Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/64a392-372e-48a6-a0e2-f5ad167d8494/1/bAqWFKxOEOei4qW8EvhiMGTInvk.mft
File: bAqWFKxOEOei4qW8EvhiMGTInvk.mft (raw, json)
Hash identifier: v4pA2tNmxbMmZuKwBtihfDNoA5HrV5rF4wQEKUu+R/8=
Subject key identifier: 96:4B:BB:29:17:29:4A:AB:ED:1D:81:12:99:6F:BF:7D:7F:DB:7F:EC
Authority key identifier: 6C:0A:96:14:AC:4E:10:E7:A2:E2:A5:BC:12:F8:62:30:64:C8:9E:F9
Certificate issuer: /CN=6c0a9614ac4e10e7a2e2a5bc12f8623064c89ef9
Certificate serial: 01985268073C547FA061A810968DF07EF0B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bAqWFKxOEOei4qW8EvhiMGTInvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/64a392-372e-48a6-a0e2-f5ad167d8494/1/bAqWFKxOEOei4qW8EvhiMGTInvk.mft
Manifest number: 1604
Signing time: Mon 28 Jul 2025 19:00:05 +0000
Manifest this update: Mon 28 Jul 2025 19:00:05 +0000
Manifest next update: Tue 29 Jul 2025 19:00:05 +0000
Files and hashes: 1: F67gDfZc4Jx2LCZVEE2FihPJzHw.roa (hash: yPyUtL/skPgjKLNjvoKJs7SdqhdnCeGN7LFhVgvBzCk=)
2: bAqWFKxOEOei4qW8EvhiMGTInvk.crl (hash: Iv7dXCsXj1rw5KN2sqMNeaaswCx28kjJipjU+SOH5sw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/64a392-372e-48a6-a0e2-f5ad167d8494/1/bAqWFKxOEOei4qW8EvhiMGTInvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/64a392-372e-48a6-a0e2-f5ad167d8494/1/bAqWFKxOEOei4qW8EvhiMGTInvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/bAqWFKxOEOei4qW8EvhiMGTInvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 19:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:52:68:07:3c:54:7f:a0:61:a8:10:96:8d:f0:7e:f0:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c0a9614ac4e10e7a2e2a5bc12f8623064c89ef9
Validity
Not Before: Jul 28 19:00:05 2025 GMT
Not After : Jul 29 19:00:05 2025 GMT
Subject: CN=964bbb2917294aabed1d8112996fbf7d7fdb7fec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:80:2b:51:c4:f8:8d:3f:df:0b:85:b9:84:74:
c5:f0:e2:83:37:2f:36:d7:7b:44:2e:52:bf:c6:5b:
37:ad:fe:c2:1f:e6:c3:d9:d2:ec:db:81:ce:de:ca:
48:04:ea:90:71:f9:24:50:fe:98:01:c1:6b:c5:40:
fe:0c:db:35:60:39:f8:b5:5f:59:8e:99:5b:aa:87:
7e:38:91:bd:11:9f:7f:10:f3:2b:9f:e6:f9:c2:9b:
24:64:01:14:cb:aa:52:d7:3d:f4:38:cd:3f:9f:15:
21:26:90:54:7b:50:ef:37:bd:a7:de:8c:8b:6d:e7:
6d:69:43:3e:af:d1:46:a2:14:19:ce:3b:4c:f7:4b:
90:7d:8f:a4:77:da:0d:f2:78:60:95:54:95:a3:2b:
b3:a7:6b:d2:1d:43:88:56:75:bf:73:82:0d:6f:b3:
ff:6d:0e:a2:37:ae:d5:4e:df:1e:b0:73:57:23:6d:
00:95:72:16:dc:7e:a8:71:63:8b:1b:89:7a:e5:cc:
a7:de:71:8f:f9:3e:fb:61:6c:c2:5b:f9:0f:27:7f:
b8:e6:1e:7e:2a:53:ce:73:ca:a0:d2:7b:9e:3a:3f:
1f:c8:fb:a4:de:5d:af:d2:ee:2e:9f:05:1a:2e:8d:
78:55:b7:0a:45:76:f7:da:fa:13:7d:c2:85:c6:eb:
41:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:4B:BB:29:17:29:4A:AB:ED:1D:81:12:99:6F:BF:7D:7F:DB:7F:EC
X509v3 Authority Key Identifier:
keyid:6C:0A:96:14:AC:4E:10:E7:A2:E2:A5:BC:12:F8:62:30:64:C8:9E:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bAqWFKxOEOei4qW8EvhiMGTInvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/64a392-372e-48a6-a0e2-f5ad167d8494/1/bAqWFKxOEOei4qW8EvhiMGTInvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/64a392-372e-48a6-a0e2-f5ad167d8494/1/bAqWFKxOEOei4qW8EvhiMGTInvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:1d:53:f2:90:07:bb:9d:3d:52:14:d2:fb:4a:a0:a9:6f:ad:
21:5c:3a:02:db:fa:e7:5a:18:0a:c5:bb:cb:81:c7:3f:2f:af:
b2:d3:17:d7:94:e0:a1:95:98:f6:e4:81:0f:6b:b6:e9:b8:99:
d7:48:8a:53:a8:b1:8a:c1:da:4d:80:03:fb:a0:af:a3:39:f0:
dc:1a:86:59:56:36:24:ed:6a:4d:3a:6e:10:71:48:1c:c8:e7:
f8:a6:2b:13:ac:21:c0:24:9b:06:ae:60:dc:b4:b6:1c:82:2c:
e3:69:33:9a:ff:36:7f:8e:9c:ee:ab:9a:b8:dc:00:57:df:53:
74:7f:5a:9f:48:07:83:0f:63:51:61:65:ac:c7:43:3e:4d:ee:
48:02:b0:1e:ed:d1:18:42:81:57:1b:d7:34:58:e4:85:3f:21:
a8:8d:1e:59:f0:08:2c:48:db:24:3c:48:cd:41:09:92:f8:b2:
dd:45:50:75:30:49:af:e7:68:7c:cd:35:da:76:8b:39:c9:0a:
93:01:7c:f3:8a:29:31:f5:5f:5f:72:a4:9d:a4:48:ed:df:d7:
e4:c5:b7:83:5f:48:ad:15:8c:46:64:fe:c5:65:ea:22:8c:f5:
50:83:ed:fc:8d:af:0f:4a:51:8a:b7:35:22:a4:42:65:1e:e7:
98:72:f4:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 01:55:50 2025 by rpki-client