Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/df0e4b-8f67-4295-9e42-346a3cce5f09/1/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.mft
File: BsH6wk4w2SWOsu9y8x7ZvWCP4N4.mft (raw, json)
Hash identifier: DyMo2EaXnzcM1QxzcnV5J+EtcDJ+tHgOqQ7hbms8Cbs=
Subject key identifier: 3E:05:58:EF:19:9A:FE:44:95:A5:BE:77:7C:18:21:1D:70:05:3B:76
Authority key identifier: 06:C1:FA:C2:4E:30:D9:25:8E:B2:EF:72:F3:1E:D9:BD:60:8F:E0:DE
Certificate issuer: /CN=06c1fac24e30d9258eb2ef72f31ed9bd608fe0de
Certificate serial: 01992255C614ADD21E247FD277820094C10E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/df0e4b-8f67-4295-9e42-346a3cce5f09/1/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.mft
Manifest number: 0949
Signing time: Sun 07 Sep 2025 04:01:10 +0000
Manifest this update: Sun 07 Sep 2025 04:01:10 +0000
Manifest next update: Mon 08 Sep 2025 04:01:10 +0000
Files and hashes: 1: 8uEM_1N5qJUdzAi9u7zTYv5_N7c.roa (hash: yrQsFc8W4TPUkwunx5GCuvi5bxPjLTa5VSHSj8PIIVA=)
2: BsH6wk4w2SWOsu9y8x7ZvWCP4N4.crl (hash: lZZpUekPAWi2dbmlY4ABf/LhoJvdGbspuOG/bkCpGkY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/df0e4b-8f67-4295-9e42-346a3cce5f09/1/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/df0e4b-8f67-4295-9e42-346a3cce5f09/1/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:c6:14:ad:d2:1e:24:7f:d2:77:82:00:94:c1:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06c1fac24e30d9258eb2ef72f31ed9bd608fe0de
Validity
Not Before: Sep 7 04:01:10 2025 GMT
Not After : Sep 8 04:01:10 2025 GMT
Subject: CN=3e0558ef199afe4495a5be777c18211d70053b76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:4d:ff:e5:df:80:d3:77:32:61:0f:a2:b3:70:
c3:78:13:46:ec:03:54:90:fd:87:b4:a9:f0:70:2e:
d7:59:81:2b:0d:4a:67:a4:07:ee:4d:ef:1f:81:45:
03:8d:19:87:91:41:16:5d:8d:eb:2e:fa:8d:38:ba:
f4:5a:7d:16:18:3d:0f:25:c7:fd:75:22:f5:5c:f8:
f3:61:ae:ee:57:91:d5:b7:58:ba:e8:28:82:5e:69:
9d:61:71:4d:f9:34:df:4f:69:84:88:13:25:50:21:
aa:08:98:3f:20:65:64:4a:1d:94:f7:2c:90:fa:02:
04:fd:e9:3c:d7:18:6c:18:c4:3c:0b:95:d8:62:55:
82:96:7d:d4:2b:c7:dc:e4:d2:e7:b0:d1:79:2d:67:
76:e2:d7:a6:fe:d3:5b:af:eb:eb:5d:2a:ae:1e:72:
b8:ae:c1:8b:59:c2:b5:2c:4f:49:14:4c:2d:86:e3:
db:41:41:58:6a:0c:6d:07:8a:a3:29:8e:0b:26:a5:
92:8c:4d:0b:23:ad:8f:76:d0:48:7f:96:a3:44:74:
b7:1a:82:dd:a6:ed:82:d3:63:44:4d:97:b2:cf:a7:
e2:d7:1b:ae:89:43:b7:b7:e4:bd:70:b9:ed:57:ca:
36:b4:4c:b5:54:c2:10:53:23:2e:01:0a:3e:53:d0:
f6:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:05:58:EF:19:9A:FE:44:95:A5:BE:77:7C:18:21:1D:70:05:3B:76
X509v3 Authority Key Identifier:
keyid:06:C1:FA:C2:4E:30:D9:25:8E:B2:EF:72:F3:1E:D9:BD:60:8F:E0:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/df0e4b-8f67-4295-9e42-346a3cce5f09/1/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/df0e4b-8f67-4295-9e42-346a3cce5f09/1/BsH6wk4w2SWOsu9y8x7ZvWCP4N4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:c0:b0:e1:30:03:2c:63:6a:b1:80:69:fa:c0:23:cc:0a:72:
56:e6:0e:71:b4:73:4f:1f:00:90:d6:3f:5a:ab:b7:43:b9:ed:
14:e2:32:3b:b3:d6:f9:d3:c8:84:c4:e8:42:eb:ab:39:36:a5:
e8:04:24:42:06:d3:6d:b7:32:a8:71:1b:21:36:20:01:04:4f:
c3:de:2f:90:69:b6:8e:60:98:27:c0:94:e2:c2:62:af:fa:dd:
98:fa:ef:13:1b:7b:dc:f8:1a:b1:db:1a:2a:b7:66:4f:b3:e3:
1b:92:5b:d7:be:49:d0:16:71:a7:cd:b1:84:a1:fc:b8:14:2c:
08:fb:4b:9a:7c:50:2d:16:fa:e6:df:1e:d4:31:98:fd:b1:28:
50:47:3b:8c:8b:71:54:1b:56:2f:26:7b:dd:c6:12:95:70:84:
04:a8:47:09:36:eb:2f:11:28:23:ed:5c:6c:fd:46:10:ae:d8:
ad:1c:a6:11:ef:70:54:4f:e3:75:60:62:50:c4:64:a8:b3:b0:
00:51:1f:a1:ce:50:dc:1e:12:e1:a3:b2:8c:92:36:46:e8:c1:
f5:4c:ab:d8:49:b3:03:79:d7:44:bd:7f:4e:b9:77:f4:27:2b:
18:5f:a7:a1:af:f7:f1:82:fb:0e:65:5e:f1:d1:1f:f7:1d:b5:
2f:20:7a:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:49:56 2025 by rpki-client