
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/c6e217-03ff-4396-adfe-255f0c51bbe0/1/BDaS8qHRvHb_f50pCRvtoIt7yWw.mft
File: BDaS8qHRvHb_f50pCRvtoIt7yWw.mft (raw, json)
Hash identifier: w4x0Fmwse8PRQXJeWES9pNaAWOQyYFEdybyoDQp1zvc=
Subject key identifier: 68:4C:B4:2A:22:3C:4C:CD:C5:26:89:74:7A:20:E2:0F:11:B5:DA:2A
Authority key identifier: 04:36:92:F2:A1:D1:BC:76:FF:7F:9D:29:09:1B:ED:A0:8B:7B:C9:6C
Certificate issuer: /CN=043692f2a1d1bc76ff7f9d29091beda08b7bc96c
Certificate serial: 01984AE5CEBB67D3B26791F281448B534860
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BDaS8qHRvHb_f50pCRvtoIt7yWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/c6e217-03ff-4396-adfe-255f0c51bbe0/1/BDaS8qHRvHb_f50pCRvtoIt7yWw.mft
Manifest number: 1602
Signing time: Sun 27 Jul 2025 08:00:31 +0000
Manifest this update: Sun 27 Jul 2025 08:00:31 +0000
Manifest next update: Mon 28 Jul 2025 08:00:31 +0000
Files and hashes: 1: BDaS8qHRvHb_f50pCRvtoIt7yWw.crl (hash: hA1s7u/V5dBQxEr3jo2ji4MJflaw4SXCvCCuwAwyhtw=)
2: F5ASQ_x2NzqLG2YPK-IJMnC68oA.roa (hash: rL17KB2ZeYz5uA3Maczd8dyCWpJw7h3YziKqc9PF9RM=)
3: fKRgm3J38CdqPYWraPnwaBHZfSw.roa (hash: faZcv/HNNKoTcf9eyD+mOEilysgTYS2fYEJ0tHKXiUk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/c6e217-03ff-4396-adfe-255f0c51bbe0/1/BDaS8qHRvHb_f50pCRvtoIt7yWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/c6e217-03ff-4396-adfe-255f0c51bbe0/1/BDaS8qHRvHb_f50pCRvtoIt7yWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BDaS8qHRvHb_f50pCRvtoIt7yWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:e5:ce:bb:67:d3:b2:67:91:f2:81:44:8b:53:48:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=043692f2a1d1bc76ff7f9d29091beda08b7bc96c
Validity
Not Before: Jul 27 08:00:31 2025 GMT
Not After : Jul 28 08:00:31 2025 GMT
Subject: CN=684cb42a223c4ccdc52689747a20e20f11b5da2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:01:99:42:05:29:d0:41:7a:87:da:48:b2:fa:
8b:ff:95:f1:84:6d:b7:8c:a2:5e:67:d8:c2:80:5c:
c9:93:bc:28:8d:83:d0:73:8e:f9:09:cc:49:82:b9:
0a:43:f7:e5:f9:ca:6e:7b:b8:ef:ab:51:86:d8:ba:
91:66:98:d0:be:51:29:c9:59:18:24:7c:aa:6c:e0:
c9:25:2e:0a:ca:74:65:fd:fa:e5:49:8e:33:a1:8d:
21:45:7b:2a:0f:20:30:92:92:e2:be:d5:e4:e5:20:
ef:9a:26:d9:00:6e:f9:ef:4d:45:fe:b9:6f:6f:76:
0b:35:a7:4c:df:89:87:62:ee:95:e0:b5:64:40:26:
b1:f8:9c:25:c2:0f:76:40:d7:30:c1:e4:d6:46:a2:
95:8a:f9:cf:23:11:97:7e:55:61:ae:c2:0b:51:a4:
8b:c1:46:bf:57:73:3c:ed:59:91:cc:30:76:30:7d:
33:58:45:92:7a:af:a2:f0:cf:49:f1:15:02:44:64:
f1:9a:6c:38:b0:36:86:47:28:3b:e5:89:8c:5d:99:
26:43:c6:84:4f:94:45:d0:ed:49:1e:5c:b0:4f:21:
cc:a3:e0:9b:a5:3e:26:fe:52:fa:ea:9c:36:5a:66:
70:27:f2:28:3a:d4:18:63:fc:11:dc:2b:92:97:cf:
f8:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:4C:B4:2A:22:3C:4C:CD:C5:26:89:74:7A:20:E2:0F:11:B5:DA:2A
X509v3 Authority Key Identifier:
keyid:04:36:92:F2:A1:D1:BC:76:FF:7F:9D:29:09:1B:ED:A0:8B:7B:C9:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BDaS8qHRvHb_f50pCRvtoIt7yWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c6e217-03ff-4396-adfe-255f0c51bbe0/1/BDaS8qHRvHb_f50pCRvtoIt7yWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c6e217-03ff-4396-adfe-255f0c51bbe0/1/BDaS8qHRvHb_f50pCRvtoIt7yWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:43:e9:08:0c:02:2a:ae:bb:b1:55:f8:4e:5c:85:24:83:56:
5c:ca:3d:73:0f:f8:1f:88:89:f9:57:61:e3:c1:89:fb:25:83:
a9:a5:97:81:3c:2a:df:9b:65:44:eb:fa:5b:e6:1e:00:07:30:
86:25:c9:fc:a7:d2:87:ca:94:19:20:4a:2d:9d:f7:fb:51:38:
1e:1e:24:69:1e:ca:5e:a9:67:da:e9:c3:f9:a6:27:b2:6c:2d:
9b:94:4f:23:c1:94:e7:a8:d2:29:9a:5c:3f:b9:35:5c:a3:4b:
05:b0:fc:a1:c3:3c:3f:ee:a5:c4:fe:b0:3f:e9:dd:2b:85:51:
c3:a0:6c:bd:5f:b7:8c:0b:78:e9:8b:f0:94:55:04:f7:9b:5c:
8c:e2:55:ab:55:d5:8c:eb:8d:c6:24:11:ec:40:57:22:ac:b4:
01:ad:ca:87:ec:73:6c:f5:47:5b:3c:3f:14:77:ce:d8:26:8b:
f5:48:7d:34:01:af:cf:4e:19:ec:0b:de:44:02:d1:80:21:a8:
80:bb:4c:a7:14:41:49:f3:f4:07:83:6f:9d:80:e6:01:ae:cb:
09:bc:c0:ef:ef:d7:04:13:de:c5:9f:e5:ad:bb:0e:7d:50:42:
d7:11:f3:7b:b0:db:75:9d:fa:4e:f7:7e:81:55:4a:ff:b5:9c:
5e:96:b8:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:37:54 2025 by rpki-client