Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/7f9978-1fe4-4b99-8143-5d1b1ecb99bf/1/b1eSq4t1mqdzA42SB3qZvPjYGqA.mft
File: b1eSq4t1mqdzA42SB3qZvPjYGqA.mft (raw, json)
Hash identifier: nyTDv3x3RPPZM0emoBoTqBqWPWlOpmVmAIaZmI3nlpk=
Subject key identifier: CF:95:26:A7:82:5B:C8:28:70:FB:6F:A5:BB:11:4C:88:6E:A1:A5:F7
Authority key identifier: 6F:57:92:AB:8B:75:9A:A7:73:03:8D:92:07:7A:99:BC:F8:D8:1A:A0
Certificate issuer: /CN=6f5792ab8b759aa773038d92077a99bcf8d81aa0
Certificate serial: 01985456775409F6E8596B66A81771C185D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b1eSq4t1mqdzA42SB3qZvPjYGqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/7f9978-1fe4-4b99-8143-5d1b1ecb99bf/1/b1eSq4t1mqdzA42SB3qZvPjYGqA.mft
Manifest number: 0CE8
Signing time: Tue 29 Jul 2025 04:00:09 +0000
Manifest this update: Tue 29 Jul 2025 04:00:09 +0000
Manifest next update: Wed 30 Jul 2025 04:00:09 +0000
Files and hashes: 1: b1eSq4t1mqdzA42SB3qZvPjYGqA.crl (hash: CrB8/yj6Mp3OrTrnQ36Be5iCSeH1ZHE1bZ3f6qGTxdY=)
2: leDNi0WllP1YqULzb4LrZ9SaXNU.roa (hash: AZ3w2uOyWeGoSd1JRW2Ly2oonBucnhh8DC++gdjBL6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/7f9978-1fe4-4b99-8143-5d1b1ecb99bf/1/b1eSq4t1mqdzA42SB3qZvPjYGqA.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/7f9978-1fe4-4b99-8143-5d1b1ecb99bf/1/b1eSq4t1mqdzA42SB3qZvPjYGqA.mft
rsync://rpki.ripe.net/repository/DEFAULT/b1eSq4t1mqdzA42SB3qZvPjYGqA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 04:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:54:56:77:54:09:f6:e8:59:6b:66:a8:17:71:c1:85:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f5792ab8b759aa773038d92077a99bcf8d81aa0
Validity
Not Before: Jul 29 04:00:09 2025 GMT
Not After : Jul 30 04:00:09 2025 GMT
Subject: CN=cf9526a7825bc82870fb6fa5bb114c886ea1a5f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3f:70:69:85:1d:a2:9c:e2:38:29:08:a4:f7:
0f:e1:b4:39:dd:eb:a0:84:35:b0:0a:9a:88:ad:20:
0d:c1:2e:07:f9:82:91:06:c2:71:5e:55:e8:31:f6:
35:62:83:97:4f:ba:d7:34:22:7c:07:48:9b:e7:6b:
84:3f:5f:34:7f:5e:6f:ac:7d:58:5d:a9:d5:13:05:
b1:93:cd:4c:a4:2d:7e:d5:a9:d3:27:df:e2:89:36:
02:9e:aa:22:a4:1c:95:49:cd:57:58:92:ee:88:f2:
98:62:bd:e8:e3:c8:c5:9c:7a:61:43:9e:10:5a:42:
a9:06:4d:b6:d5:0a:46:70:9e:ab:45:1f:6b:75:f5:
d2:3f:83:42:77:0a:c4:ac:ef:73:69:bb:fc:67:0e:
12:25:bf:77:21:1f:cf:41:d2:62:f8:c4:a7:c7:26:
92:05:a5:87:ac:20:da:98:ab:28:32:e0:28:7c:19:
93:bd:cc:a2:7b:4e:03:8d:d6:1a:dc:16:3e:1d:c3:
42:52:cb:f3:38:27:b1:2c:68:83:36:98:39:67:44:
bc:0c:0d:5e:f2:82:06:81:4b:98:64:e3:35:b6:93:
0f:6d:bd:d1:cb:1b:6b:44:d9:9e:03:65:a6:97:24:
66:a1:96:22:7e:e4:b7:6a:a1:d1:62:84:bb:9a:63:
9a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:95:26:A7:82:5B:C8:28:70:FB:6F:A5:BB:11:4C:88:6E:A1:A5:F7
X509v3 Authority Key Identifier:
keyid:6F:57:92:AB:8B:75:9A:A7:73:03:8D:92:07:7A:99:BC:F8:D8:1A:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1eSq4t1mqdzA42SB3qZvPjYGqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7f9978-1fe4-4b99-8143-5d1b1ecb99bf/1/b1eSq4t1mqdzA42SB3qZvPjYGqA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/7f9978-1fe4-4b99-8143-5d1b1ecb99bf/1/b1eSq4t1mqdzA42SB3qZvPjYGqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:d7:44:30:08:fa:e6:bf:b7:36:97:6b:f1:94:4a:85:63:77:
56:20:7f:ee:b9:79:42:18:98:ba:e7:5c:68:f2:1f:ae:13:42:
e2:1d:8b:9c:eb:03:9d:0e:bf:ea:f1:d0:b2:47:a9:78:c4:59:
d9:c3:6f:7c:b9:9b:48:da:cc:11:8c:4f:d7:b8:1f:21:bb:45:
79:a0:7e:d4:e9:6c:96:56:b9:f3:05:47:b8:fb:4d:f0:9e:1e:
27:72:b2:b0:f8:68:13:d8:16:7d:36:0f:8b:53:55:85:54:0b:
66:ce:57:24:c7:59:cc:92:4c:2d:91:2c:ef:0f:97:10:9e:d8:
cf:84:95:d2:ee:72:d1:a6:07:5d:34:d3:0c:71:a1:c7:5a:10:
23:4b:6c:f6:e5:7c:53:b8:e2:b7:5b:24:e6:5e:aa:23:50:7a:
df:24:e7:e5:7b:52:01:fe:ea:96:2d:e0:80:ca:5e:5f:75:50:
40:e5:21:45:ef:8d:e7:60:a1:0f:23:f7:25:bb:01:5b:e7:bf:
bd:bf:0c:95:6d:41:ff:cf:1a:43:cd:07:63:58:7d:46:b7:8b:
bf:45:c8:e8:b3:a2:3e:1d:81:64:90:67:5c:38:5b:03:53:de:
d2:ca:5d:d0:c9:57:ba:a9:98:03:36:e6:53:e1:bf:05:c6:36:
00:7d:f3:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 12:45:19 2025 by rpki-client