Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/060e1e-328a-4818-bfd1-4fa3481a47e1/1/bq8W3MVQz4Hs8PgZUheaBIEwh3o.mft
File: bq8W3MVQz4Hs8PgZUheaBIEwh3o.mft (raw, json)
Hash identifier: bvA3uhEeMTxxbe6bXb9/HXcchjCe0exOHUvaXpfFmoQ=
Subject key identifier: 32:9D:9B:DF:1D:4F:F1:1D:7B:A9:3D:62:FD:57:7F:9B:5A:47:C8:F9
Authority key identifier: 6E:AF:16:DC:C5:50:CF:81:EC:F0:F8:19:52:17:9A:04:81:30:87:7A
Certificate issuer: /CN=6eaf16dcc550cf81ecf0f81952179a048130877a
Certificate serial: 019847E51FB73FF8DF5051D7C5467B56F431
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bq8W3MVQz4Hs8PgZUheaBIEwh3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/060e1e-328a-4818-bfd1-4fa3481a47e1/1/bq8W3MVQz4Hs8PgZUheaBIEwh3o.mft
Manifest number: 09C5
Signing time: Sat 26 Jul 2025 18:00:54 +0000
Manifest this update: Sat 26 Jul 2025 18:00:54 +0000
Manifest next update: Sun 27 Jul 2025 18:00:54 +0000
Files and hashes: 1: bq8W3MVQz4Hs8PgZUheaBIEwh3o.crl (hash: yTGz8ZUQ0Bar5tScXAGYe/Z7D9JMlnMrMHbidcNtuOI=)
2: zFZRDLYL0fz0Tr9KOTbvt5Gi2T8.roa (hash: RoOpJgCK2e2T8+E3U8CF6Ztsr6QUn+lDcl3mIBxfJ0Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/060e1e-328a-4818-bfd1-4fa3481a47e1/1/bq8W3MVQz4Hs8PgZUheaBIEwh3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/060e1e-328a-4818-bfd1-4fa3481a47e1/1/bq8W3MVQz4Hs8PgZUheaBIEwh3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/bq8W3MVQz4Hs8PgZUheaBIEwh3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:e5:1f:b7:3f:f8:df:50:51:d7:c5:46:7b:56:f4:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eaf16dcc550cf81ecf0f81952179a048130877a
Validity
Not Before: Jul 26 18:00:54 2025 GMT
Not After : Jul 27 18:00:54 2025 GMT
Subject: CN=329d9bdf1d4ff11d7ba93d62fd577f9b5a47c8f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9b:87:e3:da:ae:0e:f4:7d:89:5c:94:1c:50:
8f:91:4e:7a:ee:30:48:1f:0b:7c:b3:56:a1:31:bc:
86:eb:a3:80:c5:41:16:f5:5e:b4:49:83:70:5c:ef:
cb:89:c0:ac:5f:8c:bd:4c:68:95:51:c7:bb:9a:2b:
cc:04:94:de:de:28:61:5e:ec:a6:ae:0c:23:74:76:
ba:b0:23:fc:3d:46:6c:7f:24:56:86:b1:d4:b7:1b:
85:35:71:fd:2e:fa:29:31:41:ca:d8:9e:df:81:9a:
9b:7a:10:5a:36:cc:b5:96:9b:8f:0a:1e:81:73:21:
49:b3:4e:65:2c:fd:cb:93:20:b6:40:04:eb:10:cc:
d6:54:c7:e6:71:b0:f1:f6:c8:b0:a6:77:4a:c6:c0:
73:3a:34:b4:26:ac:46:59:1d:9b:82:f5:8c:8f:91:
18:2f:79:9e:7a:9a:bc:a3:69:fd:73:67:34:eb:eb:
18:28:12:00:e0:3f:90:61:66:c8:2e:4f:83:3e:15:
72:5a:f8:ea:d8:b9:af:56:f3:f1:66:e1:21:b1:7b:
1b:a4:cf:f8:27:00:19:24:96:81:5b:75:20:66:45:
d4:d2:7e:9f:d9:3c:c8:66:ce:cd:b8:e4:2b:46:7a:
4e:5f:a9:7d:93:6d:54:b3:2e:78:71:1f:cb:4e:cd:
0c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:9D:9B:DF:1D:4F:F1:1D:7B:A9:3D:62:FD:57:7F:9B:5A:47:C8:F9
X509v3 Authority Key Identifier:
keyid:6E:AF:16:DC:C5:50:CF:81:EC:F0:F8:19:52:17:9A:04:81:30:87:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bq8W3MVQz4Hs8PgZUheaBIEwh3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/060e1e-328a-4818-bfd1-4fa3481a47e1/1/bq8W3MVQz4Hs8PgZUheaBIEwh3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/060e1e-328a-4818-bfd1-4fa3481a47e1/1/bq8W3MVQz4Hs8PgZUheaBIEwh3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:f2:b6:c1:41:23:e8:f3:57:3d:ba:a1:f2:22:d2:51:9c:79:
67:8f:5d:72:ee:68:5f:a8:a5:38:ed:c3:ea:df:24:38:15:a8:
92:b4:36:bb:cc:93:2b:c9:ae:53:77:3c:d4:87:09:bf:c6:f9:
78:e9:c6:06:02:82:80:4a:9d:a1:a8:17:3e:f7:3f:ae:79:a3:
3e:35:61:4d:89:09:a3:c5:2e:cf:20:04:6c:2f:ed:38:dd:87:
11:a1:a4:57:3e:bd:a3:88:71:be:c4:d4:7e:c2:b3:8e:ac:9d:
51:ed:75:5b:68:58:6d:37:6d:04:7b:f2:bb:84:fc:ad:54:b6:
8b:9e:8b:c5:c5:af:ba:7e:2d:25:b9:55:52:06:41:c9:07:3f:
e3:38:02:25:9d:06:8e:f5:18:55:7d:9b:4e:32:91:40:fa:2c:
3f:7f:c1:ee:86:2f:33:44:67:97:51:0e:e3:e5:93:54:6a:e6:
ec:61:60:05:5d:84:52:78:dc:c7:a7:fe:cf:87:45:a7:03:1f:
9f:73:29:7e:97:f1:90:c6:67:e9:27:5b:c6:88:07:0b:96:35:
90:e8:a0:fd:f8:a1:a1:c1:33:1c:6b:12:84:a8:0f:bc:d7:56:
da:68:41:44:89:fa:d4:5c:aa:50:62:af:e6:5a:17:f3:12:b6:
45:1f:e0:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 20:12:53 2025 by rpki-client