Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/BIsMM3dmY8tDIaEI8vTRY1tdLYo.mft
File: BIsMM3dmY8tDIaEI8vTRY1tdLYo.mft (raw, json)
Hash identifier: /Wplp5IygED/rGf3rNA68Y7/r1gFZRAerhz3pFfT9PU=
Subject key identifier: A3:44:B7:59:DB:67:6D:90:C4:47:FE:A7:C7:47:05:4E:CA:3F:CA:DF
Authority key identifier: 04:8B:0C:33:77:66:63:CB:43:21:A1:08:F2:F4:D1:63:5B:5D:2D:8A
Certificate issuer: /CN=048b0c33776663cb4321a108f2f4d1635b5d2d8a
Certificate serial: 01984A0A5BCE5DE474A0BAFB2EF5E92AC68C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BIsMM3dmY8tDIaEI8vTRY1tdLYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/BIsMM3dmY8tDIaEI8vTRY1tdLYo.mft
Manifest number: 1601
Signing time: Sun 27 Jul 2025 04:00:49 +0000
Manifest this update: Sun 27 Jul 2025 04:00:49 +0000
Manifest next update: Mon 28 Jul 2025 04:00:49 +0000
Files and hashes: 1: BIsMM3dmY8tDIaEI8vTRY1tdLYo.crl (hash: zJCJTpMaW8qUCNfNjp/K+pq+6T4YE+StXcTXkKNTQGQ=)
2: N9wZb19u6uDl2jmJsSrj5tJBTrs.roa (hash: 0C5L52QJ9EePN5vLiQx5L6BEy17vjwGiBKVGlRWVCRo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/BIsMM3dmY8tDIaEI8vTRY1tdLYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/BIsMM3dmY8tDIaEI8vTRY1tdLYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BIsMM3dmY8tDIaEI8vTRY1tdLYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:0a:5b:ce:5d:e4:74:a0:ba:fb:2e:f5:e9:2a:c6:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=048b0c33776663cb4321a108f2f4d1635b5d2d8a
Validity
Not Before: Jul 27 04:00:49 2025 GMT
Not After : Jul 28 04:00:49 2025 GMT
Subject: CN=a344b759db676d90c447fea7c747054eca3fcadf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ed:50:65:e0:f1:0c:1d:83:cc:d3:19:77:83:
4a:9d:2e:48:1b:53:40:a0:16:9a:30:e4:94:ac:b7:
cc:a7:20:dd:e9:c7:da:7e:22:42:ea:27:d4:86:3c:
af:84:1d:db:87:a9:d8:ca:67:66:3c:d4:3f:c6:97:
9d:e0:33:d8:be:3c:48:3c:7e:2b:6a:e3:41:c6:05:
cb:2c:87:d7:00:07:20:35:47:6c:ba:ba:8b:fb:6e:
90:85:44:34:75:b0:db:5f:b1:28:19:94:70:3e:84:
b0:4a:1a:eb:2a:aa:a3:27:0f:a6:d5:f1:ee:a8:81:
47:e4:46:93:28:e1:8b:49:4d:72:44:9b:2a:a7:53:
b0:bd:1f:35:c4:9e:e6:c1:92:94:8a:a0:c5:f2:aa:
d3:b2:75:81:0f:18:de:ec:bc:fe:cb:f1:74:6f:9a:
f2:25:be:88:07:ae:44:38:f2:f9:f8:00:88:b9:66:
b8:b2:ea:ed:19:76:41:ed:91:d5:33:62:b5:a2:76:
98:87:16:bd:27:27:6a:39:c9:78:76:fe:d3:49:22:
50:b0:71:61:a5:6a:84:e5:bb:ea:ee:52:60:38:60:
c5:12:f3:bf:9a:0d:ca:00:19:2f:f4:91:83:90:a4:
70:97:7b:7c:56:34:65:f2:43:64:c3:e4:7c:3c:52:
5f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:44:B7:59:DB:67:6D:90:C4:47:FE:A7:C7:47:05:4E:CA:3F:CA:DF
X509v3 Authority Key Identifier:
keyid:04:8B:0C:33:77:66:63:CB:43:21:A1:08:F2:F4:D1:63:5B:5D:2D:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BIsMM3dmY8tDIaEI8vTRY1tdLYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/BIsMM3dmY8tDIaEI8vTRY1tdLYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/4bb7f4-9709-4109-b30e-24116cb6e986/1/BIsMM3dmY8tDIaEI8vTRY1tdLYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:b6:0d:eb:08:58:93:4c:3a:24:80:5c:2a:52:83:d7:b7:da:
25:4c:a6:59:8c:15:57:31:04:4a:0d:43:26:86:dd:db:98:ad:
f7:a8:c8:63:af:34:bb:8d:8e:bc:91:2e:1e:af:08:92:d4:e5:
7f:f8:21:26:d7:46:a8:32:21:e0:8b:0c:9a:92:12:1a:c7:ca:
d8:37:27:63:42:80:f9:0c:22:85:c9:af:a1:60:78:54:50:eb:
56:4b:fd:fa:8f:b9:69:dc:be:0e:45:cf:65:fc:ec:3c:8d:6f:
bc:01:60:47:c5:2f:53:91:85:b6:71:dd:51:28:4d:35:9c:61:
9d:79:a0:1f:88:5c:15:f7:01:a6:2d:2d:7c:f8:66:e6:46:39:
58:31:2c:ec:78:78:e9:4b:5d:06:93:75:fe:11:bf:e9:3a:72:
cf:f9:c3:58:d8:56:5d:12:7a:6d:8d:73:54:c8:56:b8:5c:71:
2d:39:5d:24:e6:fa:cb:8b:3e:27:92:06:e9:a4:e4:ed:ef:16:
f3:59:9d:ee:ae:61:a9:ae:58:33:a2:26:11:92:59:d2:40:7a:
91:9f:78:98:92:08:9a:f1:4c:9d:2f:8f:db:ca:c8:3f:8c:4e:
21:ae:d4:b2:42:ed:a8:c7:ae:33:5a:c5:ae:d3:34:7a:12:e7:
41:2f:27:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:17:27 2025 by rpki-client