Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/7e2131-db8a-4c89-b50f-d82297e945ac/1/b_pZATo68D98lsJOaNleGBoDBag.mft
File: b_pZATo68D98lsJOaNleGBoDBag.mft (raw, json)
Hash identifier: s3tevbLgqxB491Oq7DswDYftrDV5iytPFQ9pqaLkVCc=
Subject key identifier: 2F:1A:E2:6C:BF:B9:13:12:08:B5:3A:49:DE:16:B9:60:71:F7:75:22
Authority key identifier: 6F:FA:59:01:3A:3A:F0:3F:7C:96:C2:4E:68:D9:5E:18:1A:03:05:A8
Certificate issuer: /CN=6ffa59013a3af03f7c96c24e68d95e181a0305a8
Certificate serial: 0199616BBADF372B97E5FF6391288AF8E767
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b_pZATo68D98lsJOaNleGBoDBag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/7e2131-db8a-4c89-b50f-d82297e945ac/1/b_pZATo68D98lsJOaNleGBoDBag.mft
Manifest number: 1691
Signing time: Fri 19 Sep 2025 10:01:13 +0000
Manifest this update: Fri 19 Sep 2025 10:01:13 +0000
Manifest next update: Sat 20 Sep 2025 10:01:13 +0000
Files and hashes: 1: b_pZATo68D98lsJOaNleGBoDBag.crl (hash: 68ip1Rh4bnGpUOo75ZP5P7P7I0yn3OpDvILcVaSNta0=)
2: y7a_bUOU494snE7qs9jZFYoXSM8.roa (hash: 10cgQe45Y0NiXbkG/LpSkXcIP1GoV0B20aMfZdp0/pk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/7e2131-db8a-4c89-b50f-d82297e945ac/1/b_pZATo68D98lsJOaNleGBoDBag.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/7e2131-db8a-4c89-b50f-d82297e945ac/1/b_pZATo68D98lsJOaNleGBoDBag.mft
rsync://rpki.ripe.net/repository/DEFAULT/b_pZATo68D98lsJOaNleGBoDBag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Sep 2025 10:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:61:6b:ba:df:37:2b:97:e5:ff:63:91:28:8a:f8:e7:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ffa59013a3af03f7c96c24e68d95e181a0305a8
Validity
Not Before: Sep 19 10:01:13 2025 GMT
Not After : Sep 20 10:01:13 2025 GMT
Subject: CN=2f1ae26cbfb9131208b53a49de16b96071f77522
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:37:90:fa:23:bb:42:b8:fa:3d:96:4f:3a:b4:
9b:56:cb:d0:11:d8:bd:48:96:12:e0:62:99:6f:20:
9a:7b:29:ae:13:7b:c6:07:07:8e:b7:42:fd:89:61:
21:5c:e9:f4:52:78:86:ed:ca:9f:98:a5:f1:12:4b:
c2:06:9e:19:52:b0:fa:83:21:5c:86:89:f4:91:f5:
50:91:80:32:c9:7a:e7:bb:8c:f3:d2:2a:1b:dd:a9:
ec:d6:cc:63:0a:d3:18:74:9b:85:64:47:f8:81:dc:
dd:31:51:07:4c:70:f9:c0:f7:47:58:57:c2:be:20:
b7:11:1f:e1:32:08:36:a0:64:86:c4:da:81:e9:eb:
bb:8a:97:a7:62:80:52:19:c2:77:6c:de:0f:a0:ec:
2d:a9:70:cb:28:94:1a:98:df:a7:a4:0a:bc:dd:ba:
ba:8a:f4:dc:d6:4b:69:f4:18:02:89:c7:a0:3e:d6:
fa:86:1c:8c:62:b2:80:c3:0d:2f:6d:77:01:19:67:
fc:ca:85:07:07:87:2a:92:e0:53:bd:8f:20:06:01:
67:6e:88:88:cb:0d:b6:1f:fd:98:af:61:de:cd:6e:
db:9a:78:a6:b9:cd:57:dc:69:2a:9d:9e:ed:3a:34:
d6:db:dc:38:5f:78:1d:2b:85:61:b6:b3:f1:83:17:
c5:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:1A:E2:6C:BF:B9:13:12:08:B5:3A:49:DE:16:B9:60:71:F7:75:22
X509v3 Authority Key Identifier:
keyid:6F:FA:59:01:3A:3A:F0:3F:7C:96:C2:4E:68:D9:5E:18:1A:03:05:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b_pZATo68D98lsJOaNleGBoDBag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/7e2131-db8a-4c89-b50f-d82297e945ac/1/b_pZATo68D98lsJOaNleGBoDBag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/7e2131-db8a-4c89-b50f-d82297e945ac/1/b_pZATo68D98lsJOaNleGBoDBag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:d7:18:b7:44:1c:84:2e:29:3a:5b:01:ec:44:4a:7f:6c:4c:
2a:ea:f0:0e:51:5b:18:b7:a2:69:a6:4b:1d:84:71:16:20:4a:
05:9c:e0:2a:e5:b8:51:bc:04:38:4f:92:05:46:fa:69:85:2f:
a3:f1:86:92:6c:65:96:13:62:cf:54:6a:6d:ed:85:62:00:b7:
5a:b5:c5:8d:ec:8a:21:b0:81:39:ab:2d:e6:13:d5:f9:48:c9:
ab:97:97:50:c9:95:37:b6:a0:3f:d1:4f:8f:b7:05:3f:b6:50:
94:01:45:ec:e2:69:85:24:5d:2b:ab:fb:7a:38:61:0e:e9:78:
2c:bc:6a:ca:9b:78:7d:d4:0d:7b:e7:67:07:51:c2:69:48:b1:
2a:68:39:5e:6e:ae:e6:8a:b9:04:41:28:3c:5f:12:c5:d1:84:
4f:b9:94:d8:5b:cc:18:64:30:67:b1:00:bb:10:fc:cc:9c:6e:
d6:c9:6b:0e:9a:2c:67:07:6b:b8:79:6b:39:8d:75:f3:ce:b4:
68:10:8d:f2:74:78:a2:e5:eb:05:71:3b:95:1a:40:46:5e:d8:
c3:5c:55:c0:cd:75:8d:9c:ae:bc:35:9d:db:09:1a:a6:8a:4a:
ab:c6:5a:15:f8:57:24:f6:00:31:d7:de:24:90:5f:a2:55:e5:
a3:41:43:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 19:38:20 2025 by rpki-client