Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/b4b70c-18bf-4502-bf9f-4f8913a915d3/1/Bt76ExH1P2xEFGPaj6s0A61ogBE.mft
File: Bt76ExH1P2xEFGPaj6s0A61ogBE.mft (raw, json)
Hash identifier: ECy+M7mfNxWGoDee0iK0RZcB8Ln9KEx6+gdgmPQBC8E=
Subject key identifier: 32:7E:C6:2F:28:CA:17:56:B2:68:CB:BB:FA:2C:7B:F4:BB:D5:06:08
Authority key identifier: 06:DE:FA:13:11:F5:3F:6C:44:14:63:DA:8F:AB:34:03:AD:68:80:11
Certificate issuer: /CN=06defa1311f53f6c441463da8fab3403ad688011
Certificate serial: 0198529F3A222A722EF4CB1E1391B8E8651F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bt76ExH1P2xEFGPaj6s0A61ogBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/b4b70c-18bf-4502-bf9f-4f8913a915d3/1/Bt76ExH1P2xEFGPaj6s0A61ogBE.mft
Manifest number: 1604
Signing time: Mon 28 Jul 2025 20:00:23 +0000
Manifest this update: Mon 28 Jul 2025 20:00:23 +0000
Manifest next update: Tue 29 Jul 2025 20:00:23 +0000
Files and hashes: 1: Bt76ExH1P2xEFGPaj6s0A61ogBE.crl (hash: oOBuq/lNoSlibRvT0vZuNg11ediGqTRK6LsXcaZBn3A=)
2: psfbhPGIR9OS3HR7S3qur-oF2Wg.roa (hash: FlkCUGKA6sKM5xnwOPU8XOcnUGbtF79h6pPDmcgLJm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/b4b70c-18bf-4502-bf9f-4f8913a915d3/1/Bt76ExH1P2xEFGPaj6s0A61ogBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/b4b70c-18bf-4502-bf9f-4f8913a915d3/1/Bt76ExH1P2xEFGPaj6s0A61ogBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bt76ExH1P2xEFGPaj6s0A61ogBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 20:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:52:9f:3a:22:2a:72:2e:f4:cb:1e:13:91:b8:e8:65:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06defa1311f53f6c441463da8fab3403ad688011
Validity
Not Before: Jul 28 20:00:23 2025 GMT
Not After : Jul 29 20:00:23 2025 GMT
Subject: CN=327ec62f28ca1756b268cbbbfa2c7bf4bbd50608
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:54:3a:4e:22:43:98:25:22:26:59:8b:4c:df:
a1:6a:5f:60:77:d9:b9:b7:4f:98:93:c3:85:3a:25:
02:91:6a:a2:29:33:d6:04:ab:1a:94:b3:96:cb:c9:
17:58:d5:d8:c7:d5:9b:24:10:7d:0c:90:93:1c:64:
f0:5f:34:b8:7e:b1:fe:b2:9a:3a:3a:5e:0c:87:cd:
74:a4:8a:be:63:4b:84:ea:28:b8:0d:1e:af:81:8a:
18:03:4a:6d:ef:b3:06:4a:a0:84:84:fa:f1:53:7b:
39:d3:2b:12:4f:df:15:f8:84:0d:17:a3:81:87:3e:
04:6d:26:9e:a7:b5:84:74:3c:3c:96:75:48:4b:8c:
ce:af:b3:99:77:8f:ac:7c:75:96:c2:03:48:29:c4:
81:17:9e:d9:8f:98:8b:e9:c2:a3:8f:bf:92:f5:a3:
2c:3a:56:56:a1:ea:29:50:95:8a:e2:56:be:36:a4:
db:2d:1d:13:ec:9b:da:85:eb:8a:00:4c:8a:d9:28:
3f:70:f2:85:7c:75:a2:da:ab:04:42:0b:d8:53:e0:
7a:7c:57:5f:58:18:5c:0a:a3:46:16:db:4c:03:c3:
74:b6:db:b8:e8:c8:79:ec:7f:bc:73:c7:6a:ba:90:
e7:88:02:de:23:c4:7a:a6:dd:f5:1e:ec:17:52:f1:
21:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:7E:C6:2F:28:CA:17:56:B2:68:CB:BB:FA:2C:7B:F4:BB:D5:06:08
X509v3 Authority Key Identifier:
keyid:06:DE:FA:13:11:F5:3F:6C:44:14:63:DA:8F:AB:34:03:AD:68:80:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bt76ExH1P2xEFGPaj6s0A61ogBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/b4b70c-18bf-4502-bf9f-4f8913a915d3/1/Bt76ExH1P2xEFGPaj6s0A61ogBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/b4b70c-18bf-4502-bf9f-4f8913a915d3/1/Bt76ExH1P2xEFGPaj6s0A61ogBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:3c:b4:d5:5f:e3:34:e4:fe:7a:68:db:2c:0b:ec:f2:21:ea:
25:ab:18:f5:de:0c:bb:05:e1:fd:f0:6c:a4:be:40:5e:49:88:
b7:ae:f3:19:6d:22:4c:56:c7:da:81:37:3a:6d:32:30:76:bb:
2f:53:91:22:23:fe:7b:9a:e9:24:71:ef:56:02:bb:6b:4a:fb:
21:ee:f0:24:1f:b4:4f:62:81:35:52:be:ad:a0:30:67:74:7a:
15:54:86:06:1b:7b:60:83:3d:b2:1f:d7:be:98:dc:1b:80:d8:
59:e9:37:fa:8b:98:c3:71:a5:f6:92:65:94:b5:2d:d7:65:65:
53:1b:b5:34:88:77:37:c2:9f:20:a9:80:64:35:bd:1e:d5:9b:
be:de:75:d2:4a:17:cb:f3:35:73:ad:a7:51:38:ab:0e:db:85:
78:48:5b:3f:66:2a:d8:04:0f:9f:59:68:cf:16:6c:20:40:c3:
eb:18:ef:a4:a0:2a:e7:63:04:50:0f:2c:31:79:ec:0c:8f:98:
d0:a9:d7:d4:34:b5:dd:eb:7b:91:2f:1b:1f:c4:0f:6b:6f:41:
92:81:30:4e:a0:e6:3e:42:65:6d:3c:fb:8a:5f:3d:bb:f6:ee:
16:46:1d:69:7d:95:11:b4:75:59:f8:bc:ce:18:53:c9:5c:f5:
80:32:42:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 03:32:58 2025 by rpki-client