Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/05e0ee-ae03-4124-b670-309b7b960d14/1/bz2JqB_CmfOcCS5PbQFzqanPvGU.mft
File: bz2JqB_CmfOcCS5PbQFzqanPvGU.mft (raw, json)
Hash identifier: 3EnvHT220Xls/asb3dz+h8JVgpRfBtMEcxkRzIZ/7+w=
Subject key identifier: 0D:8C:4F:F0:7A:E9:2F:E9:C0:8B:8F:11:CC:6B:9B:76:3C:C0:A7:4F
Authority key identifier: 6F:3D:89:A8:1F:C2:99:F3:9C:09:2E:4F:6D:01:73:A9:A9:CF:BC:65
Certificate issuer: /CN=6f3d89a81fc299f39c092e4f6d0173a9a9cfbc65
Certificate serial: 0198530D693424CAFCFBB718AA88E040B045
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bz2JqB_CmfOcCS5PbQFzqanPvGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/05e0ee-ae03-4124-b670-309b7b960d14/1/bz2JqB_CmfOcCS5PbQFzqanPvGU.mft
Manifest number: 160C
Signing time: Mon 28 Jul 2025 22:00:44 +0000
Manifest this update: Mon 28 Jul 2025 22:00:44 +0000
Manifest next update: Tue 29 Jul 2025 22:00:44 +0000
Files and hashes: 1: _OBCt42Qgl4wI2H058mG4uDYUOw.roa (hash: jWbxYRFs270K2f9wkh6LdpAj2cDPsQg7s0mhGOvBxRQ=)
2: bz2JqB_CmfOcCS5PbQFzqanPvGU.crl (hash: r2Iy/2VgKvVKdvun9vyzZQRMLZJdCbLK/m+/xAGQ6ZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/05e0ee-ae03-4124-b670-309b7b960d14/1/bz2JqB_CmfOcCS5PbQFzqanPvGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/05e0ee-ae03-4124-b670-309b7b960d14/1/bz2JqB_CmfOcCS5PbQFzqanPvGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/bz2JqB_CmfOcCS5PbQFzqanPvGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 22:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:0d:69:34:24:ca:fc:fb:b7:18:aa:88:e0:40:b0:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f3d89a81fc299f39c092e4f6d0173a9a9cfbc65
Validity
Not Before: Jul 28 22:00:44 2025 GMT
Not After : Jul 29 22:00:44 2025 GMT
Subject: CN=0d8c4ff07ae92fe9c08b8f11cc6b9b763cc0a74f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:82:65:15:25:79:8f:a6:7d:76:07:60:6a:fa:
c8:35:6c:6d:97:aa:52:d1:2e:fc:cc:b7:c9:2d:5b:
15:88:7c:d3:c7:ad:64:a0:d0:ab:21:f9:a8:92:21:
f6:e4:ca:de:09:93:02:00:3e:c2:67:38:ae:01:1f:
04:ec:74:ac:be:90:49:fe:73:5c:75:ea:c5:32:7f:
6b:94:c1:64:5c:d3:1f:01:1a:81:56:a3:7a:76:98:
8c:53:e1:c9:54:dc:02:98:27:5a:ec:c6:cb:c4:50:
9e:fd:1e:1d:c6:59:55:45:ad:2b:1c:f2:9d:0e:bd:
ac:d0:50:ce:46:34:cf:17:69:20:b0:99:0a:e7:7a:
ff:77:f2:ac:db:53:9e:62:44:35:6e:8d:cc:e6:81:
6f:df:19:da:44:c3:10:fb:34:32:c0:8b:24:54:89:
12:7c:8c:bb:ba:1a:4c:a3:71:b1:7f:b3:7c:b8:ed:
2d:d0:20:d6:7f:27:45:35:7b:eb:7a:c9:fd:c4:0e:
80:00:76:b0:0c:4e:58:f4:46:5b:89:a4:f8:62:2f:
f3:ef:46:a1:28:cf:74:a7:a1:36:b4:a2:5a:8b:df:
17:9d:d6:0e:21:69:bc:db:48:ea:a7:27:66:f0:91:
f7:a8:eb:18:d7:b1:c0:37:3d:10:ec:ab:de:fc:97:
32:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:8C:4F:F0:7A:E9:2F:E9:C0:8B:8F:11:CC:6B:9B:76:3C:C0:A7:4F
X509v3 Authority Key Identifier:
keyid:6F:3D:89:A8:1F:C2:99:F3:9C:09:2E:4F:6D:01:73:A9:A9:CF:BC:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bz2JqB_CmfOcCS5PbQFzqanPvGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/05e0ee-ae03-4124-b670-309b7b960d14/1/bz2JqB_CmfOcCS5PbQFzqanPvGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/05e0ee-ae03-4124-b670-309b7b960d14/1/bz2JqB_CmfOcCS5PbQFzqanPvGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:01:2e:0f:52:48:23:aa:86:90:e3:25:44:c9:3e:f4:24:2a:
ce:4d:d7:38:f5:86:48:d8:80:61:b6:55:73:e4:ec:d9:5e:4d:
67:d4:c0:95:90:ed:b9:ba:2e:26:cf:30:ee:eb:c4:01:ca:29:
e1:7c:3d:55:e8:32:ee:33:fb:ae:f3:4a:c0:3f:be:88:2a:ba:
2c:94:3c:f0:15:c4:f0:e1:b6:a7:9d:89:c7:c3:74:f4:20:23:
37:6c:e9:18:02:b4:f6:67:0b:b4:c4:ab:ac:ca:4c:c7:06:5c:
6a:bc:ac:14:23:e6:2f:07:27:86:6e:d4:07:56:3c:2f:61:37:
29:16:80:05:6e:72:c7:0b:28:57:61:a0:69:db:40:a3:dc:b4:
38:8f:af:17:c3:93:d8:9e:0e:f2:5a:7a:3e:8f:69:c2:c9:af:
18:8f:a6:00:f8:2b:66:9a:0b:20:ad:03:42:40:1f:d1:33:9f:
34:12:11:23:b3:c6:8f:99:50:d8:ea:85:a9:6a:3f:f1:10:e4:
74:12:b5:4f:2f:31:10:44:28:43:da:dc:21:b9:d6:a5:97:6a:
7f:0e:d6:ab:22:c2:84:01:af:d1:e7:84:51:45:7e:56:26:e0:
50:20:5a:64:01:35:ac:0d:92:02:10:dd:c3:3c:0d:2e:02:c0:
c2:af:d3:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 02:01:20 2025 by rpki-client