Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/7f997c-07cf-44c2-bdf0-66a329b6afad/1/bXcB1YUEkfUCme-T8tdAm3jNbJY.mft
File: bXcB1YUEkfUCme-T8tdAm3jNbJY.mft (raw, json)
Hash identifier: HgXInvCc5sGY2X+5yFtPZZxM3e1ZGrf6iRNJRwKWxZg=
Subject key identifier: A8:2F:0A:B4:EB:C4:D7:01:07:CA:6F:B0:97:FD:24:1B:C2:1C:06:0D
Authority key identifier: 6D:77:01:D5:85:04:91:F5:02:99:EF:93:F2:D7:40:9B:78:CD:6C:96
Certificate issuer: /CN=6d7701d5850491f50299ef93f2d7409b78cd6c96
Certificate serial: 019854FBF286B762771311F796EB16084463
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXcB1YUEkfUCme-T8tdAm3jNbJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/7f997c-07cf-44c2-bdf0-66a329b6afad/1/bXcB1YUEkfUCme-T8tdAm3jNbJY.mft
Manifest number: 1474
Signing time: Tue 29 Jul 2025 07:00:54 +0000
Manifest this update: Tue 29 Jul 2025 07:00:54 +0000
Manifest next update: Wed 30 Jul 2025 07:00:54 +0000
Files and hashes: 1: 2KIRExbLtGmhtukhHSshDYZqZYU.roa (hash: e/XJlDAv9fIgfof/gpzNCtKITxsPIC/gKrF0rJCVeE8=)
2: F_jHPU3_A3NtfG3Ak3x69UFaxVY.roa (hash: VOxoNM7Ut17hlIuVaKSt03PbZmGteVPLxGUSpYz/b7g=)
3: bXcB1YUEkfUCme-T8tdAm3jNbJY.crl (hash: bpypcSWXwtMf8RsxSix21YMlzMXm+tkrRQWitty8K1s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/7f997c-07cf-44c2-bdf0-66a329b6afad/1/bXcB1YUEkfUCme-T8tdAm3jNbJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/7f997c-07cf-44c2-bdf0-66a329b6afad/1/bXcB1YUEkfUCme-T8tdAm3jNbJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bXcB1YUEkfUCme-T8tdAm3jNbJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 07:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:54:fb:f2:86:b7:62:77:13:11:f7:96:eb:16:08:44:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d7701d5850491f50299ef93f2d7409b78cd6c96
Validity
Not Before: Jul 29 07:00:54 2025 GMT
Not After : Jul 30 07:00:54 2025 GMT
Subject: CN=a82f0ab4ebc4d70107ca6fb097fd241bc21c060d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:80:61:76:38:5b:a3:c0:08:17:e5:e6:38:1b:
7c:89:db:55:38:51:93:8d:1e:17:ab:1f:ce:94:2d:
96:a6:07:30:a8:93:08:a4:3b:79:42:bd:8a:14:e2:
8d:f7:21:11:6c:c1:ad:0b:b8:b8:8e:92:6e:85:d5:
21:8d:84:1e:1c:d3:ca:f2:31:cd:60:1c:ba:3e:e8:
80:08:18:12:f6:c4:cb:64:25:28:cf:54:bf:88:d9:
8e:d6:b7:97:39:74:94:9a:19:0b:48:6c:1a:f8:6c:
8a:62:80:b9:6f:fc:48:e0:a7:72:cd:46:80:e6:d0:
35:58:d4:b3:78:d9:70:e5:0b:6a:6c:d3:97:b1:ec:
49:32:43:a9:10:cb:a4:2c:ef:ab:d2:7d:44:58:8f:
04:14:50:21:30:e7:e3:aa:54:36:39:94:68:cd:f1:
b5:7a:ea:1f:04:60:ff:96:11:31:05:4e:87:12:39:
f2:ad:00:38:68:c5:ec:6a:fb:4a:04:20:35:43:f3:
1d:62:13:90:99:57:f2:46:cd:2d:02:50:db:d0:62:
d1:e1:9c:70:77:bf:b5:32:fd:bd:f8:a8:58:f6:80:
0c:30:00:1a:a5:b6:c7:8e:ff:c4:4a:00:46:54:2e:
b7:b9:39:cc:8e:c2:6a:6d:58:93:00:78:5f:63:98:
6b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:2F:0A:B4:EB:C4:D7:01:07:CA:6F:B0:97:FD:24:1B:C2:1C:06:0D
X509v3 Authority Key Identifier:
keyid:6D:77:01:D5:85:04:91:F5:02:99:EF:93:F2:D7:40:9B:78:CD:6C:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXcB1YUEkfUCme-T8tdAm3jNbJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/7f997c-07cf-44c2-bdf0-66a329b6afad/1/bXcB1YUEkfUCme-T8tdAm3jNbJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/7f997c-07cf-44c2-bdf0-66a329b6afad/1/bXcB1YUEkfUCme-T8tdAm3jNbJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:91:4d:2b:ce:23:18:1f:b2:69:71:f9:3d:c0:45:cd:d4:82:
46:68:cb:c6:bc:0c:83:e9:56:14:bc:ce:8f:79:af:06:c3:9c:
14:07:05:7e:3f:2e:f3:d2:78:df:87:93:58:96:64:fc:bb:af:
69:e8:b0:a9:ae:dd:21:eb:57:02:64:af:0a:d1:3c:df:ab:27:
98:82:16:ac:88:ef:aa:63:43:a4:ca:03:57:1e:a3:49:e7:c4:
e6:54:33:d6:01:59:c2:56:c9:f9:75:6e:a5:7e:e0:70:2f:a6:
c1:f8:7e:ac:a4:45:1b:24:47:ba:d5:af:9a:97:08:a3:0c:da:
d1:47:7b:3c:f5:e2:7a:38:12:86:97:2f:b1:6e:98:7f:f6:3b:
2a:e2:a6:95:ca:e7:6b:d2:62:78:a5:63:12:c1:21:eb:68:c1:
71:f9:95:f6:16:7e:48:43:25:ab:2b:cc:61:70:36:be:4c:dc:
37:86:56:5b:31:74:51:51:66:49:85:a8:19:eb:9a:b8:4f:1c:
52:e8:b6:c0:57:af:84:f9:f7:50:5a:82:6f:b3:47:fc:62:85:
4a:2c:77:6f:2e:d1:19:e4:ab:0a:86:a5:03:c0:b3:2e:6f:e9:
99:9b:cc:69:d0:50:0a:18:2f:2a:0b:47:82:a0:92:cd:55:f1:
fd:2c:79:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 14:47:18 2025 by rpki-client