Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/e6a120-41b4-4db4-83b9-eef529a477e7/1/bAhhkss_KPWLIUTd4tkaIxIFb8g.mft
File: bAhhkss_KPWLIUTd4tkaIxIFb8g.mft (raw, json)
Hash identifier: 9FzHLUHEhsC7tS/+nzReTPHs9ILY+TtBcwm905sX9Kw=
Subject key identifier: 2F:65:88:FB:AC:22:9A:3A:54:78:41:9A:F7:51:D1:0D:F6:A3:3B:CD
Authority key identifier: 6C:08:61:92:CB:3F:28:F5:8B:21:44:DD:E2:D9:1A:23:12:05:6F:C8
Certificate issuer: /CN=6c086192cb3f28f58b2144dde2d91a2312056fc8
Certificate serial: 0199228CCA8D866BC1311603FBFAB1A76287
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bAhhkss_KPWLIUTd4tkaIxIFb8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/e6a120-41b4-4db4-83b9-eef529a477e7/1/bAhhkss_KPWLIUTd4tkaIxIFb8g.mft
Manifest number: 0698
Signing time: Sun 07 Sep 2025 05:01:16 +0000
Manifest this update: Sun 07 Sep 2025 05:01:16 +0000
Manifest next update: Mon 08 Sep 2025 05:01:16 +0000
Files and hashes: 1: bAhhkss_KPWLIUTd4tkaIxIFb8g.crl (hash: zuoZxqBI0Iqe0QOOM0OMa3OlwB+nxohPXJvBcG7sa1I=)
2: h0CiyPqTT3nB3mru9Rx5ThXMJsc.roa (hash: gn5UUlC6bwE9RLEUWaV0t2xvepay+0W+QHAMC8Fs/OE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/e6a120-41b4-4db4-83b9-eef529a477e7/1/bAhhkss_KPWLIUTd4tkaIxIFb8g.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/e6a120-41b4-4db4-83b9-eef529a477e7/1/bAhhkss_KPWLIUTd4tkaIxIFb8g.mft
rsync://rpki.ripe.net/repository/DEFAULT/bAhhkss_KPWLIUTd4tkaIxIFb8g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:ca:8d:86:6b:c1:31:16:03:fb:fa:b1:a7:62:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c086192cb3f28f58b2144dde2d91a2312056fc8
Validity
Not Before: Sep 7 05:01:16 2025 GMT
Not After : Sep 8 05:01:16 2025 GMT
Subject: CN=2f6588fbac229a3a5478419af751d10df6a33bcd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:05:e6:f7:38:f7:69:a1:df:f4:d9:73:57:ca:
ed:71:de:2c:da:8c:fd:ca:26:ad:cb:5b:8c:4c:3d:
43:aa:4b:ba:9c:72:34:3b:a3:27:6d:a2:40:be:36:
e1:18:ce:f7:4f:4b:cb:32:36:b4:19:2c:4d:46:75:
fe:4d:20:ac:62:57:f3:88:63:d9:53:62:4c:41:40:
0d:e6:cc:3d:23:12:12:6d:3b:db:a7:10:61:f1:74:
87:9b:14:fe:0f:ad:d9:2e:fc:9b:2c:e4:b3:42:3f:
2e:57:ba:02:88:0b:1c:ea:46:bd:b8:b7:d0:c9:74:
50:3c:eb:8a:cc:0a:f9:83:6e:2e:f6:5d:9f:83:3a:
51:4c:aa:6c:b5:6b:89:7c:e6:68:82:11:e3:38:fb:
b8:68:74:fe:73:ab:c4:22:df:d4:fc:64:d5:62:ba:
35:6f:a1:7d:cb:4c:87:e5:3b:7d:50:13:d6:64:1c:
8d:bb:88:26:3d:69:a8:c0:57:dc:f3:00:72:55:62:
1f:f7:e1:f0:f9:41:2b:88:75:a4:71:7e:51:fe:c6:
96:d1:78:51:a3:6d:b4:6e:10:59:ac:8f:90:4c:42:
3c:3f:9d:59:83:1a:e4:ca:65:59:f5:67:ad:9f:4d:
f3:25:b6:03:f4:9f:e2:90:e8:57:1d:67:d6:d3:41:
ba:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:65:88:FB:AC:22:9A:3A:54:78:41:9A:F7:51:D1:0D:F6:A3:3B:CD
X509v3 Authority Key Identifier:
keyid:6C:08:61:92:CB:3F:28:F5:8B:21:44:DD:E2:D9:1A:23:12:05:6F:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bAhhkss_KPWLIUTd4tkaIxIFb8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/e6a120-41b4-4db4-83b9-eef529a477e7/1/bAhhkss_KPWLIUTd4tkaIxIFb8g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/e6a120-41b4-4db4-83b9-eef529a477e7/1/bAhhkss_KPWLIUTd4tkaIxIFb8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:c0:7f:04:6d:84:54:e7:1b:e8:4e:20:4a:40:07:bc:d3:44:
9c:19:07:e7:ff:b9:f3:c9:0a:7b:40:4e:ba:8c:f5:c3:7f:bc:
ca:52:a6:c4:69:3f:0d:8d:45:b0:e5:59:69:91:70:e0:28:fa:
b8:50:13:51:26:cf:15:60:7b:2c:f0:6b:69:19:3f:8f:2b:0a:
e9:ab:d1:5c:85:94:26:46:89:56:b6:ef:9c:f8:a8:aa:a4:9c:
b5:c6:56:54:16:03:6e:26:7f:af:f7:03:ee:60:f9:5c:14:5d:
8c:89:3e:e2:75:eb:9e:cf:33:9b:90:4b:85:b4:59:d3:9c:8a:
c3:49:15:2b:ca:76:15:ea:d4:a1:cb:13:c7:32:49:6b:08:e1:
e7:23:1f:55:82:d7:71:b0:71:67:f3:90:66:ea:c6:1e:70:b3:
35:b6:29:9a:c0:52:25:61:0c:08:26:1e:c8:81:b3:ab:43:cb:
41:fd:1d:19:e6:f8:59:a5:dc:29:11:c3:be:02:63:4a:28:9b:
3b:14:0c:c4:e6:a7:11:47:5a:53:51:8f:f9:10:fb:d5:3f:80:
c9:65:5b:61:9c:60:7c:20:66:f5:87:15:c1:a8:3b:5e:53:db:
d5:30:85:37:5b:d9:4d:44:f4:60:bc:22:a5:0f:0a:94:1e:df:
c3:4c:52:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:21:23 2025 by rpki-client