Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/9ed4b2-32b9-498a-b8dc-769cd7dcc938/1/b0dz8kDNYmnCUbZRcKp-KYroxB8.mft
File: b0dz8kDNYmnCUbZRcKp-KYroxB8.mft (raw, json)
Hash identifier: 5nI9kpTtPwFjQJBY+2m9eHoYiE/mw0BnZ8faABp7K8Y=
Subject key identifier: 8A:13:EC:93:5D:3C:76:8F:F7:A1:63:84:4F:43:EE:61:A1:BB:65:BA
Authority key identifier: 6F:47:73:F2:40:CD:62:69:C2:51:B6:51:70:AA:7E:29:8A:E8:C4:1F
Certificate issuer: /CN=6f4773f240cd6269c251b65170aa7e298ae8c41f
Certificate serial: 019849D39BA2A32784652517DFBE775F0A17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b0dz8kDNYmnCUbZRcKp-KYroxB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/9ed4b2-32b9-498a-b8dc-769cd7dcc938/1/b0dz8kDNYmnCUbZRcKp-KYroxB8.mft
Manifest number: 0AE0
Signing time: Sun 27 Jul 2025 03:01:01 +0000
Manifest this update: Sun 27 Jul 2025 03:01:01 +0000
Manifest next update: Mon 28 Jul 2025 03:01:01 +0000
Files and hashes: 1: 5z9bF-s7mwN_rrIwiP6BUqF8WSI.roa (hash: UYifmQ1R2PC8Hli/npCQiOLYGwkMeaviE7TQe/6mbAs=)
2: b0dz8kDNYmnCUbZRcKp-KYroxB8.crl (hash: B7g/m8fL+yYkB2zJ4UnSxml1bl5yCYX2bkLlSA6THE8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/9ed4b2-32b9-498a-b8dc-769cd7dcc938/1/b0dz8kDNYmnCUbZRcKp-KYroxB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/9ed4b2-32b9-498a-b8dc-769cd7dcc938/1/b0dz8kDNYmnCUbZRcKp-KYroxB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/b0dz8kDNYmnCUbZRcKp-KYroxB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 03:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:9b:a2:a3:27:84:65:25:17:df:be:77:5f:0a:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f4773f240cd6269c251b65170aa7e298ae8c41f
Validity
Not Before: Jul 27 03:01:01 2025 GMT
Not After : Jul 28 03:01:01 2025 GMT
Subject: CN=8a13ec935d3c768ff7a163844f43ee61a1bb65ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e3:12:f7:f7:09:fa:40:29:fc:86:23:21:fd:
3f:08:ed:cb:fd:5f:d7:80:c9:7c:c1:83:14:93:1a:
0e:98:23:0e:d2:89:b0:0a:ad:ee:72:9c:5a:3d:fd:
f2:aa:72:73:88:79:91:da:ab:c4:42:29:5a:55:a6:
f7:2a:b2:cf:8a:44:9f:8e:d4:9f:dc:60:b0:0b:e8:
0b:11:a5:57:5e:48:83:52:25:94:e5:65:2e:b0:7f:
64:4e:9b:20:72:23:b2:43:e3:14:c1:36:d1:65:75:
62:83:d5:69:12:a1:d0:8e:8f:c6:cb:29:93:ee:70:
15:97:b9:45:07:b7:78:34:1e:a8:74:fd:15:8e:44:
ab:f1:ea:c0:61:38:11:0a:58:69:07:de:8f:2d:ee:
8c:03:76:67:47:a9:36:63:4b:7d:40:93:28:d5:ec:
a4:d0:a8:4d:51:ef:12:9b:9e:b9:64:55:1d:c8:c0:
9f:84:fa:55:0e:8e:4f:72:91:ae:ce:a5:ae:85:1a:
a9:39:82:a1:53:04:26:df:ab:12:cd:06:45:46:ec:
21:42:1f:be:93:3e:e4:63:93:9b:f9:5e:c4:6b:56:
0d:7a:29:03:7f:f9:7b:c4:8b:be:f5:9e:0e:8f:35:
52:ce:df:85:39:09:f9:eb:ef:d1:3a:19:b5:69:a5:
58:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:13:EC:93:5D:3C:76:8F:F7:A1:63:84:4F:43:EE:61:A1:BB:65:BA
X509v3 Authority Key Identifier:
keyid:6F:47:73:F2:40:CD:62:69:C2:51:B6:51:70:AA:7E:29:8A:E8:C4:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0dz8kDNYmnCUbZRcKp-KYroxB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/9ed4b2-32b9-498a-b8dc-769cd7dcc938/1/b0dz8kDNYmnCUbZRcKp-KYroxB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/9ed4b2-32b9-498a-b8dc-769cd7dcc938/1/b0dz8kDNYmnCUbZRcKp-KYroxB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:43:ee:d7:78:87:f3:73:46:2c:9d:8e:24:4f:4b:93:5b:a7:
d9:0b:6c:c6:4b:b0:0b:0e:0e:a4:1e:2e:74:15:3a:e1:76:a7:
f3:f7:87:63:5f:13:5e:8e:9f:2e:5e:14:e7:0b:8d:59:58:7e:
7c:07:11:d3:da:97:16:81:ad:30:ed:07:a5:ee:ea:a2:3a:e0:
a7:1f:98:89:2f:b1:76:42:6d:75:34:dc:90:03:ef:6c:60:f7:
c8:d5:5a:97:a4:f5:17:91:59:5a:81:53:b6:7f:f6:1d:2f:bd:
ee:36:92:19:87:c9:be:c1:aa:ac:88:1d:31:3c:51:72:4d:4a:
ea:e3:d0:c8:25:f4:ff:6b:c0:e5:3a:18:3c:95:9e:7e:16:66:
40:40:a6:e3:11:d8:6a:7f:db:72:1c:54:f2:e5:a1:b6:58:ac:
bb:7d:57:39:03:43:a4:05:70:10:9a:23:bb:9a:94:5c:97:a9:
d5:b3:50:d8:72:dd:d4:78:62:c3:cc:80:9e:6b:d1:2c:7d:00:
56:c2:6d:66:0d:e9:37:4d:5c:53:40:46:43:25:a2:5d:35:e4:
15:ac:16:1a:94:b8:d9:18:f3:35:1b:a0:d3:91:48:3a:4e:58:
d8:35:89:26:47:52:6d:4a:e7:12:3e:ec:7d:53:f8:51:c1:39:
64:49:e5:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:13:20 2025 by rpki-client