Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/5d6fdd-6d41-4125-8bb5-8f32d03194b0/1/9BGAp8UWZ-w4dedl8kX5CThhJXE.mft
File: 9BGAp8UWZ-w4dedl8kX5CThhJXE.mft (raw, json)
Hash identifier: dxTJHynddGc4CVqpQ4AyTIXHCkexBX3sOxJhgM/o78I=
Subject key identifier: BD:EA:79:83:E0:D3:16:A5:CA:F3:82:FF:BF:31:51:85:4D:9A:E4:EF
Authority key identifier: F4:11:80:A7:C5:16:67:EC:38:75:E7:65:F2:45:F9:09:38:61:25:71
Certificate issuer: /CN=f41180a7c51667ec3875e765f245f90938612571
Certificate serial: 01984B549864F34CBAB6BF3E92151C4AD43C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9BGAp8UWZ-w4dedl8kX5CThhJXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/5d6fdd-6d41-4125-8bb5-8f32d03194b0/1/9BGAp8UWZ-w4dedl8kX5CThhJXE.mft
Manifest number: 06D2
Signing time: Sun 27 Jul 2025 10:01:31 +0000
Manifest this update: Sun 27 Jul 2025 10:01:31 +0000
Manifest next update: Mon 28 Jul 2025 10:01:31 +0000
Files and hashes: 1: 9BGAp8UWZ-w4dedl8kX5CThhJXE.crl (hash: OG6M9ze2IfxsxLsMqYuBx3oNBdGiV70l6q3Y5ULp0h4=)
2: Fu214pqREiMNysqnZ9A7Q5Jm5yE.roa (hash: 3AsnPktXMzidA1tsY7S+Rc/2XsSBvEXEVlda+G5oNPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/5d6fdd-6d41-4125-8bb5-8f32d03194b0/1/9BGAp8UWZ-w4dedl8kX5CThhJXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/5d6fdd-6d41-4125-8bb5-8f32d03194b0/1/9BGAp8UWZ-w4dedl8kX5CThhJXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9BGAp8UWZ-w4dedl8kX5CThhJXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 09:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:54:98:64:f3:4c:ba:b6:bf:3e:92:15:1c:4a:d4:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f41180a7c51667ec3875e765f245f90938612571
Validity
Not Before: Jul 27 10:01:31 2025 GMT
Not After : Jul 28 10:01:31 2025 GMT
Subject: CN=bdea7983e0d316a5caf382ffbf3151854d9ae4ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:01:42:a0:6e:7d:88:60:7a:21:f7:fc:f9:b6:
54:0d:2b:ab:0c:61:fa:4a:ff:19:96:ac:15:d5:46:
5f:95:d3:93:75:54:08:c0:a5:01:b2:a1:5e:d6:07:
1d:fb:8a:da:27:1a:de:a3:5c:35:18:77:a4:35:c8:
98:a0:64:0d:ff:2f:bc:99:61:ce:6d:e3:07:8d:64:
26:f8:12:d6:7c:64:b4:9b:db:d1:89:ba:89:4e:be:
b9:ca:34:01:f3:61:2d:bb:b2:47:7d:d3:0c:3c:ca:
a9:fa:a2:77:a2:3c:d8:c7:55:2f:3c:bc:75:23:b1:
0a:27:e2:b0:73:75:e3:3e:f1:ef:5d:7c:74:ac:f4:
ca:56:f3:86:a6:e9:fe:15:fd:3c:49:6a:5a:e7:b4:
23:7b:9b:7c:3e:46:aa:7b:a3:ae:5b:db:9f:ae:2b:
a8:18:07:0a:f7:5d:31:d9:96:d3:ab:85:fb:ff:91:
a0:c0:21:95:ca:54:45:01:92:77:96:29:2f:7b:06:
fe:1c:93:d4:0f:11:f4:e9:eb:4a:ab:9d:60:aa:da:
28:2a:1a:1f:79:d0:1d:9e:95:ff:62:2e:8c:2f:f7:
c3:97:17:02:12:7e:02:d5:ba:e0:37:49:34:41:97:
e9:d3:3d:a0:45:78:07:18:0c:56:2d:d1:5f:d4:00:
86:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:EA:79:83:E0:D3:16:A5:CA:F3:82:FF:BF:31:51:85:4D:9A:E4:EF
X509v3 Authority Key Identifier:
keyid:F4:11:80:A7:C5:16:67:EC:38:75:E7:65:F2:45:F9:09:38:61:25:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9BGAp8UWZ-w4dedl8kX5CThhJXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5d6fdd-6d41-4125-8bb5-8f32d03194b0/1/9BGAp8UWZ-w4dedl8kX5CThhJXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5d6fdd-6d41-4125-8bb5-8f32d03194b0/1/9BGAp8UWZ-w4dedl8kX5CThhJXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:f7:6c:e1:67:4a:6f:c4:31:f2:d6:4c:81:b7:ce:68:3b:24:
d8:26:b6:2b:64:1d:25:f6:da:8b:28:d8:f2:3d:d1:2f:e3:99:
35:45:14:c4:b2:66:d4:33:14:8d:3d:a9:70:14:1f:e0:1c:48:
94:58:db:53:d8:13:b3:54:39:f3:c9:fc:fa:e6:14:cc:72:56:
db:f6:80:58:4e:0a:73:2d:8b:f6:a4:cf:7d:a1:85:d4:15:c2:
89:f2:d5:24:c4:ab:fa:04:85:1b:86:1d:4a:05:5c:6a:29:17:
00:5b:6a:db:0c:a6:86:c3:b6:64:4b:c6:67:da:77:6f:f2:8a:
b2:4d:2f:18:f0:5e:72:b8:04:f2:24:72:89:7d:5e:da:83:1b:
ee:01:2d:a4:c2:d6:e0:5e:93:52:69:d7:b6:3f:41:75:3a:e9:
4f:1f:f7:7d:c7:11:33:20:46:57:d7:06:91:a9:31:37:1c:05:
1a:b9:e1:b8:78:60:d8:11:2d:00:6e:ed:d0:3f:9d:29:42:c9:
31:12:47:9a:dc:61:4e:6a:c4:7d:02:eb:ab:75:21:c9:22:3c:
7c:4b:00:b6:cc:ca:45:bb:57:2e:d4:95:2e:b2:e5:c3:30:66:
6f:a1:2f:91:98:8d:46:70:90:71:cb:de:60:0d:f3:06:7e:2f:
8d:f6:ae:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 15:35:24 2025 by rpki-client