Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.mft
File: bF5O9VFnmf_guxuDkxfb01W7eps.mft (raw, json)
Hash identifier: QjKPdBDmWGU+1aNmwafrvZjeTiXLMGw7PmNrzUiVoy0=
Subject key identifier: B1:B4:6F:5F:7A:E6:7A:D4:9B:C7:DC:59:1B:41:D5:37:88:2B:9B:60
Authority key identifier: 6C:5E:4E:F5:51:67:99:FF:E0:BB:1B:83:93:17:DB:D3:55:BB:7A:9B
Certificate issuer: /CN=6c5e4ef5516799ffe0bb1b839317dbd355bb7a9b
Certificate serial: 019845889980AA8A68A3FDDFFA7A8DCC58EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bF5O9VFnmf_guxuDkxfb01W7eps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.mft
Manifest number: 1609
Signing time: Sat 26 Jul 2025 07:00:36 +0000
Manifest this update: Sat 26 Jul 2025 07:00:36 +0000
Manifest next update: Sun 27 Jul 2025 07:00:36 +0000
Files and hashes: 1: 0wgL08QR2Tg8DD4ym9yl2cWgk4Y.roa (hash: qV9D4m0x0M6TJ4fUI73uoZNgwejKGUBXdkrfKOtrD44=)
2: bF5O9VFnmf_guxuDkxfb01W7eps.crl (hash: PO7PwVF/g2q1S+ot0covrTCW7pkTegiAtL5mirow+RA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.mft
rsync://rpki.ripe.net/repository/DEFAULT/bF5O9VFnmf_guxuDkxfb01W7eps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:88:99:80:aa:8a:68:a3:fd:df:fa:7a:8d:cc:58:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c5e4ef5516799ffe0bb1b839317dbd355bb7a9b
Validity
Not Before: Jul 26 07:00:36 2025 GMT
Not After : Jul 27 07:00:36 2025 GMT
Subject: CN=b1b46f5f7ae67ad49bc7dc591b41d537882b9b60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:72:4c:17:56:8e:4e:2b:91:40:37:26:89:22:
ed:60:ea:fe:e8:b1:81:8f:7b:95:54:fa:0c:c3:78:
19:3f:63:c3:8b:49:93:58:4e:9e:34:97:c5:98:16:
19:1c:95:dc:79:a2:0d:aa:d6:36:d0:12:d4:20:66:
cd:60:1d:65:2a:da:0c:03:64:b5:e1:02:74:f7:23:
f0:ed:64:9c:fb:24:4c:2e:0c:16:c9:56:a8:65:39:
79:0f:3f:81:86:6b:bb:23:95:ec:74:05:34:51:f8:
90:3d:88:b0:07:4f:31:4e:31:31:30:1e:7b:c5:21:
26:db:ad:b9:9b:43:d2:10:5b:bb:a3:0f:86:ec:88:
89:af:be:9d:50:73:75:d3:6f:a0:73:33:f5:2f:ed:
a1:02:87:65:f8:ee:51:c2:db:e9:df:62:96:05:bb:
4c:f0:ee:24:f6:c5:48:92:ac:cb:3e:0c:15:89:11:
ce:5e:df:99:c1:1e:d8:94:02:f2:be:e7:97:3b:74:
3b:c4:b9:84:8d:de:53:d1:53:f9:7a:49:e3:b7:bb:
fe:32:1b:9e:05:a1:f1:ab:e6:2b:ca:60:5e:0e:2d:
cf:91:ee:c9:6a:c1:7c:21:56:2d:94:d6:1d:00:49:
ed:9c:2a:fd:b3:3a:c2:a9:39:ec:b8:87:4a:fd:d2:
24:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:B4:6F:5F:7A:E6:7A:D4:9B:C7:DC:59:1B:41:D5:37:88:2B:9B:60
X509v3 Authority Key Identifier:
keyid:6C:5E:4E:F5:51:67:99:FF:E0:BB:1B:83:93:17:DB:D3:55:BB:7A:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bF5O9VFnmf_guxuDkxfb01W7eps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:20:f2:83:45:00:15:0a:4a:81:ba:ad:70:82:78:d1:e6:f2:
bb:0d:ec:a1:6d:e9:ee:25:65:74:52:eb:73:52:cb:8a:bd:42:
f8:e7:1a:45:73:ef:8e:7c:df:7d:08:40:ec:60:ff:d5:36:91:
49:f3:bc:d1:61:6b:c0:65:61:ff:a0:c0:e1:45:50:78:85:de:
5f:bf:e6:c6:d5:2c:fa:54:0f:9e:51:f5:71:ef:f6:22:9c:31:
ed:22:4b:87:92:8f:fc:04:e6:e6:96:cf:9a:a7:96:fe:f7:c7:
88:a2:c7:f6:0d:01:0a:c7:e3:a5:19:29:99:72:e1:31:11:e4:
12:33:e2:85:4e:68:47:6d:c9:bf:6b:c7:1e:53:d0:a8:d3:5b:
28:f6:3c:aa:72:11:b4:d5:53:5f:9b:e5:03:0b:e3:ed:b1:07:
ec:54:14:47:5d:8e:a3:64:02:7b:a5:38:ec:ce:98:9b:52:e7:
72:89:f0:c4:da:5a:3a:1c:b6:cb:e4:07:2f:9a:cb:65:1d:e1:
cc:6a:57:55:a8:fd:9f:a6:48:65:c5:4a:84:7c:4b:77:0b:6b:
9a:aa:01:eb:37:78:4a:f6:3b:0a:3d:63:15:6e:79:aa:4a:11:
e8:57:ee:8f:68:f3:9d:5c:b6:57:f8:22:b8:01:78:39:87:94:
2c:9e:7e:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:46:21 2025 by rpki-client