Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/56452b-4b93-41e5-a8a2-61b52637921b/1/BT6UUB8P0s3qPC57RjGObn9RX3M.mft
File: BT6UUB8P0s3qPC57RjGObn9RX3M.mft (raw, json)
Hash identifier: g0zjyWu7PqVEQCY3DM/E1yg02IvzWdzD52UZHaS6g7I=
Subject key identifier: A1:77:B5:92:00:A0:45:3B:FB:A6:9A:C1:0F:C7:23:E8:2B:F4:B0:45
Authority key identifier: 05:3E:94:50:1F:0F:D2:CD:EA:3C:2E:7B:46:31:8E:6E:7F:51:5F:73
Certificate issuer: /CN=053e94501f0fd2cdea3c2e7b46318e6e7f515f73
Certificate serial: 0198499C147AA6E374CFD141DA01C7B14537
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BT6UUB8P0s3qPC57RjGObn9RX3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/56452b-4b93-41e5-a8a2-61b52637921b/1/BT6UUB8P0s3qPC57RjGObn9RX3M.mft
Manifest number: 1605
Signing time: Sun 27 Jul 2025 02:00:22 +0000
Manifest this update: Sun 27 Jul 2025 02:00:22 +0000
Manifest next update: Mon 28 Jul 2025 02:00:22 +0000
Files and hashes: 1: BT6UUB8P0s3qPC57RjGObn9RX3M.crl (hash: VHdAidnFIO+PeQSbynrPPZcwphZ20pZ0ooBNsALf1pU=)
2: PW26W-VSuEOhQv0UYQiviWvM3PQ.roa (hash: amtlrhmVHqku8l89qlGVcPiKPSCbAqVjZC9kdgQdMxM=)
3: QczbEnEasBPtVeB0j7ed4Z5MN4U.roa (hash: sUqwVjOZmcM++cyXTD0/dLISqQO4KRPxQz8w/SRG0nM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/56452b-4b93-41e5-a8a2-61b52637921b/1/BT6UUB8P0s3qPC57RjGObn9RX3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/56452b-4b93-41e5-a8a2-61b52637921b/1/BT6UUB8P0s3qPC57RjGObn9RX3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/BT6UUB8P0s3qPC57RjGObn9RX3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9c:14:7a:a6:e3:74:cf:d1:41:da:01:c7:b1:45:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=053e94501f0fd2cdea3c2e7b46318e6e7f515f73
Validity
Not Before: Jul 27 02:00:22 2025 GMT
Not After : Jul 28 02:00:22 2025 GMT
Subject: CN=a177b59200a0453bfba69ac10fc723e82bf4b045
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9b:6e:1e:bf:09:24:78:fe:b6:ba:2b:55:83:
67:9e:e2:52:3c:22:45:2e:3a:69:7d:db:9b:76:47:
5a:b8:71:9c:42:a8:28:ae:dd:7c:f8:c3:c0:ee:ed:
42:63:ec:7f:83:78:ab:1b:93:ac:f1:e3:f8:9e:13:
be:fc:5b:9a:7b:ab:d2:1b:5d:f6:7a:7e:32:80:fd:
b9:8e:34:ca:9f:16:b0:c2:03:ed:40:98:ec:e9:7c:
07:4d:45:94:e3:28:43:01:df:93:7b:ae:25:bc:b0:
96:a0:e3:e5:bf:ac:1d:d3:be:e0:98:13:d5:c1:b9:
f6:42:84:e5:5b:f1:6f:30:e5:66:30:e3:32:dd:03:
42:8e:ee:33:f5:f1:c2:2b:8a:2d:92:9d:8c:c7:ac:
3f:c8:cf:81:08:1e:62:69:75:d6:79:5d:85:b1:e2:
81:78:78:27:d6:da:a6:d6:27:c3:5a:2f:77:57:3e:
c4:f2:a1:ac:62:46:7a:54:0d:f6:71:97:70:95:4a:
82:88:01:4e:a3:0c:60:4c:41:f9:56:e0:4b:de:ec:
10:32:dc:b1:cb:2e:b4:be:64:87:84:d8:f2:c8:52:
23:58:aa:5b:17:2a:16:93:a5:6b:83:fc:9a:33:7d:
83:b7:d5:16:ee:b3:2c:60:80:7c:9a:94:7e:c4:00:
2c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:77:B5:92:00:A0:45:3B:FB:A6:9A:C1:0F:C7:23:E8:2B:F4:B0:45
X509v3 Authority Key Identifier:
keyid:05:3E:94:50:1F:0F:D2:CD:EA:3C:2E:7B:46:31:8E:6E:7F:51:5F:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BT6UUB8P0s3qPC57RjGObn9RX3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/56452b-4b93-41e5-a8a2-61b52637921b/1/BT6UUB8P0s3qPC57RjGObn9RX3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/56452b-4b93-41e5-a8a2-61b52637921b/1/BT6UUB8P0s3qPC57RjGObn9RX3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:ad:e2:10:ae:c6:dd:8e:de:92:fe:4f:ee:df:90:86:1e:c5:
21:00:37:07:8f:dd:bb:b7:69:98:5c:5c:46:81:34:e0:af:09:
80:0f:9b:cb:dc:e8:48:65:c2:d5:1f:1c:c7:d0:5f:f1:28:c3:
63:58:3f:8a:fd:b9:4b:8e:ce:be:30:f4:08:45:ff:be:2b:f3:
81:e7:3d:52:84:28:ed:62:fa:c9:77:d0:f5:1a:a0:36:8d:aa:
43:e9:84:d7:72:32:42:7d:59:97:87:80:fa:28:34:0d:ce:cc:
f7:ba:ba:29:2f:95:63:54:75:3d:4a:b7:10:c5:48:45:7a:c9:
b1:35:50:d9:6a:4e:2f:4f:e9:56:5e:a3:6e:20:a8:00:bf:5c:
cf:80:fc:94:8f:7e:e7:0b:27:20:63:46:21:8e:43:1a:6f:1b:
84:81:9c:8a:dd:3b:ca:4c:04:d0:89:dd:03:b9:9c:cb:d7:9b:
12:c5:e8:75:31:90:09:29:8a:08:4d:3a:8a:f8:45:4b:6a:3e:
36:23:df:57:d3:a5:04:90:c2:6c:65:08:43:d4:34:76:d9:c3:
ec:84:32:04:ff:2b:d8:ad:01:ba:2c:e0:42:6c:95:8a:c8:75:
78:31:fe:b6:49:af:e5:dd:83:2f:76:0f:8b:d6:17:49:fe:89:
56:e2:a4:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:30:26 2025 by rpki-client