Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/9dac9c-85c6-4572-ad60-14512e7e59ef/1/bj7Jcvl2C4VfHUOQvDdbP6PUEbY.mft
File: bj7Jcvl2C4VfHUOQvDdbP6PUEbY.mft (raw, json)
Hash identifier: q52YIxiuEUHR3ziNVi+P1LKfSnfvgujXGfBFnCmMD2M=
Subject key identifier: FD:4D:5C:8B:C1:0C:2C:B1:A6:BC:21:B9:1D:2A:5D:4E:32:90:99:5C
Authority key identifier: 6E:3E:C9:72:F9:76:0B:85:5F:1D:43:90:BC:37:5B:3F:A3:D4:11:B6
Certificate issuer: /CN=6e3ec972f9760b855f1d4390bc375b3fa3d411b6
Certificate serial: 019921B18B9654801A2FEEA46B6D30B015EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bj7Jcvl2C4VfHUOQvDdbP6PUEbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/9dac9c-85c6-4572-ad60-14512e7e59ef/1/bj7Jcvl2C4VfHUOQvDdbP6PUEbY.mft
Manifest number: 1670
Signing time: Sun 07 Sep 2025 01:01:47 +0000
Manifest this update: Sun 07 Sep 2025 01:01:47 +0000
Manifest next update: Mon 08 Sep 2025 01:01:47 +0000
Files and hashes: 1: bj7Jcvl2C4VfHUOQvDdbP6PUEbY.crl (hash: yefIgjDKOAbhV1FpdEV+a1Ic6du/ryPC2YftyX7C3Fo=)
2: dT_nuVNPNVy7zap0s-GlTGbCJFQ.roa (hash: 2ckePt60vTr0Jaf/aV6ugqWUeBibjAZagoTGX9Ra3Qc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/9dac9c-85c6-4572-ad60-14512e7e59ef/1/bj7Jcvl2C4VfHUOQvDdbP6PUEbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/9dac9c-85c6-4572-ad60-14512e7e59ef/1/bj7Jcvl2C4VfHUOQvDdbP6PUEbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bj7Jcvl2C4VfHUOQvDdbP6PUEbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:01:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b1:8b:96:54:80:1a:2f:ee:a4:6b:6d:30:b0:15:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e3ec972f9760b855f1d4390bc375b3fa3d411b6
Validity
Not Before: Sep 7 01:01:47 2025 GMT
Not After : Sep 8 01:01:47 2025 GMT
Subject: CN=fd4d5c8bc10c2cb1a6bc21b91d2a5d4e3290995c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:31:06:09:c2:a7:c9:b3:4a:81:0f:b2:59:b6:
5b:51:c2:0b:e7:32:88:ed:05:32:ba:bd:31:90:47:
df:df:1c:9b:7b:e6:6e:0b:67:8d:5d:23:3e:63:dc:
95:17:a0:8c:c8:c9:30:a0:5f:7b:11:cd:62:6e:73:
df:e0:82:78:2a:18:59:6c:42:f4:c4:81:83:5f:df:
7c:94:cd:74:e3:d0:8b:e7:a8:c4:69:49:a8:bb:dc:
62:55:11:44:08:98:10:87:c7:ea:90:a5:0f:63:1d:
3c:76:80:00:ec:25:d0:9f:06:48:d4:54:90:15:59:
ff:52:de:f6:cf:49:11:65:4d:d3:b4:ad:f1:a5:7f:
63:0a:1c:06:03:ba:3d:54:bb:b8:d0:10:3b:02:49:
c5:cf:e2:30:4d:d4:a8:f5:b7:93:39:d6:6a:71:be:
64:44:a3:93:f4:b8:66:2a:67:ca:b6:4c:db:e7:c6:
32:34:3a:47:b0:cb:20:66:83:70:32:d0:8e:2f:5a:
27:38:0f:02:b6:32:d0:17:ec:f9:76:6f:c5:b4:14:
af:ec:8b:24:71:bd:23:ac:10:bc:c1:b6:87:af:4e:
c0:c6:5e:ce:50:b6:14:ff:7a:5f:9c:2a:ec:b6:5e:
d8:f9:bb:2e:84:6a:34:15:b9:42:fa:e5:52:b1:1a:
21:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:4D:5C:8B:C1:0C:2C:B1:A6:BC:21:B9:1D:2A:5D:4E:32:90:99:5C
X509v3 Authority Key Identifier:
keyid:6E:3E:C9:72:F9:76:0B:85:5F:1D:43:90:BC:37:5B:3F:A3:D4:11:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bj7Jcvl2C4VfHUOQvDdbP6PUEbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9dac9c-85c6-4572-ad60-14512e7e59ef/1/bj7Jcvl2C4VfHUOQvDdbP6PUEbY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9dac9c-85c6-4572-ad60-14512e7e59ef/1/bj7Jcvl2C4VfHUOQvDdbP6PUEbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:6d:69:17:c0:f2:20:62:10:b8:b9:e1:ad:73:64:d3:be:b0:
4a:85:c0:70:fa:aa:d0:5f:d1:d9:92:a7:2f:ec:ef:c1:94:70:
1e:8e:9c:a0:6d:a2:86:f2:20:89:bb:2d:08:a2:70:f9:d0:97:
bb:e8:64:f7:a2:8c:44:48:2d:27:1b:c8:3f:f6:26:dd:82:a7:
a3:96:8c:a3:ff:3c:87:a8:29:d3:a0:68:b0:f0:e8:3b:ee:fb:
e6:96:be:56:2f:69:3d:77:e6:e6:0d:25:c9:bd:cf:6b:7e:e9:
b1:1b:55:64:4e:54:19:62:71:30:8d:f8:f1:1c:f1:bb:4d:d9:
93:cc:96:ad:d9:f7:d6:d7:03:9c:33:a5:c9:54:66:92:23:e8:
c6:64:97:64:61:63:95:ea:86:ba:7b:fa:92:bd:d4:70:26:8d:
88:8b:2b:31:5b:ef:ff:f4:2b:06:b6:93:fc:7e:80:b2:b8:2e:
ed:80:5e:4f:68:0e:dd:08:35:54:48:1d:a4:61:6d:66:ea:00:
12:85:04:6f:6a:0b:e3:f1:db:d5:d0:b4:9f:60:2d:0e:9b:5e:
ee:42:ad:24:51:92:e0:f5:14:bd:79:7f:c1:11:c9:40:4b:de:
03:04:1c:fd:47:96:d9:d6:96:a7:34:66:48:0d:68:d9:3e:34:
ba:e3:44:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:12:14 2025 by rpki-client