Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/66af07-3318-4f4a-89ff-40c5ebc6f736/1/bSPOewwQBo-8RMAhlD4zkBPyruA.mft
File: bSPOewwQBo-8RMAhlD4zkBPyruA.mft (raw, json)
Hash identifier: 6iSQLZUORLLu2ZmogEP/mAcWbG0D68C602qnYHkCD6Y=
Subject key identifier: B2:E1:69:5B:91:F9:9C:E1:93:83:C9:6E:DB:76:BA:80:66:42:7B:E3
Authority key identifier: 6D:23:CE:7B:0C:10:06:8F:BC:44:C0:21:94:3E:33:90:13:F2:AE:E0
Certificate issuer: /CN=6d23ce7b0c10068fbc44c021943e339013f2aee0
Certificate serial: 01985C1135CAACFD123CA44A3CAAB1F955CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSPOewwQBo-8RMAhlD4zkBPyruA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/66af07-3318-4f4a-89ff-40c5ebc6f736/1/bSPOewwQBo-8RMAhlD4zkBPyruA.mft
Manifest number: 160A
Signing time: Wed 30 Jul 2025 16:01:28 +0000
Manifest this update: Wed 30 Jul 2025 16:01:28 +0000
Manifest next update: Thu 31 Jul 2025 16:01:28 +0000
Files and hashes: 1: LQcm0nhQTgxfcAEHFSpSeQFsVHo.roa (hash: ScQNvXtsK5w/Wj3QzlqfHMAUcdIYUpFbtGKhSGmn1FI=)
2: bSPOewwQBo-8RMAhlD4zkBPyruA.crl (hash: e+LDraPEk0wG0MKshMaj0fkMtRWq9bT4o+8Vz6CjWZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/66af07-3318-4f4a-89ff-40c5ebc6f736/1/bSPOewwQBo-8RMAhlD4zkBPyruA.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/66af07-3318-4f4a-89ff-40c5ebc6f736/1/bSPOewwQBo-8RMAhlD4zkBPyruA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bSPOewwQBo-8RMAhlD4zkBPyruA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 31 Jul 2025 15:09:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:5c:11:35:ca:ac:fd:12:3c:a4:4a:3c:aa:b1:f9:55:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d23ce7b0c10068fbc44c021943e339013f2aee0
Validity
Not Before: Jul 30 16:01:28 2025 GMT
Not After : Jul 31 16:01:28 2025 GMT
Subject: CN=b2e1695b91f99ce19383c96edb76ba8066427be3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:d7:77:18:7b:29:fc:65:d6:d3:92:73:1e:15:
da:de:40:19:6f:64:5c:51:60:84:b8:0d:9e:59:4f:
d9:bf:40:28:c1:32:8c:3b:19:1e:14:16:70:e6:cd:
2d:5b:32:6a:cc:0f:e5:91:a2:f9:0c:95:93:03:15:
c3:50:22:ab:fb:f0:36:35:fa:c7:ff:76:f3:22:4d:
12:9c:f2:9b:14:a8:78:a0:fe:bb:90:38:80:ae:38:
b9:a3:da:84:8f:8c:72:e6:ae:d9:14:af:d3:5a:61:
52:c7:4a:e0:2d:7f:36:21:9e:a8:41:29:e4:18:c8:
37:ac:53:dd:d3:c3:49:ec:c4:fc:bb:bc:ff:44:c4:
d5:46:f3:c6:f4:58:46:aa:89:f1:cd:57:47:9d:50:
70:f8:fc:23:3c:19:33:a2:5d:c9:be:e5:e2:2d:ba:
ee:82:ed:9e:48:78:3c:37:6d:4c:ee:b4:d2:19:89:
b2:50:bf:7a:00:df:89:7f:fd:03:c6:bd:50:75:dc:
0e:d9:e9:1f:67:29:65:d8:e2:a3:36:98:71:62:31:
53:9d:8f:f2:13:fa:1a:8e:5f:25:ab:67:0c:65:98:
5b:1a:f2:eb:53:eb:0a:49:cb:ff:91:29:74:64:94:
47:b0:1e:d1:2b:b2:db:c6:18:42:1b:f6:13:e8:39:
41:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:E1:69:5B:91:F9:9C:E1:93:83:C9:6E:DB:76:BA:80:66:42:7B:E3
X509v3 Authority Key Identifier:
keyid:6D:23:CE:7B:0C:10:06:8F:BC:44:C0:21:94:3E:33:90:13:F2:AE:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSPOewwQBo-8RMAhlD4zkBPyruA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/66af07-3318-4f4a-89ff-40c5ebc6f736/1/bSPOewwQBo-8RMAhlD4zkBPyruA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/66af07-3318-4f4a-89ff-40c5ebc6f736/1/bSPOewwQBo-8RMAhlD4zkBPyruA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:39:7d:15:64:a7:41:64:d5:eb:e1:f1:97:62:19:19:bf:b1:
fb:83:2f:e5:0f:59:8c:ce:23:1a:db:ee:cb:bd:92:1a:28:b0:
1a:6b:80:bb:69:70:16:57:8a:9b:f5:57:c8:55:bf:54:24:79:
c9:7b:22:a7:6b:7a:fb:ad:e2:12:8a:7b:02:93:ef:e2:8c:a1:
5f:c8:66:07:af:0e:65:72:a9:0e:92:53:79:66:c6:91:b2:0d:
2c:4c:b5:b4:d9:67:eb:79:c2:50:79:61:9d:10:3a:d2:64:52:
2a:39:3c:9e:41:c2:6e:27:e0:a5:9b:75:df:73:08:87:e8:dd:
68:46:c3:a8:d6:85:82:8e:73:51:13:a9:64:6a:e5:37:37:d3:
2e:72:0d:47:1e:a4:47:02:05:84:e9:31:f3:58:68:17:2c:a3:
aa:c6:46:93:a7:8a:1b:5d:d5:a6:62:72:e7:75:5d:15:fa:b4:
f4:83:05:41:11:2a:67:b7:07:7d:f3:ec:10:17:16:d7:a8:49:
d1:47:b6:9c:eb:34:8f:3f:d2:ab:8d:3d:40:ba:ed:b6:19:6a:
b9:90:ab:15:be:6d:22:ee:9f:10:0e:7a:60:f0:8a:22:b6:ef:
4d:fa:14:c5:bc:57:01:03:4d:75:5c:ef:b1:9a:d0:6f:f0:6d:
8a:0d:b5:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 30 19:43:10 2025 by rpki-client