Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/dd3fc8-47dc-4a36-8734-45d84da39874/1/bJHX1fXOV5JskDlz7L8RK_rhUw0.mft
File: bJHX1fXOV5JskDlz7L8RK_rhUw0.mft (raw, json)
Hash identifier: Xs8CJcCCQ20YzbeDdnhERCCXiQorSrX6Bn9aUCAyc2k=
Subject key identifier: 69:B1:AF:E0:50:94:1C:48:13:78:AA:81:06:B4:EE:4C:63:FD:EA:7D
Authority key identifier: 6C:91:D7:D5:F5:CE:57:92:6C:90:39:73:EC:BF:11:2B:FA:E1:53:0D
Certificate issuer: /CN=6c91d7d5f5ce57926c903973ecbf112bfae1530d
Certificate serial: 01984708E46EA128DF2CE8F18E8D07C44A13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bJHX1fXOV5JskDlz7L8RK_rhUw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/dd3fc8-47dc-4a36-8734-45d84da39874/1/bJHX1fXOV5JskDlz7L8RK_rhUw0.mft
Manifest number: 1600
Signing time: Sat 26 Jul 2025 14:00:21 +0000
Manifest this update: Sat 26 Jul 2025 14:00:21 +0000
Manifest next update: Sun 27 Jul 2025 14:00:21 +0000
Files and hashes: 1: bJHX1fXOV5JskDlz7L8RK_rhUw0.crl (hash: SiRn/xcTK2wWaJUpAAkdbABY8+TNawYaVcppLBTwGUQ=)
2: eEvrSYjLUGg5GhW7JvZI3HWYfcI.roa (hash: GMSu0KMyD4SKyVpe+o1Z3AHIVpLBmKGk+5TuUmweIis=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/dd3fc8-47dc-4a36-8734-45d84da39874/1/bJHX1fXOV5JskDlz7L8RK_rhUw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/dd3fc8-47dc-4a36-8734-45d84da39874/1/bJHX1fXOV5JskDlz7L8RK_rhUw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bJHX1fXOV5JskDlz7L8RK_rhUw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:08:e4:6e:a1:28:df:2c:e8:f1:8e:8d:07:c4:4a:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c91d7d5f5ce57926c903973ecbf112bfae1530d
Validity
Not Before: Jul 26 14:00:21 2025 GMT
Not After : Jul 27 14:00:21 2025 GMT
Subject: CN=69b1afe050941c481378aa8106b4ee4c63fdea7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1e:10:ee:65:b9:4b:96:6a:f5:33:77:01:7f:
a4:09:0b:3b:03:e9:23:f1:c4:d7:d6:43:e5:62:8f:
c1:b4:45:6b:77:a6:b3:72:1c:37:89:f5:9b:2e:16:
77:a0:ea:f7:24:41:33:f6:bc:62:cb:9d:cf:92:43:
f1:53:c2:58:37:5b:7e:14:2d:53:a2:3f:89:a9:e2:
d8:9c:34:03:b2:85:f6:d9:c9:5d:90:b5:8d:d3:17:
63:04:5f:8f:28:5d:9d:60:6a:f0:5a:a1:47:d7:14:
c6:16:75:b9:38:7c:02:7f:44:d4:34:f5:0e:e9:00:
42:bd:28:4e:bd:04:77:35:92:9b:e6:97:73:ca:e3:
6d:fb:16:08:5e:fa:68:87:64:5a:e0:2d:6a:80:6f:
13:56:53:60:c1:d4:4a:26:91:f0:39:4c:66:75:55:
b4:24:c0:a0:f2:c2:18:3d:40:90:be:2c:7d:e1:e5:
d9:f8:f8:71:dd:e5:09:b4:29:e3:1c:1a:83:ed:1c:
ef:a7:fd:45:49:b9:f0:7f:2b:79:d7:75:84:41:50:
d8:a9:db:9d:1e:22:84:6b:b6:50:e8:e0:a1:99:96:
cc:4b:4a:8a:76:87:d3:fe:8b:3b:99:a2:36:cb:3e:
c8:ab:91:3d:de:94:8d:d7:35:f7:9f:a4:51:e3:5c:
b3:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:B1:AF:E0:50:94:1C:48:13:78:AA:81:06:B4:EE:4C:63:FD:EA:7D
X509v3 Authority Key Identifier:
keyid:6C:91:D7:D5:F5:CE:57:92:6C:90:39:73:EC:BF:11:2B:FA:E1:53:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bJHX1fXOV5JskDlz7L8RK_rhUw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/dd3fc8-47dc-4a36-8734-45d84da39874/1/bJHX1fXOV5JskDlz7L8RK_rhUw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/dd3fc8-47dc-4a36-8734-45d84da39874/1/bJHX1fXOV5JskDlz7L8RK_rhUw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:5e:ca:0c:e9:2e:b4:09:a0:75:dc:ce:68:10:8d:68:84:81:
37:19:0b:27:b6:59:a1:ff:5e:51:44:f6:e2:45:6d:5f:ed:80:
0c:c8:cb:4e:d9:b4:54:81:7b:f9:2e:b2:a9:ab:c0:38:1a:e9:
a5:51:30:3d:65:5b:32:f7:02:a7:9d:68:33:30:6d:e9:14:81:
65:51:93:a0:a6:fb:f4:78:94:bc:ec:29:ed:59:f3:14:25:21:
01:b5:1e:a6:6e:14:3d:7e:c0:35:e1:6e:5f:f6:4c:a0:72:6e:
ee:08:4c:d1:49:e6:88:dd:64:30:d2:f3:cd:76:94:0f:d5:d5:
75:23:e5:ab:e8:84:e8:9c:2d:d7:69:ca:11:2b:fd:77:c3:e0:
c3:0f:be:55:db:ee:49:e7:62:38:f3:c7:00:71:74:f9:38:46:
f4:26:24:3f:93:1c:1e:7c:80:a7:d5:59:5b:83:75:7f:82:d6:
d2:d2:c6:38:b0:16:aa:b7:e7:fa:1c:99:54:35:8a:08:22:89:
e0:2f:09:12:eb:4b:69:e9:58:07:b2:2a:8b:42:31:09:ed:a4:
d7:db:91:01:bb:52:86:74:47:3e:cf:89:d7:f1:00:be:3b:34:
8e:e4:ef:ac:be:00:3b:dd:00:aa:0d:3b:cd:3a:c1:5a:c5:0c:
d8:d6:07:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 19:16:29 2025 by rpki-client