Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft
File: bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft (raw, json)
Hash identifier: gydSI9EMVQcxr0y3YCROvlKpkNoAvZjd5GH3oQf6wqg=
Subject key identifier: 5B:B7:BA:78:BD:C5:E2:90:1E:5B:35:07:D3:1B:92:B7:D7:B5:95:9B
Authority key identifier: 6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A
Certificate issuer: /CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a
Certificate serial: 01983238CED12B12CE7D8CCA4B1555E7358A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft
Manifest number: 1638
Signing time: Tue 22 Jul 2025 13:00:40 +0000
Manifest this update: Tue 22 Jul 2025 13:00:40 +0000
Manifest next update: Wed 23 Jul 2025 13:00:40 +0000
Files and hashes: 1: 4NcTL285pt5vHsa8sRLMLmMiOV4.roa (hash: Arn8R5fVs3fVXhVyMLl20eHv17txV42oFln86qkkdKI=)
2: AJM-6Zm39xTWDgtragWJQRfYqM8.roa (hash: VMj18TvJaA2yJmPMgPMt6hsb7JE59Ed9FEylWh2nn3U=)
3: XxQXqatab54MwtEvRbVL6EigFQ8.roa (hash: D7EHKsQKGd8BxHFkj/BOthyEyhNjNBRXz8Cg84lbagg=)
4: Z83GLoAga3sBSQ_7zAotBwUPbzU.roa (hash: ZWcGtyQo9h5IeC35NP7le1RrDMKBapDGltNCVXN1yBQ=)
5: bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl (hash: aIBKks0s1VBj0k0OGmzlAQznAYZaQwTWgsScE0X9w0o=)
6: n3c9qLIhM0llrQC6fq5JWHe_KlA.roa (hash: nA71HgAh3Ie43jdpcA7ejYsH/8ttZHymDeMQC0kqD80=)
7: qYTgMdJGkAUtjDYiuMMhTxfJQuE.roa (hash: s9YOPVDXUwDCUpFUzrcMrXpu0dW70tO1ii9LPQmYpUc=)
8: sWIjgX3QVxVSX26S9pHF5E3pjN4.roa (hash: d9FlA8hG+kNnltDamJSIQnXgFCOCvEUasZrP2Lzdiqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft
rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 13:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:32:38:ce:d1:2b:12:ce:7d:8c:ca:4b:15:55:e7:35:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a
Validity
Not Before: Jul 22 13:00:40 2025 GMT
Not After : Jul 23 13:00:40 2025 GMT
Subject: CN=5bb7ba78bdc5e2901e5b3507d31b92b7d7b5959b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:cf:8c:5e:13:39:76:cf:31:a2:97:ef:ff:d5:
e7:67:cd:1b:03:3f:68:79:61:6c:80:4f:e8:9c:09:
67:4c:2f:ee:3a:fc:19:40:21:32:69:71:43:d2:5f:
67:40:64:78:98:b8:ca:de:43:bb:f4:94:e5:3a:f0:
d8:a9:20:93:92:73:f1:5f:bf:7a:d2:43:85:2b:4c:
32:81:85:bb:96:41:07:ef:d9:1d:4c:e3:54:fd:94:
6a:60:90:e0:4c:1b:76:7a:c3:5b:8e:28:38:85:08:
58:24:00:6a:e1:00:cb:26:7c:2c:ba:dc:39:65:a8:
52:bc:f2:f7:08:4a:80:1f:b6:b9:18:bc:da:02:87:
33:06:94:e1:38:a5:b4:7b:be:32:db:d5:6f:62:d4:
98:83:41:3c:ee:02:91:10:aa:d9:38:72:bb:ea:a4:
6b:4d:ed:53:1a:68:55:50:38:bc:d4:c2:ef:3b:31:
f0:e1:36:33:ce:a9:4c:5e:da:6e:04:28:f0:56:a3:
2b:42:57:98:6d:64:44:6b:7f:86:3a:b5:17:9a:30:
5e:3b:8a:65:95:8b:18:21:37:44:20:66:84:a7:cb:
16:19:29:ca:95:5d:fb:19:03:b3:28:66:0d:43:24:
2f:cb:49:39:4e:76:df:6f:e4:01:ea:b3:a4:6e:44:
8b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:B7:BA:78:BD:C5:E2:90:1E:5B:35:07:D3:1B:92:B7:D7:B5:95:9B
X509v3 Authority Key Identifier:
keyid:6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:a4:64:93:ee:32:98:e3:44:96:2b:95:b9:77:f8:e5:67:23:
a1:86:11:8d:80:96:fa:c0:58:f4:ac:0b:91:4f:e4:50:58:2f:
b7:fd:f4:c2:5d:63:92:44:27:be:b5:ef:cf:5f:dc:8f:f0:18:
d0:7d:64:ab:25:13:90:8d:a6:59:33:b7:7c:01:50:4c:e6:4e:
27:cb:ee:ec:b5:06:31:f0:a7:83:21:8a:8a:c4:99:0c:6f:47:
55:94:8a:a6:aa:65:89:41:6d:a6:25:15:89:fc:e2:87:66:5a:
a7:44:02:c3:8d:3f:bb:42:81:39:b0:22:03:d5:be:a9:b9:6a:
19:9e:e1:f6:71:d9:a6:e6:4f:10:1f:fb:7d:88:a3:3d:09:98:
76:2c:59:0f:c3:42:99:d9:3a:13:bb:f9:dc:a5:6c:5f:5b:1f:
fc:a4:e3:14:c2:12:a5:52:c8:04:00:17:4e:f9:55:a8:97:8b:
ed:02:6d:86:92:57:61:72:28:91:7e:1c:17:65:a7:64:00:01:
09:12:2d:3e:5e:7e:54:51:d4:3a:63:bb:99:54:51:a1:6e:4b:
f3:cc:84:82:ed:8f:db:cf:d0:ea:b8:a9:2a:8c:c8:fc:0a:b0:
11:be:1e:b0:e3:11:46:e6:b3:a6:58:2b:0c:00:56:85:e4:47:
ac:ee:62:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 19:30:37 2025 by rpki-client