Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/bE5-r-L_qpDK6UdoAwNNttp8Ehk.mft
File: bE5-r-L_qpDK6UdoAwNNttp8Ehk.mft (raw, json)
Hash identifier: /A0Zb0YiUhuxt6lMyV/s3hhWahj+VRuuP15dMTyo9cU=
Subject key identifier: A6:37:25:89:02:31:80:C1:E0:76:AE:84:3A:CC:E3:72:80:1C:82:FF
Authority key identifier: 6C:4E:7E:AF:E2:FF:AA:90:CA:E9:47:68:03:03:4D:B6:DA:7C:12:19
Certificate issuer: /CN=6c4e7eafe2ffaa90cae9476803034db6da7c1219
Certificate serial: 0198458834F1780002F7FBBEA5F15A720C9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bE5-r-L_qpDK6UdoAwNNttp8Ehk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/bE5-r-L_qpDK6UdoAwNNttp8Ehk.mft
Manifest number: 0F6B
Signing time: Sat 26 Jul 2025 07:00:10 +0000
Manifest this update: Sat 26 Jul 2025 07:00:10 +0000
Manifest next update: Sun 27 Jul 2025 07:00:10 +0000
Files and hashes: 1: bE5-r-L_qpDK6UdoAwNNttp8Ehk.crl (hash: WJ8rqtG6/dbr21TcqcP8sRQRBxVHlQK73rEKf9hchrA=)
2: pikr-Z1yZ7UUvvrmXqwotfJAjto.roa (hash: 68icAI19296YoC6/CDoRbYMVtIlmqXzI+o0fkE9+Wfc=)
3: qQqCuUJCewbsZNg09v9PamhTS90.roa (hash: OGwgmYMhdJtP2TfXi19zj/Lo5JjlQ5q60mMpyZb+YXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/bE5-r-L_qpDK6UdoAwNNttp8Ehk.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/bE5-r-L_qpDK6UdoAwNNttp8Ehk.mft
rsync://rpki.ripe.net/repository/DEFAULT/bE5-r-L_qpDK6UdoAwNNttp8Ehk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:88:34:f1:78:00:02:f7:fb:be:a5:f1:5a:72:0c:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4e7eafe2ffaa90cae9476803034db6da7c1219
Validity
Not Before: Jul 26 07:00:10 2025 GMT
Not After : Jul 27 07:00:10 2025 GMT
Subject: CN=a6372589023180c1e076ae843acce372801c82ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:54:12:ab:fd:06:bd:ba:e4:22:4b:01:50:e7:
3d:99:24:0e:22:dc:5a:0a:af:fc:e9:48:3f:42:e7:
23:81:aa:f2:08:ea:cc:f9:2e:29:91:bb:96:43:fa:
d8:3b:a6:eb:61:6a:bd:bb:c3:b0:c3:68:65:dd:3c:
a6:75:51:5b:d8:cd:c6:21:6b:99:47:62:de:bf:13:
fc:37:c5:f3:de:e5:d6:bc:29:25:76:7f:bf:a0:9f:
24:10:61:1b:7b:e3:c8:bf:d6:09:c9:85:57:93:59:
75:e4:e9:0a:16:59:2e:10:c5:3a:f3:bf:7a:8a:97:
d6:5e:e3:e1:04:30:df:af:66:7b:89:83:b8:20:9b:
b4:e3:63:d1:18:31:12:81:66:eb:20:de:9e:8c:9b:
0f:55:ee:f8:a9:e5:20:ce:61:8a:39:b2:d6:fe:0a:
bc:ae:42:2e:35:de:0f:c7:97:53:cc:27:cb:c5:0d:
67:9c:e9:58:59:4b:0c:b8:af:4c:ed:e6:0f:dc:7e:
0d:1a:30:b8:73:ba:57:11:61:0f:01:d0:1e:f0:de:
ec:05:85:dd:f1:cd:82:a6:fa:d3:cb:9d:af:47:71:
36:82:6d:d1:ab:2b:f3:52:ec:d1:03:ed:7b:32:01:
83:fd:d2:6c:21:91:1c:73:20:7a:89:8d:09:69:38:
ef:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:37:25:89:02:31:80:C1:E0:76:AE:84:3A:CC:E3:72:80:1C:82:FF
X509v3 Authority Key Identifier:
keyid:6C:4E:7E:AF:E2:FF:AA:90:CA:E9:47:68:03:03:4D:B6:DA:7C:12:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bE5-r-L_qpDK6UdoAwNNttp8Ehk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/bE5-r-L_qpDK6UdoAwNNttp8Ehk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/bE5-r-L_qpDK6UdoAwNNttp8Ehk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:f2:98:f9:33:5d:21:dc:6b:0f:06:f2:05:29:16:2b:81:c7:
db:f5:5c:a6:de:0c:bc:e8:d3:b3:97:a6:fd:4d:67:f6:7e:09:
76:1f:62:ed:cd:58:2b:d0:59:db:b1:23:b8:39:65:01:ba:91:
8e:5a:7d:69:5b:d8:b3:b4:1d:d4:96:56:fe:65:c7:8f:f3:37:
b1:ad:2e:cb:b7:4a:31:3b:35:00:08:a5:9d:4c:06:79:f0:05:
13:2e:bc:9a:c4:65:fc:fe:c9:df:e4:aa:3f:95:37:e5:f0:d1:
26:2d:f3:ca:ae:d1:66:5e:38:48:bf:31:84:25:06:31:2f:ad:
b4:d5:25:73:01:1a:c5:5b:97:30:6a:4a:9c:c3:e3:a6:e8:2e:
70:bc:d0:34:cb:d1:69:22:45:67:a4:e9:38:e3:00:4d:d3:16:
5d:98:80:4f:1c:62:23:d6:bb:7a:01:9c:8e:a9:6e:cc:f5:80:
ef:7d:f3:eb:dd:6e:7a:27:31:92:0e:c1:21:76:66:89:28:29:
47:31:32:41:0f:1a:be:08:e3:39:60:51:28:16:d8:cc:06:41:
27:7b:d0:44:f7:6d:60:c3:5a:af:a7:7a:d0:e9:a8:a0:6c:7a:
1d:f7:75:65:72:ff:af:cd:eb:98:1a:60:5b:6c:d6:64:8a:1b:
41:f9:99:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 15:04:51 2025 by rpki-client