Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/3f3e57-0e00-4f2f-976b-414f09b92c15/1/v7sDAWyDzqiqT6nDajZDpWXMk-Y.mft
File: v7sDAWyDzqiqT6nDajZDpWXMk-Y.mft (raw, json)
Hash identifier: wIODkeyssMjt/3608xEwTbrUCv1mYdCdpu9mhOxlxiM=
Subject key identifier: 03:6F:F1:8E:7C:70:94:4E:26:A1:2D:2D:A4:A0:9B:71:CF:10:64:AB
Authority key identifier: BF:BB:03:01:6C:83:CE:A8:AA:4F:A9:C3:6A:36:43:A5:65:CC:93:E6
Certificate issuer: /CN=bfbb03016c83cea8aa4fa9c36a3643a565cc93e6
Certificate serial: 01984AAED750D648FECFDA4C28996AB5E4B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v7sDAWyDzqiqT6nDajZDpWXMk-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/3f3e57-0e00-4f2f-976b-414f09b92c15/1/v7sDAWyDzqiqT6nDajZDpWXMk-Y.mft
Manifest number: 0A53
Signing time: Sun 27 Jul 2025 07:00:28 +0000
Manifest this update: Sun 27 Jul 2025 07:00:28 +0000
Manifest next update: Mon 28 Jul 2025 07:00:28 +0000
Files and hashes: 1: bzs57lv3Qbjc1TLCtfvKYgEau6U.roa (hash: HAYnok72dCcoCWV0+wPH7iuTT6c76+rSS6MIun+rwec=)
2: v7sDAWyDzqiqT6nDajZDpWXMk-Y.crl (hash: eWR2rTASRGE4XKi9n8mu7zg31R/7nm0ewqAgS2pyyVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/3f3e57-0e00-4f2f-976b-414f09b92c15/1/v7sDAWyDzqiqT6nDajZDpWXMk-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/3f3e57-0e00-4f2f-976b-414f09b92c15/1/v7sDAWyDzqiqT6nDajZDpWXMk-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/v7sDAWyDzqiqT6nDajZDpWXMk-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:ae:d7:50:d6:48:fe:cf:da:4c:28:99:6a:b5:e4:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfbb03016c83cea8aa4fa9c36a3643a565cc93e6
Validity
Not Before: Jul 27 07:00:28 2025 GMT
Not After : Jul 28 07:00:28 2025 GMT
Subject: CN=036ff18e7c70944e26a12d2da4a09b71cf1064ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a8:6d:74:ae:b3:af:3f:e7:e9:25:cd:50:5a:
09:1c:7c:e8:bf:4b:c0:d7:be:40:ed:1a:cf:d9:e9:
70:01:b5:70:fc:56:89:48:f2:7e:b0:58:de:6f:4a:
b0:74:25:e8:20:12:3a:a3:eb:b6:f3:7e:50:d2:2e:
20:9b:3c:7a:ed:b5:46:12:46:b6:df:a6:df:3d:45:
22:94:c4:dd:da:56:ab:e9:c9:61:ea:55:42:63:6b:
72:53:fe:f6:85:ef:0e:82:6b:fb:15:4c:3a:f0:51:
8e:b0:fb:67:16:8d:3c:9f:b4:e6:ba:30:a7:a1:28:
95:b8:14:dd:fe:57:2f:23:c5:70:36:dc:56:c8:70:
f6:d2:9f:41:7c:2a:a1:b2:5a:ee:40:5e:a2:bb:3a:
be:33:0e:e9:ce:b0:34:60:fc:fc:47:4f:b8:36:af:
a6:5c:1d:5b:8c:bc:71:ce:b6:68:f3:79:ab:06:ec:
be:97:2e:81:cd:3b:f9:8e:bd:cb:a7:89:2b:23:3d:
0f:eb:7e:c2:94:e9:1b:e4:e6:41:23:f6:03:70:77:
e3:96:a7:80:20:7d:6c:2d:56:48:cc:70:8d:35:46:
84:c6:e0:f0:b2:27:0b:10:c8:71:e0:8f:99:3f:3f:
39:d8:f9:97:6b:16:1d:cd:19:d1:83:c9:f7:b4:93:
ff:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:6F:F1:8E:7C:70:94:4E:26:A1:2D:2D:A4:A0:9B:71:CF:10:64:AB
X509v3 Authority Key Identifier:
keyid:BF:BB:03:01:6C:83:CE:A8:AA:4F:A9:C3:6A:36:43:A5:65:CC:93:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7sDAWyDzqiqT6nDajZDpWXMk-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/3f3e57-0e00-4f2f-976b-414f09b92c15/1/v7sDAWyDzqiqT6nDajZDpWXMk-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/3f3e57-0e00-4f2f-976b-414f09b92c15/1/v7sDAWyDzqiqT6nDajZDpWXMk-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:63:d8:db:0b:6c:1e:80:18:c4:72:e3:25:b9:50:8d:3c:99:
a3:26:24:8c:f8:0f:fb:97:54:18:05:09:00:b0:4c:56:4e:c0:
ba:f8:2d:2a:e2:ff:1b:08:43:71:6c:6c:69:c8:d1:8f:ea:65:
97:dc:15:45:83:8b:1a:66:de:18:fc:22:a7:51:f8:cf:2d:bf:
d1:73:43:0f:d5:e3:1e:79:2e:6d:bd:dc:58:ec:23:3a:f3:ef:
6f:8c:fb:e6:3c:a9:03:65:9f:af:54:e4:09:9e:97:39:18:01:
a7:19:83:63:cf:2b:64:5f:d8:5e:26:a1:e9:5f:f3:a3:1b:38:
83:91:0c:d5:41:88:92:7e:c7:49:c1:30:0e:ba:8b:e3:ad:b1:
13:50:3d:df:cd:05:93:b9:5a:a2:76:15:96:5a:f4:80:56:61:
1e:03:2b:84:86:d0:bf:c4:fc:93:35:0f:39:91:e5:4a:32:96:
71:e3:d2:24:5b:2a:af:a5:ca:17:05:fb:eb:93:30:aa:8c:fe:
6c:a1:c5:99:6d:51:4e:b0:1c:e6:25:3b:2e:3b:a0:74:3d:d2:
12:63:05:bb:37:04:09:17:6c:f2:2f:b1:60:ec:65:6f:81:91:
38:14:d6:74:cc:fe:62:3c:0f:d2:cb:1f:50:93:15:4a:6c:34:
92:45:18:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:36:23 2025 by rpki-client