Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/6b6335-0439-47f2-ae34-7424fdee210e/1/b87cvaA8OzbNfXA36tM5vLiMmiQ.mft
File: b87cvaA8OzbNfXA36tM5vLiMmiQ.mft (raw, json)
Hash identifier: jTwbqXZyimwClvNskmHomlrQoZD7ruHk9b7+vtGl4jg=
Subject key identifier: 24:C2:4A:88:30:A2:7F:D6:03:08:2F:30:6C:68:6A:31:87:B5:7B:06
Authority key identifier: 6F:CE:DC:BD:A0:3C:3B:36:CD:7D:70:37:EA:D3:39:BC:B8:8C:9A:24
Certificate issuer: /CN=6fcedcbda03c3b36cd7d7037ead339bcb88c9a24
Certificate serial: 0199228D1F3DCCDE386D219640EB2B9F2693
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b87cvaA8OzbNfXA36tM5vLiMmiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/6b6335-0439-47f2-ae34-7424fdee210e/1/b87cvaA8OzbNfXA36tM5vLiMmiQ.mft
Manifest number: 0A35
Signing time: Sun 07 Sep 2025 05:01:37 +0000
Manifest this update: Sun 07 Sep 2025 05:01:37 +0000
Manifest next update: Mon 08 Sep 2025 05:01:37 +0000
Files and hashes: 1: b87cvaA8OzbNfXA36tM5vLiMmiQ.crl (hash: qoBJgyGiWcF5SV+Cq2OaYH4IgQipYCOYIts2HoBo/Kc=)
2: pMbs7XGdo_xSX6txJyvIyBbRMlo.roa (hash: 98SgzoxY6svU/NSUJNYIa8/zWjIUUc01QOY2lQs4JFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/6b6335-0439-47f2-ae34-7424fdee210e/1/b87cvaA8OzbNfXA36tM5vLiMmiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/6b6335-0439-47f2-ae34-7424fdee210e/1/b87cvaA8OzbNfXA36tM5vLiMmiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/b87cvaA8OzbNfXA36tM5vLiMmiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8d:1f:3d:cc:de:38:6d:21:96:40:eb:2b:9f:26:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fcedcbda03c3b36cd7d7037ead339bcb88c9a24
Validity
Not Before: Sep 7 05:01:37 2025 GMT
Not After : Sep 8 05:01:37 2025 GMT
Subject: CN=24c24a8830a27fd603082f306c686a3187b57b06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:e6:db:3e:7f:62:ed:a7:55:f6:0b:e8:04:6d:
45:64:a7:e8:24:0f:fc:59:22:47:98:d6:0a:6a:e6:
a9:1e:f6:71:4b:31:fd:12:de:bc:56:7d:3c:40:9d:
cd:cc:38:e5:3f:7d:5c:2c:71:cd:54:21:06:f9:c9:
66:bb:2a:8a:a2:64:0e:bb:89:61:36:66:72:8f:fa:
1f:74:86:c7:85:b0:ad:4b:83:2f:17:d4:89:d7:58:
00:d9:e4:6f:47:5e:a3:62:c9:69:0f:38:a2:56:30:
63:13:b0:3f:7e:dc:40:cf:55:c4:1f:42:b7:9f:6f:
36:c1:0f:3e:ae:9c:ee:6e:ef:a7:98:da:c7:5c:0f:
be:2e:2b:f1:78:fd:fd:26:c0:82:6f:28:5b:72:c8:
4f:a4:9c:db:5d:82:3f:02:60:b4:a1:af:dd:8b:ed:
b3:c2:af:ae:52:bd:3b:83:32:5d:f9:5d:1f:af:5a:
d5:b1:96:dc:e6:cd:d0:e2:4b:a3:a7:1f:f2:12:81:
f8:c9:25:c1:2d:9b:ad:2d:5a:31:32:4e:9a:86:aa:
d0:54:1a:d7:f7:58:9a:e8:a3:85:f7:54:9a:5e:e6:
6a:ce:51:b2:c1:55:d1:5d:e6:b0:14:7a:4d:79:9d:
64:60:76:c5:ca:aa:38:e1:62:cf:d2:c4:d9:58:73:
5f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:C2:4A:88:30:A2:7F:D6:03:08:2F:30:6C:68:6A:31:87:B5:7B:06
X509v3 Authority Key Identifier:
keyid:6F:CE:DC:BD:A0:3C:3B:36:CD:7D:70:37:EA:D3:39:BC:B8:8C:9A:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b87cvaA8OzbNfXA36tM5vLiMmiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/6b6335-0439-47f2-ae34-7424fdee210e/1/b87cvaA8OzbNfXA36tM5vLiMmiQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/6b6335-0439-47f2-ae34-7424fdee210e/1/b87cvaA8OzbNfXA36tM5vLiMmiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:96:21:35:5f:ab:be:d6:a2:9d:fa:68:1c:6a:83:38:67:0d:
cf:2a:af:b5:28:2b:bd:58:d8:6a:a0:fa:d5:8d:25:ec:65:c7:
11:45:c4:20:12:68:39:84:37:85:81:e0:b7:f0:99:11:c1:21:
2f:5d:cd:30:b5:e5:b8:b2:0b:28:c0:2a:ea:e9:80:36:f4:a2:
0c:fe:d9:4e:8a:41:bf:4e:df:42:e6:84:a1:f3:c6:bc:8f:4e:
7b:47:10:b5:14:49:87:be:99:db:e0:71:18:75:a2:48:a0:d4:
37:01:10:d2:de:36:b0:62:44:60:ed:78:85:e5:9a:ca:b3:fc:
a6:9d:1b:ea:db:1a:5f:87:e3:fb:e2:ff:97:8a:93:41:24:4a:
fd:e6:68:fa:e1:a6:b4:0f:02:d4:fe:79:73:ed:d6:60:be:8a:
ae:83:41:dd:c2:1b:47:43:44:a3:d3:d3:af:40:20:13:0e:e9:
c2:4f:cc:20:c9:44:da:6c:c6:ce:59:9a:60:77:7b:3e:51:1b:
20:16:cd:0c:f0:50:7a:48:68:c9:fd:67:25:7d:f8:a0:19:59:
e0:91:f2:54:9e:37:98:44:45:5f:d7:e7:12:90:2f:92:03:18:
fe:41:70:5a:e4:53:4e:aa:20:9c:ff:b0:29:c2:8b:40:ee:4a:
21:f2:5d:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:18:38 2025 by rpki-client