Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/7d03ea-8702-4b4c-a117-6b1c82ce716d/1/bkPVLPXHIWFmOKGrnD2J-pqX3G0.mft
File: bkPVLPXHIWFmOKGrnD2J-pqX3G0.mft (raw, json)
Hash identifier: aw5yFKPdDAxZH19MQw2LCXm996IZlftcicY45gjX/2s=
Subject key identifier: E7:F8:F6:E2:83:DE:40:22:F2:E8:95:95:4F:56:70:38:13:02:7B:75
Authority key identifier: 6E:43:D5:2C:F5:C7:21:61:66:38:A1:AB:9C:3D:89:FA:9A:97:DC:6D
Certificate issuer: /CN=6e43d52cf5c721616638a1ab9c3d89fa9a97dc6d
Certificate serial: 01984A40CC24FA8B19810F85B0B3109AAEBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bkPVLPXHIWFmOKGrnD2J-pqX3G0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/7d03ea-8702-4b4c-a117-6b1c82ce716d/1/bkPVLPXHIWFmOKGrnD2J-pqX3G0.mft
Manifest number: 1607
Signing time: Sun 27 Jul 2025 05:00:17 +0000
Manifest this update: Sun 27 Jul 2025 05:00:17 +0000
Manifest next update: Mon 28 Jul 2025 05:00:17 +0000
Files and hashes: 1: bkPVLPXHIWFmOKGrnD2J-pqX3G0.crl (hash: 435zVzqHBl/TA0WcvwuRDJEO+uLM7E4C8D9dJPTGzlY=)
2: f0mlI3uPHkGxNxppJH1FzET7hkE.roa (hash: fzr3RtH6R3YRfxpidUV64dO9I/Erlus13YAGX+wIcwA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/7d03ea-8702-4b4c-a117-6b1c82ce716d/1/bkPVLPXHIWFmOKGrnD2J-pqX3G0.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/7d03ea-8702-4b4c-a117-6b1c82ce716d/1/bkPVLPXHIWFmOKGrnD2J-pqX3G0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bkPVLPXHIWFmOKGrnD2J-pqX3G0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:40:cc:24:fa:8b:19:81:0f:85:b0:b3:10:9a:ae:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e43d52cf5c721616638a1ab9c3d89fa9a97dc6d
Validity
Not Before: Jul 27 05:00:17 2025 GMT
Not After : Jul 28 05:00:17 2025 GMT
Subject: CN=e7f8f6e283de4022f2e895954f56703813027b75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:50:12:69:9d:4c:2d:93:e4:4f:2e:c6:11:07:
65:27:a7:61:24:f4:5e:5c:52:02:6e:43:17:58:40:
1c:48:9f:a9:67:15:40:8a:dc:4a:e0:05:86:30:df:
83:f1:f8:b7:2f:5c:28:68:1d:10:91:f9:1c:ab:12:
9a:b3:35:f8:16:24:78:d0:76:43:27:e2:f1:f1:bb:
08:b2:93:6c:44:44:c9:11:cb:f3:90:14:88:88:de:
cf:39:1f:32:2d:91:d0:14:d9:6d:41:e6:7c:95:18:
62:f8:53:b6:01:c9:76:14:b9:bb:ea:91:fa:1c:71:
a9:ad:05:3e:a1:fb:ed:aa:dc:8d:80:65:d2:a3:5e:
86:60:69:2b:ac:a4:6b:73:e7:66:a1:c3:2a:60:71:
39:2e:4f:13:45:78:98:a5:ad:e8:57:00:e9:68:1e:
46:a5:e7:db:39:1f:e7:e3:48:13:88:84:89:13:2e:
ab:c0:19:f4:8d:a0:d6:d2:33:0c:8c:16:90:79:f5:
b9:e3:1d:62:d4:c8:9c:dc:44:68:2a:ee:cd:b4:f8:
72:8c:b9:5d:04:98:71:ac:c9:49:c7:df:e6:16:7f:
a2:7c:5f:2d:a0:56:58:2d:e0:24:02:c0:8e:93:18:
92:48:8b:f2:fb:e3:31:27:db:7e:a5:2e:b2:e6:56:
16:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:F8:F6:E2:83:DE:40:22:F2:E8:95:95:4F:56:70:38:13:02:7B:75
X509v3 Authority Key Identifier:
keyid:6E:43:D5:2C:F5:C7:21:61:66:38:A1:AB:9C:3D:89:FA:9A:97:DC:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bkPVLPXHIWFmOKGrnD2J-pqX3G0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7d03ea-8702-4b4c-a117-6b1c82ce716d/1/bkPVLPXHIWFmOKGrnD2J-pqX3G0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7d03ea-8702-4b4c-a117-6b1c82ce716d/1/bkPVLPXHIWFmOKGrnD2J-pqX3G0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:11:ea:a4:c1:09:69:c4:1a:cb:6b:8f:ed:95:fb:cb:ef:c5:
29:45:fc:ed:31:3e:ba:1a:5f:44:c1:29:bc:fb:d9:e4:25:31:
6e:c0:3e:16:7a:47:31:5e:b0:08:98:d3:19:5c:c6:66:d6:23:
78:24:38:1c:40:2b:b5:40:56:fe:1b:30:39:81:10:1b:e8:36:
d7:0e:75:e5:5b:66:81:14:ea:66:eb:83:37:08:a8:f4:3d:81:
35:3f:f9:de:91:da:01:6c:ec:12:2f:19:15:c4:92:57:c0:24:
54:64:07:4c:39:28:7a:b7:a7:d2:03:27:2c:0e:af:7d:36:fe:
ad:64:c4:55:84:0e:6c:b3:fa:2a:67:99:0f:c0:6d:0a:7f:ca:
17:21:c5:aa:08:0d:89:8b:f2:1d:a7:81:30:1d:0c:a1:82:51:
15:40:83:5a:78:96:91:55:ae:9e:4d:1e:0a:c4:2d:bd:46:5e:
8e:68:73:4c:28:21:6d:53:b3:5f:45:62:cc:14:b3:fe:70:2d:
f3:a8:b9:44:24:1d:b5:fb:2e:2f:45:f2:c4:f9:37:44:20:be:
00:ab:ad:86:c0:5c:41:d3:37:9d:be:fd:8a:f1:4f:39:a0:ee:
df:6f:9d:43:a6:45:67:29:ef:0f:67:d2:ab:1b:9a:fe:88:13:
64:0c:30:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:22:28 2025 by rpki-client