Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/344e2c-1c56-43ab-8108-eaf68b59e599/1/bP02Bzbx-myXcPy0i-WUvmCeWz4.mft
File: bP02Bzbx-myXcPy0i-WUvmCeWz4.mft (raw, json)
Hash identifier: b/L3TVpJ8oZC373fdJnXcGT0n8MnZdRSDG/Y6HMzwFs=
Subject key identifier: C5:FB:91:D2:49:A7:55:D3:26:41:71:B8:79:0F:AB:19:00:2B:D7:09
Authority key identifier: 6C:FD:36:07:36:F1:FA:6C:97:70:FC:B4:8B:E5:94:BE:60:9E:5B:3E
Certificate issuer: /CN=6cfd360736f1fa6c9770fcb48be594be609e5b3e
Certificate serial: 01984B53D2C276B730328705964CE4BD7E0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bP02Bzbx-myXcPy0i-WUvmCeWz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/344e2c-1c56-43ab-8108-eaf68b59e599/1/bP02Bzbx-myXcPy0i-WUvmCeWz4.mft
Manifest number: 1602
Signing time: Sun 27 Jul 2025 10:00:41 +0000
Manifest this update: Sun 27 Jul 2025 10:00:41 +0000
Manifest next update: Mon 28 Jul 2025 10:00:41 +0000
Files and hashes: 1: DC68jaJzKs4sWOyzS3O5wTgtZNE.roa (hash: 1O1Vjs/w38AlpgFvrtScFHTsBaANSIlvVfPi7Rtab9k=)
2: Pp9dfiM_MT5SdF1T82CtQd0OZJw.roa (hash: h3fdCt6Okubry0k+FISuRK++uR3zvuFiodlZnV6ykfI=)
3: bP02Bzbx-myXcPy0i-WUvmCeWz4.crl (hash: kwwVX5dN2amOKvG3WqFWyMwzwXRDCFQVSedeDp8pUm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/344e2c-1c56-43ab-8108-eaf68b59e599/1/bP02Bzbx-myXcPy0i-WUvmCeWz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/344e2c-1c56-43ab-8108-eaf68b59e599/1/bP02Bzbx-myXcPy0i-WUvmCeWz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/bP02Bzbx-myXcPy0i-WUvmCeWz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:53:d2:c2:76:b7:30:32:87:05:96:4c:e4:bd:7e:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cfd360736f1fa6c9770fcb48be594be609e5b3e
Validity
Not Before: Jul 27 10:00:41 2025 GMT
Not After : Jul 28 10:00:41 2025 GMT
Subject: CN=c5fb91d249a755d3264171b8790fab19002bd709
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b9:10:8a:a3:e4:07:16:92:c6:c8:aa:a2:c2:
61:d5:ee:52:46:d2:d2:b8:90:15:0d:4e:86:19:4a:
55:12:6a:75:71:76:82:73:ef:ae:4c:1f:53:ea:88:
18:58:52:35:7a:78:ab:32:f1:68:7d:ec:b0:cf:6f:
92:91:48:0c:ca:f7:ee:e0:ce:18:33:1d:df:80:d2:
88:71:cf:a0:13:81:59:fc:8d:ae:06:7f:d1:f9:af:
7d:50:62:4a:45:dd:ff:0b:77:b5:01:b9:97:eb:d0:
60:7f:1e:0a:9f:fd:08:6b:bf:fb:96:aa:c3:0d:0c:
26:8c:4f:6d:14:e4:a3:2d:79:96:3d:1f:87:3d:cc:
01:7a:28:cf:d3:08:f7:a8:78:2f:51:e2:de:1f:3f:
45:3d:b1:e9:78:fa:eb:36:29:d6:8e:60:9e:13:39:
fd:29:ca:bf:88:c7:d7:c1:2a:1c:1b:9f:47:a5:3f:
e7:fe:55:d8:a0:86:79:aa:84:4d:69:30:41:e8:01:
d9:9f:91:e8:35:6a:bd:a7:28:30:f1:7a:b2:f5:53:
4c:30:6a:08:4c:23:54:fd:12:3e:05:04:8f:89:32:
43:9c:2c:e9:fe:ea:e5:f9:6b:da:1f:c6:72:0e:0b:
d4:18:93:c2:83:d1:24:08:ab:c4:94:81:ee:ae:42:
e9:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:FB:91:D2:49:A7:55:D3:26:41:71:B8:79:0F:AB:19:00:2B:D7:09
X509v3 Authority Key Identifier:
keyid:6C:FD:36:07:36:F1:FA:6C:97:70:FC:B4:8B:E5:94:BE:60:9E:5B:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bP02Bzbx-myXcPy0i-WUvmCeWz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/344e2c-1c56-43ab-8108-eaf68b59e599/1/bP02Bzbx-myXcPy0i-WUvmCeWz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/344e2c-1c56-43ab-8108-eaf68b59e599/1/bP02Bzbx-myXcPy0i-WUvmCeWz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:c0:13:70:61:5a:1e:a4:66:3b:40:f5:18:94:63:c6:cd:67:
45:fc:d3:df:47:a2:f2:ba:4f:4b:c8:5d:a1:53:e4:f5:69:c0:
87:d6:a5:15:2c:c7:cc:19:df:e8:32:35:12:fc:d5:9b:08:73:
8b:c3:91:08:7c:15:dc:02:b3:a1:37:c3:4a:2f:58:53:e9:3a:
a4:f3:71:08:ec:d3:37:91:6d:aa:82:a1:00:f3:94:fc:8d:ac:
8c:ba:54:1d:cd:b2:93:22:b5:a3:f7:30:06:3a:3f:8e:f0:71:
06:02:14:9a:05:16:ba:58:13:96:44:e1:2e:95:61:e1:2c:fd:
32:10:0f:91:64:bc:e3:b5:c3:db:82:d4:7f:d0:4d:06:65:98:
15:f8:00:fe:c7:c5:42:ed:f7:fe:ab:87:cc:b9:05:99:39:79:
18:e7:f3:a8:e2:ca:66:a8:ec:50:59:fa:d3:e6:ea:19:9e:04:
e1:a6:3e:e6:5a:9a:c9:c2:1f:89:ce:f0:3c:07:c6:ca:de:4c:
d6:30:55:04:5b:0a:69:df:ba:f3:6c:d7:73:60:32:79:45:0d:
a6:a1:07:20:80:81:9f:e2:0c:02:8e:1b:03:bc:97:bf:a0:b5:
65:2d:1b:75:4f:fa:b4:af:06:9c:f1:0e:e8:68:17:da:d4:86:
26:12:1f:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:02:44 2025 by rpki-client