Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/a86317-95c4-4dc7-a30b-f7d11339dbad/1/v38LbdEqN0vCk1y-nfYeCTtVvvY.mft
File: v38LbdEqN0vCk1y-nfYeCTtVvvY.mft (raw, json)
Hash identifier: qXjLE+XeT2x0v0VUVipgmxoUaYQZRm07vHwH1wrvoPc=
Subject key identifier: CB:41:3E:E9:B9:36:01:FD:DF:5A:1A:FA:C1:ED:EE:C3:71:7F:31:48
Authority key identifier: BF:7F:0B:6D:D1:2A:37:4B:C2:93:5C:BE:9D:F6:1E:09:3B:55:BE:F6
Certificate issuer: /CN=bf7f0b6dd12a374bc2935cbe9df61e093b55bef6
Certificate serial: 0198499C463B39C475108136626AF5AAB5AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v38LbdEqN0vCk1y-nfYeCTtVvvY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/a86317-95c4-4dc7-a30b-f7d11339dbad/1/v38LbdEqN0vCk1y-nfYeCTtVvvY.mft
Manifest number: 0A7D
Signing time: Sun 27 Jul 2025 02:00:34 +0000
Manifest this update: Sun 27 Jul 2025 02:00:34 +0000
Manifest next update: Mon 28 Jul 2025 02:00:34 +0000
Files and hashes: 1: BFvGU9aoz7rWEn9pDQTts3L78L8.roa (hash: +uFs0aOYRrvBvDpuqjNUWAjstxrFKIih9wDuEmZp20g=)
2: v38LbdEqN0vCk1y-nfYeCTtVvvY.crl (hash: E4MN7kEpS7Wa4KI354XmrToELmhVSD3p0kqybukclQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/a86317-95c4-4dc7-a30b-f7d11339dbad/1/v38LbdEqN0vCk1y-nfYeCTtVvvY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/a86317-95c4-4dc7-a30b-f7d11339dbad/1/v38LbdEqN0vCk1y-nfYeCTtVvvY.mft
rsync://rpki.ripe.net/repository/DEFAULT/v38LbdEqN0vCk1y-nfYeCTtVvvY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9c:46:3b:39:c4:75:10:81:36:62:6a:f5:aa:b5:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf7f0b6dd12a374bc2935cbe9df61e093b55bef6
Validity
Not Before: Jul 27 02:00:34 2025 GMT
Not After : Jul 28 02:00:34 2025 GMT
Subject: CN=cb413ee9b93601fddf5a1afac1edeec3717f3148
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:25:70:f6:73:13:f3:73:52:8f:8b:a9:ad:10:
4c:24:53:e2:46:68:05:f6:fb:c4:12:31:cf:aa:55:
35:41:57:d9:9f:12:37:38:a7:c9:e5:8c:e9:ca:50:
12:d9:63:51:6e:00:76:88:15:65:8f:fc:d7:47:dd:
d3:9c:46:3f:04:47:e8:ff:8f:03:48:af:e2:a3:0b:
ae:95:9b:e0:39:b1:4b:4d:e5:a1:18:78:df:f8:a1:
b1:ba:ba:41:49:fa:a5:99:2b:a9:f9:da:0c:31:1e:
30:4c:7e:ef:3b:85:b7:1e:28:00:9a:63:4e:0c:19:
e8:a2:8b:64:13:11:f9:54:65:50:c3:5c:e0:b6:89:
a8:97:00:02:09:57:f2:41:95:76:5d:0a:66:f6:9a:
6d:51:7e:3e:9f:37:f8:ce:34:91:8d:27:2c:65:79:
05:8b:47:22:c9:7f:3a:76:0a:dd:0c:39:b8:e9:37:
59:ad:ec:da:53:a1:d1:5c:23:1f:05:c6:84:cc:0d:
85:78:88:60:38:c7:38:f0:5e:bb:67:b0:14:2b:f9:
ee:92:d1:90:35:bd:71:69:f5:df:8e:a4:37:7b:1b:
29:ba:2d:72:86:5d:b9:0c:e6:20:6a:2c:78:78:09:
e2:00:aa:37:75:8a:a7:1a:db:eb:66:7d:d9:2c:ed:
79:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:41:3E:E9:B9:36:01:FD:DF:5A:1A:FA:C1:ED:EE:C3:71:7F:31:48
X509v3 Authority Key Identifier:
keyid:BF:7F:0B:6D:D1:2A:37:4B:C2:93:5C:BE:9D:F6:1E:09:3B:55:BE:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v38LbdEqN0vCk1y-nfYeCTtVvvY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/a86317-95c4-4dc7-a30b-f7d11339dbad/1/v38LbdEqN0vCk1y-nfYeCTtVvvY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/a86317-95c4-4dc7-a30b-f7d11339dbad/1/v38LbdEqN0vCk1y-nfYeCTtVvvY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:e7:a1:5a:27:dc:7f:ca:60:91:fc:2c:a0:ab:bf:18:03:94:
2f:c0:c0:91:d8:c9:4b:2e:07:f0:c3:e6:56:27:be:3e:da:de:
42:03:2b:13:46:f6:17:e9:0c:49:08:9c:c1:3e:c0:f5:0d:3b:
83:9a:fe:2e:c1:2e:00:94:c7:d3:66:61:b1:64:e1:21:25:7b:
d2:dc:a1:54:03:85:7d:f0:d2:5f:7d:04:50:b0:f5:75:4b:c0:
55:21:80:ab:fe:2c:41:84:49:a7:d2:05:2b:de:77:c8:b6:2e:
01:b2:19:fe:45:fd:61:45:f7:0c:b0:85:de:35:87:73:28:21:
83:c6:01:06:d8:20:83:6d:4f:d9:9f:e2:e7:ef:93:dd:29:9c:
6c:22:28:38:27:92:ec:07:3e:49:9e:85:ae:0f:6a:11:e1:fd:
3c:4f:8a:1e:b4:86:50:68:df:1c:70:48:6e:1e:70:b8:71:4f:
66:0c:3e:8c:4a:17:5a:de:35:16:6d:37:da:48:c9:5f:cb:1f:
7e:e8:18:24:dc:96:c6:1d:8a:e2:37:71:92:6d:e4:2f:29:5d:
fa:23:0a:a4:55:61:f5:b0:42:6b:20:52:c3:21:8e:39:87:59:
bf:45:20:13:21:b3:63:cf:89:c7:2f:3f:61:4d:99:57:48:22:
84:49:07:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 05:40:21 2025 by rpki-client