Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/7e2131-db8a-4c89-b50f-d82297e945ac/1/b_pZATo68D98lsJOaNleGBoDBag.mft
File: b_pZATo68D98lsJOaNleGBoDBag.mft (raw, json)
Hash identifier: 0MXEVotwnPnFSPwJLywtOr6JIAdipN20vJR+7FP0/vE=
Subject key identifier: CA:9C:1A:87:C7:70:1F:AF:D4:C4:C3:5E:24:24:42:8C:98:FE:CF:4B
Authority key identifier: 6F:FA:59:01:3A:3A:F0:3F:7C:96:C2:4E:68:D9:5E:18:1A:03:05:A8
Certificate issuer: /CN=6ffa59013a3af03f7c96c24e68d95e181a0305a8
Certificate serial: 0198684DC619F4F0AFE4AA3895E0A6197B39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b_pZATo68D98lsJOaNleGBoDBag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/7e2131-db8a-4c89-b50f-d82297e945ac/1/b_pZATo68D98lsJOaNleGBoDBag.mft
Manifest number: 1610
Signing time: Sat 02 Aug 2025 01:03:04 +0000
Manifest this update: Sat 02 Aug 2025 01:03:04 +0000
Manifest next update: Sun 03 Aug 2025 01:03:04 +0000
Files and hashes: 1: b_pZATo68D98lsJOaNleGBoDBag.crl (hash: 1aRXEfJdQP9ex2xiT27XZlScaEjPzBowid0MMcwHLjQ=)
2: y7a_bUOU494snE7qs9jZFYoXSM8.roa (hash: 10cgQe45Y0NiXbkG/LpSkXcIP1GoV0B20aMfZdp0/pk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/7e2131-db8a-4c89-b50f-d82297e945ac/1/b_pZATo68D98lsJOaNleGBoDBag.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/7e2131-db8a-4c89-b50f-d82297e945ac/1/b_pZATo68D98lsJOaNleGBoDBag.mft
rsync://rpki.ripe.net/repository/DEFAULT/b_pZATo68D98lsJOaNleGBoDBag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 02 Aug 2025 21:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:68:4d:c6:19:f4:f0:af:e4:aa:38:95:e0:a6:19:7b:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ffa59013a3af03f7c96c24e68d95e181a0305a8
Validity
Not Before: Aug 2 01:03:04 2025 GMT
Not After : Aug 3 01:03:04 2025 GMT
Subject: CN=ca9c1a87c7701fafd4c4c35e2424428c98fecf4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:6f:12:9d:e0:52:be:62:80:91:e6:13:b8:02:
e1:d9:81:b5:ae:fe:f6:31:92:1a:9b:76:c6:78:48:
09:bf:f3:b4:b7:7f:a7:b6:c1:d0:3a:ec:bb:a6:c2:
c9:2a:4a:9c:5b:41:16:66:62:ab:43:3f:da:44:ee:
c0:01:3a:6c:34:32:26:fd:25:24:74:a9:7d:f4:6a:
59:4e:dc:89:df:ed:7d:2a:bf:e9:97:37:95:26:50:
9f:12:fb:7f:cf:bb:46:02:bc:9f:44:29:00:1f:d9:
45:29:69:54:ba:c9:80:34:d9:9b:40:a4:18:f8:9a:
57:3e:b2:56:4e:b0:ed:c8:6b:95:01:cc:ba:90:db:
48:d2:63:03:10:a8:10:3a:27:cb:c4:bf:9b:f2:09:
34:5f:88:75:a1:f7:e8:6b:ea:2e:d7:15:32:55:0d:
fb:df:e7:8f:75:03:07:63:53:60:b1:62:b1:ce:d4:
37:55:74:4b:3b:81:c7:a9:56:ee:9e:f8:8a:18:d4:
3c:98:a7:b0:6a:94:f9:8e:36:6d:6a:86:6f:50:5b:
b1:fe:d8:46:b6:f1:15:4c:d6:d0:25:e0:13:c7:ef:
02:48:0e:ee:fc:7f:63:36:51:bb:98:99:7c:1f:75:
f1:94:d2:d5:33:38:a5:f9:fa:c3:55:74:58:00:a6:
23:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:9C:1A:87:C7:70:1F:AF:D4:C4:C3:5E:24:24:42:8C:98:FE:CF:4B
X509v3 Authority Key Identifier:
keyid:6F:FA:59:01:3A:3A:F0:3F:7C:96:C2:4E:68:D9:5E:18:1A:03:05:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b_pZATo68D98lsJOaNleGBoDBag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/7e2131-db8a-4c89-b50f-d82297e945ac/1/b_pZATo68D98lsJOaNleGBoDBag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/7e2131-db8a-4c89-b50f-d82297e945ac/1/b_pZATo68D98lsJOaNleGBoDBag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:23:4b:d9:b3:52:78:36:8d:66:b5:1e:72:5c:a4:52:0e:2f:
35:bc:05:88:81:8f:20:59:10:bc:7e:c3:50:67:f7:bd:9b:cd:
fb:bc:27:90:9b:8c:2b:2c:8a:a1:3f:24:3c:af:64:36:a6:cc:
2e:03:59:ed:02:ea:b7:56:99:f9:77:86:45:23:31:11:b3:73:
5e:0e:16:98:1a:e4:59:91:5d:e9:2d:23:f8:cf:e4:bd:71:eb:
87:e4:32:7d:94:fd:ec:0b:ca:aa:11:c1:9a:5d:a2:87:bb:46:
f6:dc:82:14:19:16:1e:d2:5e:b8:3a:06:6c:e2:94:62:0d:a9:
7d:ab:8c:7a:dc:fa:38:93:96:de:52:1c:44:89:52:86:19:36:
bf:fb:3c:48:67:f5:bb:5a:2c:20:2f:17:f8:c9:61:8b:86:40:
09:5c:47:43:6d:fb:f5:c6:d8:5f:2f:9b:7b:d9:41:02:12:31:
5c:74:1f:87:10:30:bd:d8:03:32:bc:e2:f6:97:d3:09:a7:ea:
d5:2b:16:dc:cc:62:f9:b0:b7:e1:ce:e1:cc:d1:29:22:86:96:
3f:86:21:8a:8a:5b:65:5d:71:df:e9:63:9e:43:71:74:0f:2d:
15:42:71:0b:43:19:18:e7:32:37:6f:4c:ed:2b:60:88:fb:ab:
a2:a6:5a:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 2 05:22:44 2025 by rpki-client