Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/12e679-856c-48ea-a062-959ebb905b3a/1/bBKrcGPIXf4i-nqZ2cb85eYWEDE.mft
File: bBKrcGPIXf4i-nqZ2cb85eYWEDE.mft (raw, json)
Hash identifier: HgQsxrYtlRDC8yvchcgyEsuP9vsGZswpt2A3SnNPGzI=
Subject key identifier: A3:4A:F0:8D:DB:07:72:3F:A3:3C:61:76:BE:74:92:F0:32:3C:AA:EE
Authority key identifier: 6C:12:AB:70:63:C8:5D:FE:22:FA:7A:99:D9:C6:FC:E5:E6:16:10:31
Certificate issuer: /CN=6c12ab7063c85dfe22fa7a99d9c6fce5e6161031
Certificate serial: 019845890168B67425BABF49FAEC9161AA76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bBKrcGPIXf4i-nqZ2cb85eYWEDE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/12e679-856c-48ea-a062-959ebb905b3a/1/bBKrcGPIXf4i-nqZ2cb85eYWEDE.mft
Manifest number: 15FF
Signing time: Sat 26 Jul 2025 07:01:03 +0000
Manifest this update: Sat 26 Jul 2025 07:01:03 +0000
Manifest next update: Sun 27 Jul 2025 07:01:03 +0000
Files and hashes: 1: 4ZrViR6MQ2LLwx-EpgYcmNOkhLU.roa (hash: CcPs0/7vgqCna/xx+mVGMJUsG3faAZo8Ob5SJoRyZWw=)
2: bBKrcGPIXf4i-nqZ2cb85eYWEDE.crl (hash: I44WVzmFWoM6lYaBxAorPcXbcGSU9PWmGXwQX+5JgPc=)
3: rUMFzM_6Km-2DqJ2YTtdSrWtUek.roa (hash: abXfjUUyhIhLutP9c/7/Y4Znd/9ps5Twdqn7uTEich0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/12e679-856c-48ea-a062-959ebb905b3a/1/bBKrcGPIXf4i-nqZ2cb85eYWEDE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/12e679-856c-48ea-a062-959ebb905b3a/1/bBKrcGPIXf4i-nqZ2cb85eYWEDE.mft
rsync://rpki.ripe.net/repository/DEFAULT/bBKrcGPIXf4i-nqZ2cb85eYWEDE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:89:01:68:b6:74:25:ba:bf:49:fa:ec:91:61:aa:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c12ab7063c85dfe22fa7a99d9c6fce5e6161031
Validity
Not Before: Jul 26 07:01:03 2025 GMT
Not After : Jul 27 07:01:03 2025 GMT
Subject: CN=a34af08ddb07723fa33c6176be7492f0323caaee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:59:ce:02:c6:d0:1f:d8:33:93:6b:d4:b3:0a:
80:fa:92:38:d4:30:e6:92:88:09:d7:38:7f:6c:eb:
c1:47:6f:38:54:09:43:4a:15:72:1b:52:8c:92:23:
90:9f:56:df:b7:72:dc:81:12:40:d7:df:34:0a:e9:
e5:df:8b:b1:9c:db:54:1d:d7:ce:1b:e7:3f:c9:db:
02:b5:8b:e8:f0:9d:c9:f2:56:67:ff:a2:89:ac:53:
0c:ef:1b:6f:8c:96:8f:ee:49:99:b9:53:e5:ab:e3:
ad:8a:1a:ba:e6:06:6d:ad:8a:71:1c:50:9e:79:e8:
bd:57:7b:6d:dc:5a:61:24:4c:ad:83:aa:19:fb:cd:
02:ee:c7:1e:61:a1:f4:67:96:94:2f:31:11:b0:2f:
87:8b:d4:b1:0d:1a:f8:e8:7e:ec:63:96:f3:9d:f1:
16:4e:90:3d:74:ed:b7:08:15:19:a4:a2:73:4f:ce:
c6:d4:ff:a5:6c:18:34:0d:56:cf:ae:d2:db:f9:d7:
86:05:95:4b:88:1a:6f:11:0b:c3:52:4c:a2:60:9e:
ab:27:48:71:13:66:e8:2d:0f:20:cc:d2:00:93:71:
8c:0d:40:6c:f8:ca:41:1e:c8:e4:7d:10:8e:aa:a5:
e8:48:82:5b:71:93:aa:7b:0d:5e:01:a3:8c:60:42:
21:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:4A:F0:8D:DB:07:72:3F:A3:3C:61:76:BE:74:92:F0:32:3C:AA:EE
X509v3 Authority Key Identifier:
keyid:6C:12:AB:70:63:C8:5D:FE:22:FA:7A:99:D9:C6:FC:E5:E6:16:10:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bBKrcGPIXf4i-nqZ2cb85eYWEDE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/12e679-856c-48ea-a062-959ebb905b3a/1/bBKrcGPIXf4i-nqZ2cb85eYWEDE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/12e679-856c-48ea-a062-959ebb905b3a/1/bBKrcGPIXf4i-nqZ2cb85eYWEDE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:54:7f:9d:e3:7a:be:7d:65:b2:98:7a:62:c7:3c:f0:80:c0:
1b:c4:e3:35:56:20:3c:d7:47:1b:15:0e:55:7d:a2:98:33:c7:
91:ac:ae:74:44:ce:0f:03:bd:52:e4:3e:7a:36:62:9a:57:ae:
b5:82:53:05:d9:f8:d2:67:51:96:37:52:e9:c9:be:3e:df:67:
e0:12:44:43:bb:3a:b4:77:e1:7e:34:24:ad:88:61:42:28:b9:
dd:57:f4:05:96:22:64:e0:83:ba:42:61:d5:68:bc:20:d5:9e:
97:f6:7c:e1:c3:01:38:4c:19:72:e3:97:73:48:38:89:f8:72:
f4:e2:fc:6c:ee:3e:38:ff:0a:0f:2e:26:ee:b0:26:c8:9b:47:
4b:36:5e:8d:b4:6f:df:eb:95:8b:59:3d:88:a9:fc:13:87:38:
06:56:83:29:08:55:b8:0e:ff:f0:6c:36:26:51:0f:86:82:ab:
f5:65:fa:1e:8c:bf:6f:bd:55:ba:61:9e:6d:74:9e:f2:b2:58:
5f:ae:60:8e:8c:f3:9a:34:26:9b:f5:bd:6d:76:69:59:bc:2a:
6c:bb:55:7e:cb:98:0b:a1:5d:3f:43:39:a3:68:3f:2c:db:cb:
8e:f9:57:80:22:59:c6:2c:6b:9f:e3:a7:2b:7a:40:bb:87:16:
02:19:15:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:38:09 2025 by rpki-client