Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/dd7764-1a58-45e6-ad83-32a60912ef40/1/bG3bcucmgpjBcUWDExu-SuTvCRY.mft
File: bG3bcucmgpjBcUWDExu-SuTvCRY.mft (raw, json)
Hash identifier: VdxTkB27E7v1ksSzx8H+YFsPJX48O8RPp3U9TqY1LOo=
Subject key identifier: AB:89:12:62:C3:36:79:4C:05:28:E6:C9:C9:19:D8:82:A0:28:4D:BA
Authority key identifier: 6C:6D:DB:72:E7:26:82:98:C1:71:45:83:13:1B:BE:4A:E4:EF:09:16
Certificate issuer: /CN=6c6ddb72e7268298c1714583131bbe4ae4ef0916
Certificate serial: 019849D343A2EC45869D251C0918981F9C63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bG3bcucmgpjBcUWDExu-SuTvCRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/dd7764-1a58-45e6-ad83-32a60912ef40/1/bG3bcucmgpjBcUWDExu-SuTvCRY.mft
Manifest number: 0A65
Signing time: Sun 27 Jul 2025 03:00:38 +0000
Manifest this update: Sun 27 Jul 2025 03:00:38 +0000
Manifest next update: Mon 28 Jul 2025 03:00:38 +0000
Files and hashes: 1: 29nd_dOa0jOSjO-BSVNW7WFQmeU.roa (hash: PQzBa+M3c2965MBEIUlCwMA/PPxb1gOFyUG0cf3P01E=)
2: bG3bcucmgpjBcUWDExu-SuTvCRY.crl (hash: 8HeiNK7ifY/YLv2o0ObmAOoKygweZi4VZl5ub2h2W/o=)
3: zSoruqrv0RMRlvtEdSofVrHKUNM.roa (hash: zchVE5WsD0we5YnngEjVpAF61yVGUwwg3Aq8gS0jfiI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/dd7764-1a58-45e6-ad83-32a60912ef40/1/bG3bcucmgpjBcUWDExu-SuTvCRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/dd7764-1a58-45e6-ad83-32a60912ef40/1/bG3bcucmgpjBcUWDExu-SuTvCRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bG3bcucmgpjBcUWDExu-SuTvCRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:43:a2:ec:45:86:9d:25:1c:09:18:98:1f:9c:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c6ddb72e7268298c1714583131bbe4ae4ef0916
Validity
Not Before: Jul 27 03:00:38 2025 GMT
Not After : Jul 28 03:00:38 2025 GMT
Subject: CN=ab891262c336794c0528e6c9c919d882a0284dba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:96:74:02:3e:60:1e:b2:51:22:b5:1b:71:0f:
78:95:0f:f1:6e:99:e0:16:73:9b:c6:64:20:14:9e:
10:c2:dc:13:3b:b6:99:a3:51:29:c6:c7:01:4a:d2:
cc:0c:65:b9:56:8a:85:6d:9d:09:30:c7:a6:c0:56:
01:a6:e2:55:bb:17:ed:e2:af:17:45:a9:ad:bb:89:
1d:07:bd:f7:2d:0e:29:4b:09:64:da:0c:53:22:88:
ae:eb:ef:bc:f8:74:e2:f7:2a:7a:09:eb:0e:e0:a1:
2e:2f:07:1b:60:a7:3b:fb:92:e5:6b:7a:cc:f7:fe:
35:7d:c7:a3:9d:ed:e5:7c:a1:66:ac:7c:81:b8:e8:
09:4a:c7:81:ee:9e:da:f3:40:be:ea:27:f8:9c:d0:
d9:ff:69:5d:f4:46:f6:96:b8:7e:78:eb:78:d8:76:
4e:d2:ec:00:8b:91:91:06:e7:10:f4:d6:eb:bf:e9:
b3:96:e6:48:07:28:e4:f7:0b:60:00:ab:73:88:24:
7c:e3:d0:0b:6d:08:cf:58:ee:ce:f9:5a:37:be:41:
73:78:5a:bd:20:7c:7e:38:4c:d0:f4:c5:5a:99:bd:
8d:43:42:ae:64:ac:01:07:5d:d4:ef:84:2d:55:39:
37:23:c2:ff:fa:1e:49:64:2d:c4:04:50:5a:7a:c2:
ad:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:89:12:62:C3:36:79:4C:05:28:E6:C9:C9:19:D8:82:A0:28:4D:BA
X509v3 Authority Key Identifier:
keyid:6C:6D:DB:72:E7:26:82:98:C1:71:45:83:13:1B:BE:4A:E4:EF:09:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bG3bcucmgpjBcUWDExu-SuTvCRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/dd7764-1a58-45e6-ad83-32a60912ef40/1/bG3bcucmgpjBcUWDExu-SuTvCRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/dd7764-1a58-45e6-ad83-32a60912ef40/1/bG3bcucmgpjBcUWDExu-SuTvCRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:15:f5:bd:2c:97:3a:85:02:47:82:2a:f2:a8:fa:2f:72:18:
8e:63:e8:44:50:75:95:9d:d4:d9:5b:e4:41:c1:a7:ac:54:cc:
ff:4c:1f:69:89:1b:d6:94:d0:28:c6:20:3d:72:90:c7:c3:5f:
cd:52:cb:82:a9:0c:76:93:4e:29:b2:de:6b:26:c5:57:b5:c2:
76:f1:46:db:9c:e0:2c:bf:90:b8:e5:df:34:40:91:cc:c7:83:
b1:ae:6f:f3:b5:36:fe:ac:6b:25:a9:37:45:cd:48:1a:fb:cd:
db:a7:88:73:3e:13:c8:78:f2:25:b1:d8:54:d5:94:4b:11:43:
ee:89:8e:6e:36:0a:69:69:82:0a:8a:cb:be:a5:1f:0d:1d:37:
8e:d9:ec:8b:c0:65:61:38:d0:69:22:a3:46:15:dc:7c:9d:7f:
15:9e:8e:5f:bb:49:f0:dc:13:a5:56:7d:71:a7:76:9b:78:a7:
a7:52:fb:ff:76:1c:9c:32:75:1f:61:e1:dc:bc:db:a6:f5:67:
a4:36:4c:ac:b2:61:0d:7f:2d:65:ed:c5:f9:aa:07:06:8d:5d:
e7:46:a9:a0:5d:0c:3d:f4:d7:2f:d4:5f:06:32:5c:86:d3:aa:
77:b8:44:ee:87:8a:2f:94:70:24:64:09:b3:b2:c8:43:a3:f5:
99:46:77:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:19:56 2025 by rpki-client