1:
93:87:0b:bb:cf:83:80:de:1f:a3:3c:40:9e:ed:04:
6a:37:ea:06:31:0f:55:51:26:da:86:2f:a9:89:fb:
86:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:28:A7:95:AC:8F:6C:C7:4E:12:84:01:70:00:1A:C5:3A:7B:67:B4
X509v3 Authority Key Identifier:
keyid:05:A3:B6:16:40:7B:97:E2:61:16:33:48:77:C6:AA:92:8A:AA:EE:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BaO2FkB7l-JhFjNId8aqkoqq7rI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/641f45-b933-4019-aa7a-ad513574a404/1/BaO2FkB7l-JhFjNId8aqkoqq7rI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/641f45-b933-4019-aa7a-ad513574a404/1/BaO2FkB7l-JhFjNId8aqkoqq7rI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:31:7e:2e:73:7b:7b:29:fc:d2:71:de:2a:76:55:b0:b9:51:
ae:e6:60:46:c6:e5:24:ac:75:92:53:f7:e4:f7:69:6d:d9:c7:
04:c9:c0:9b:49:f2:60:a2:e3:1b:e7:74:ce:eb:4f:3f:f8:a7:
23:11:1c:14:b2:89:a4:6a:15:26:6d:2f:80:06:aa:20:5d:6c:
f9:ca:26:f5:21:7b:db:b6:34:4e:39:0d:03:c7:ec:1d:6b:f0:
1d:76:16:c6:13:2a:a3:5e:20:2f:de:30:23:1b:17:1c:06:b3:
ec:48:7d:90:cf:e7:b2:76:4f:f6:1d:65:a8:51:90:81:93:5d:
6e:80:ab:9d:0b:17:cf:a2:ba:05:a3:f2:92:58:77:07:12:f8:
f1:d9:6f:e0:c9:e0:99:76:16:e8:96:a1:6f:2e:d8:98:e8:28:
2b:dd:fe:03:e4:02:c9:33:f6:e9:8f:a9:b2:7b:2d:ec:0a:d5:
ac:7d:42:77:54:1f:e0:bf:48:4e:86:0f:24:64:af:c3:50:55:
69:31:da:1e:14:76:87:0a:01:a3:14:29:f2:78:3f:2e:c2:90:
9a:f7:31:95:e3:78:78:a8:84:b2:c9:ab:67:18:f5:ea:5c:03:
19:d5:4b:f6:00:c0:e8:3a:eb:cb:f9:1d:0d:7a:74:20:9b:6e:
6f:e8:b2:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:48:48 2025 by rpki-client