Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/fc522f-b20f-47af-80c6-1a97944c91ca/1/bSID7B5abCZsyjm5rxq-LLILGVo.mft
File: bSID7B5abCZsyjm5rxq-LLILGVo.mft (raw, json)
Hash identifier: oH66PTZz8hLWw7Z9IlwYTH77J9NLFL1sP9aRQTi24BI=
Subject key identifier: 9D:4A:02:CA:DE:A6:A0:59:0E:4D:6A:66:C5:56:DB:75:EE:05:2E:6E
Authority key identifier: 6D:22:03:EC:1E:5A:6C:26:6C:CA:39:B9:AF:1A:BE:2C:B2:0B:19:5A
Certificate issuer: /CN=6d2203ec1e5a6c266cca39b9af1abe2cb20b195a
Certificate serial: 01984B53819E9B24787D4B5397A0967FF529
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSID7B5abCZsyjm5rxq-LLILGVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/fc522f-b20f-47af-80c6-1a97944c91ca/1/bSID7B5abCZsyjm5rxq-LLILGVo.mft
Manifest number: 1601
Signing time: Sun 27 Jul 2025 10:00:20 +0000
Manifest this update: Sun 27 Jul 2025 10:00:20 +0000
Manifest next update: Mon 28 Jul 2025 10:00:20 +0000
Files and hashes: 1: bSID7B5abCZsyjm5rxq-LLILGVo.crl (hash: 7KTZQq2vhyz1QkMPMK9BZ1nI5WmzKgCTW2hTeIon/FY=)
2: h9zvvPI2dBY4jNWQKpPxUoE047A.roa (hash: PkWglafHXDxF9KIzM61BgLg1omYPGots3ZThAKgjHP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/fc522f-b20f-47af-80c6-1a97944c91ca/1/bSID7B5abCZsyjm5rxq-LLILGVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/fc522f-b20f-47af-80c6-1a97944c91ca/1/bSID7B5abCZsyjm5rxq-LLILGVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/bSID7B5abCZsyjm5rxq-LLILGVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:53:81:9e:9b:24:78:7d:4b:53:97:a0:96:7f:f5:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d2203ec1e5a6c266cca39b9af1abe2cb20b195a
Validity
Not Before: Jul 27 10:00:20 2025 GMT
Not After : Jul 28 10:00:20 2025 GMT
Subject: CN=9d4a02cadea6a0590e4d6a66c556db75ee052e6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:1d:a2:a0:22:3f:72:7f:9a:5f:b7:25:17:b4:
c8:46:1b:da:dd:99:27:11:7b:4f:80:ad:94:19:f1:
b5:58:76:88:22:c4:bc:8d:0f:f7:f6:e0:01:04:18:
39:87:24:5f:c5:43:a6:c2:b1:46:02:58:e3:fb:30:
4a:f1:4e:9e:91:34:4a:cb:6c:5f:c4:a7:78:06:a9:
66:7c:36:ce:c3:d3:82:42:fd:be:66:e6:85:0c:1b:
23:07:47:f0:d4:08:14:d0:db:c7:f0:1e:e2:f2:7e:
33:02:81:e9:5e:e1:bf:65:23:b6:be:c0:80:fb:2f:
fb:71:2f:99:85:7c:e5:ea:2b:f5:a7:99:5f:0e:08:
7a:ca:95:eb:dc:a5:85:91:aa:d8:b7:6e:65:97:c9:
38:d0:e4:96:bf:a0:00:74:2c:7e:a0:82:67:f2:ba:
5f:bf:b8:29:88:ee:33:e4:90:59:4e:46:cc:97:a9:
9a:e8:f4:78:5c:ea:86:06:28:c0:49:16:0f:91:a5:
d3:36:e3:6a:b7:69:d7:e3:98:c4:84:01:95:6b:f8:
9f:90:e9:e8:77:6e:2d:1a:92:7e:c2:96:53:e4:c1:
e3:bc:a0:e7:cf:3d:32:e1:ec:bc:4a:86:dd:19:30:
b4:72:71:8b:fc:c3:b0:dc:d7:5f:4c:b7:aa:55:81:
68:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:4A:02:CA:DE:A6:A0:59:0E:4D:6A:66:C5:56:DB:75:EE:05:2E:6E
X509v3 Authority Key Identifier:
keyid:6D:22:03:EC:1E:5A:6C:26:6C:CA:39:B9:AF:1A:BE:2C:B2:0B:19:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSID7B5abCZsyjm5rxq-LLILGVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/fc522f-b20f-47af-80c6-1a97944c91ca/1/bSID7B5abCZsyjm5rxq-LLILGVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/fc522f-b20f-47af-80c6-1a97944c91ca/1/bSID7B5abCZsyjm5rxq-LLILGVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:1f:9b:bc:ed:aa:79:73:db:aa:42:13:f5:67:8d:e1:b5:f2:
51:ec:c7:0b:13:e2:05:4f:9d:45:56:a5:90:27:90:24:97:13:
34:95:56:6f:ae:3d:15:22:f4:d2:e8:9f:89:d0:6d:b0:79:a0:
72:98:0b:75:25:61:1d:33:48:3f:a4:58:0d:16:38:34:be:12:
5c:6f:eb:d9:a5:da:e6:97:74:5f:d7:c2:24:22:18:e4:b3:20:
46:c5:d3:2b:4e:b1:2e:ed:f8:93:28:ea:b4:19:6a:1b:e9:1e:
77:bd:58:db:d2:e9:39:89:02:5f:b8:f3:81:77:11:19:33:21:
e2:39:89:ee:3d:f1:e4:13:fd:e8:9c:a5:14:cd:89:98:71:88:
fd:e6:c7:82:17:3c:95:96:b4:a2:e9:ae:24:68:f1:b2:8e:d1:
78:12:8b:89:0f:d2:71:ae:0e:47:68:81:f7:98:f4:c3:4e:c2:
17:9b:20:3f:e7:0f:db:14:9a:3e:c6:7a:1e:49:62:5d:05:5d:
6e:42:16:7c:62:ad:fc:0e:d8:ae:95:d4:91:ef:27:01:8a:38:
43:f1:42:18:c8:49:fa:c2:eb:f6:b0:6d:14:a5:cf:a3:23:aa:
66:7a:1c:81:ab:02:38:40:bd:99:8a:b5:b4:88:49:26:1f:6c:
54:7a:81:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:04:58 2025 by rpki-client