Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/d8e096-4310-42b9-bd20-b5602d3da8a6/1/bmCIOq5JHl-3c6kmQBn_T4iNXKU.mft
File: bmCIOq5JHl-3c6kmQBn_T4iNXKU.mft (raw, json)
Hash identifier: DJzn5p4kvrNAXbSlx2D848/t3kCw8DVTVljx8fJzeMk=
Subject key identifier: 68:18:71:F2:3B:BD:E5:2F:4D:3C:E3:04:00:98:14:93:56:FA:21:80
Authority key identifier: 6E:60:88:3A:AE:49:1E:5F:B7:73:A9:26:40:19:FF:4F:88:8D:5C:A5
Certificate issuer: /CN=6e60883aae491e5fb773a9264019ff4f888d5ca5
Certificate serial: 01991808F27E9ABB7FB222515203BA18FA79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bmCIOq5JHl-3c6kmQBn_T4iNXKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/d8e096-4310-42b9-bd20-b5602d3da8a6/1/bmCIOq5JHl-3c6kmQBn_T4iNXKU.mft
Manifest number: 0B87
Signing time: Fri 05 Sep 2025 04:01:03 +0000
Manifest this update: Fri 05 Sep 2025 04:01:03 +0000
Manifest next update: Sat 06 Sep 2025 04:01:03 +0000
Files and hashes: 1: ENnWwF0vmdv43P7jgDpOBWdDipc.roa (hash: 6ywQWq+YpeM+QYJxsua0ysg5X/K6fdwSexzVmdsk58s=)
2: bmCIOq5JHl-3c6kmQBn_T4iNXKU.crl (hash: WuCDbA03Cu8XPioG/+s/0cYdWzk7idc+0kmlargw+2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/d8e096-4310-42b9-bd20-b5602d3da8a6/1/bmCIOq5JHl-3c6kmQBn_T4iNXKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/d8e096-4310-42b9-bd20-b5602d3da8a6/1/bmCIOq5JHl-3c6kmQBn_T4iNXKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/bmCIOq5JHl-3c6kmQBn_T4iNXKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 01:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:18:08:f2:7e:9a:bb:7f:b2:22:51:52:03:ba:18:fa:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e60883aae491e5fb773a9264019ff4f888d5ca5
Validity
Not Before: Sep 5 04:01:03 2025 GMT
Not After : Sep 6 04:01:03 2025 GMT
Subject: CN=681871f23bbde52f4d3ce3040098149356fa2180
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:9d:34:0f:fa:64:31:4d:bb:35:91:c3:09:13:
8a:8f:ad:cc:d0:82:c3:0e:ed:3a:cd:17:d1:ba:f2:
2d:5f:ff:d0:2c:2f:86:82:3f:ce:43:32:0e:1d:2c:
a5:c9:bd:30:de:5d:b1:f2:8e:bd:71:c6:c8:74:0e:
71:94:d0:ed:17:93:9f:72:5a:a1:f7:4a:0e:03:7c:
3c:9c:38:8c:42:29:3e:5a:45:43:b8:cc:1e:c8:af:
84:ad:06:33:b3:55:36:74:55:b7:59:1c:cd:a4:13:
c5:6c:9d:86:ad:b7:59:0f:68:67:9a:70:09:13:04:
4f:ad:a8:e1:9e:3c:28:fc:2c:b6:28:2f:28:1d:72:
fb:26:39:32:7b:10:19:d9:19:b6:4d:db:fe:48:ec:
18:7d:3b:c0:c2:65:6f:4b:ea:3f:0b:6e:c2:f1:41:
14:8e:78:e9:00:04:d9:ff:35:5a:9e:09:a2:33:69:
9f:dd:b9:23:ac:22:af:ed:d5:e5:03:13:01:f2:7d:
ed:a5:fb:70:e3:a0:c7:c4:97:7b:50:17:ac:f8:f6:
e8:1c:9f:1e:56:8e:a7:30:ae:b4:0a:47:09:d1:b0:
73:c6:ab:40:b9:9e:d1:60:8d:23:37:d8:ea:83:06:
57:47:f5:7a:5a:23:e5:4e:7a:ba:1b:cc:74:93:df:
41:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:18:71:F2:3B:BD:E5:2F:4D:3C:E3:04:00:98:14:93:56:FA:21:80
X509v3 Authority Key Identifier:
keyid:6E:60:88:3A:AE:49:1E:5F:B7:73:A9:26:40:19:FF:4F:88:8D:5C:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bmCIOq5JHl-3c6kmQBn_T4iNXKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/d8e096-4310-42b9-bd20-b5602d3da8a6/1/bmCIOq5JHl-3c6kmQBn_T4iNXKU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/d8e096-4310-42b9-bd20-b5602d3da8a6/1/bmCIOq5JHl-3c6kmQBn_T4iNXKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:aa:07:26:26:3c:cc:11:fb:02:75:a7:b9:af:63:fa:2a:c1:
91:4c:65:e3:af:7d:c5:ff:96:d6:93:b6:68:85:cd:48:54:c1:
73:19:9a:2a:91:6a:5b:96:87:a8:4d:9f:d8:55:61:ad:2d:e8:
04:e5:41:99:70:c9:39:0c:32:83:14:a3:ce:5e:35:49:b8:37:
e4:a2:e3:ac:db:08:49:b5:b0:be:5f:21:51:c8:54:53:20:e5:
59:b5:e3:49:05:a0:8f:05:43:fa:32:bb:c4:74:31:6a:fb:44:
6b:77:55:de:84:58:02:05:45:1c:77:d3:c5:6b:8e:3a:84:9a:
e2:d4:04:81:55:4e:8c:67:49:c0:91:63:68:b3:ca:5d:ba:3b:
59:47:92:8f:2b:95:9f:63:70:fa:01:95:06:45:d0:91:af:50:
35:57:29:4c:97:3b:4f:4b:3f:91:9a:d4:0e:a6:d6:a0:07:92:
8b:f7:c2:16:f1:9a:38:6d:3c:bf:d6:0e:22:f0:7f:91:aa:03:
63:c3:14:cd:fc:09:89:b4:60:7f:55:69:b3:e1:49:a0:8e:70:
23:b4:f7:97:ec:b4:e4:2f:b9:7b:34:7d:06:0f:9b:8f:ed:c8:
a3:75:5f:e5:3b:23:c7:ff:75:48:73:79:7a:72:2a:02:e7:15:
a1:9a:b4:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 06:20:16 2025 by rpki-client