Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/e4f2db-6f46-4761-adfe-7327df6bdd10/1/bj7iuEACCKfupFBg9LeoPEPo3nw.mft
File: bj7iuEACCKfupFBg9LeoPEPo3nw.mft (raw, json)
Hash identifier: ognATl6c7odVJF2ot47IOduPbc6wT2BXssjf5ocoDZ8=
Subject key identifier: 95:6D:32:1F:08:BF:54:A1:C5:82:EE:18:F8:07:6D:7A:36:59:22:6A
Authority key identifier: 6E:3E:E2:B8:40:02:08:A7:EE:A4:50:60:F4:B7:A8:3C:43:E8:DE:7C
Certificate issuer: /CN=6e3ee2b8400208a7eea45060f4b7a83c43e8de7c
Certificate serial: 0199233113FC475F2874DC1B1BA5BF725AFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bj7iuEACCKfupFBg9LeoPEPo3nw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/e4f2db-6f46-4761-adfe-7327df6bdd10/1/bj7iuEACCKfupFBg9LeoPEPo3nw.mft
Manifest number: 0DAE
Signing time: Sun 07 Sep 2025 08:00:42 +0000
Manifest this update: Sun 07 Sep 2025 08:00:42 +0000
Manifest next update: Mon 08 Sep 2025 08:00:42 +0000
Files and hashes: 1: CHQq2YDxipt537b311Ui3tG3zOU.roa (hash: Q8vdLMat40/Z7pZgYQmg+RQTQD9awPvQh60JlwKVzLU=)
2: bj7iuEACCKfupFBg9LeoPEPo3nw.crl (hash: TJ2mt5pmgUa0V8kLDXkDXD4qDdXGKvCUGqwdMYTGRkE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/e4f2db-6f46-4761-adfe-7327df6bdd10/1/bj7iuEACCKfupFBg9LeoPEPo3nw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/e4f2db-6f46-4761-adfe-7327df6bdd10/1/bj7iuEACCKfupFBg9LeoPEPo3nw.mft
rsync://rpki.ripe.net/repository/DEFAULT/bj7iuEACCKfupFBg9LeoPEPo3nw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:31:13:fc:47:5f:28:74:dc:1b:1b:a5:bf:72:5a:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e3ee2b8400208a7eea45060f4b7a83c43e8de7c
Validity
Not Before: Sep 7 08:00:42 2025 GMT
Not After : Sep 8 08:00:42 2025 GMT
Subject: CN=956d321f08bf54a1c582ee18f8076d7a3659226a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:59:f9:32:07:2a:0f:be:b7:43:88:da:36:64:
10:37:58:d6:23:19:d0:23:31:bd:05:ef:f3:4d:28:
b5:a3:1d:6b:43:ae:80:da:47:e5:8b:98:b5:57:df:
ca:f7:24:4d:e9:04:72:d0:58:ef:18:56:e3:d1:2a:
e8:64:2d:82:8d:10:8d:d2:58:b6:8c:90:e5:e6:0c:
6b:88:a6:d5:86:33:82:2a:73:fc:23:87:b5:bc:1e:
fd:e3:cb:4d:4d:41:9e:c3:4f:00:b3:eb:d4:5a:60:
b0:dc:8d:27:02:72:c3:f4:eb:bb:47:f1:82:a7:a3:
de:19:2d:48:18:b7:11:cd:2b:df:f1:40:d0:65:d0:
c3:de:b7:e6:c9:f4:5c:1d:20:f0:8a:82:c7:c3:68:
83:98:4f:f4:7f:51:90:ca:29:a7:f9:85:b7:4e:ba:
44:87:ba:95:bc:cf:ac:f6:e5:18:af:85:fa:f0:71:
52:1b:4c:27:6f:9a:14:52:ec:50:88:80:20:1c:b8:
1b:c3:a5:44:f7:6c:40:f6:d1:d3:12:88:a8:cb:a6:
0c:91:a9:0b:7f:e3:7b:1a:95:86:c6:c5:11:21:28:
2a:b6:80:d5:4a:51:8d:3e:68:ab:bc:fb:69:d7:46:
c2:fb:91:2e:84:ae:9f:d0:cb:9b:60:0a:91:69:8e:
c7:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:6D:32:1F:08:BF:54:A1:C5:82:EE:18:F8:07:6D:7A:36:59:22:6A
X509v3 Authority Key Identifier:
keyid:6E:3E:E2:B8:40:02:08:A7:EE:A4:50:60:F4:B7:A8:3C:43:E8:DE:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bj7iuEACCKfupFBg9LeoPEPo3nw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/e4f2db-6f46-4761-adfe-7327df6bdd10/1/bj7iuEACCKfupFBg9LeoPEPo3nw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/e4f2db-6f46-4761-adfe-7327df6bdd10/1/bj7iuEACCKfupFBg9LeoPEPo3nw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:e4:b6:9f:50:da:32:ec:00:48:95:98:33:68:3d:82:03:ff:
6b:18:5b:dc:2e:32:8f:c8:84:87:ec:a2:a5:9d:44:eb:9e:81:
c1:02:73:38:16:c3:2e:53:18:22:31:08:10:bf:81:8a:d5:f6:
1f:19:f4:08:ae:a9:c3:94:e9:81:6b:1b:75:9f:48:26:e3:0c:
d2:d9:1d:57:4c:1d:81:1c:54:da:35:02:f5:be:74:ea:30:37:
7f:ce:8d:38:39:4e:4e:79:ea:10:52:a7:dc:da:7d:0f:05:20:
80:9f:89:4d:20:a7:7c:81:14:06:61:be:bd:f3:f4:1b:50:2e:
d1:0f:7e:eb:03:c5:8a:f0:76:e5:81:14:5c:00:51:11:f2:ef:
cb:c9:5b:df:8f:c0:51:26:f5:77:f7:40:b1:6a:65:34:0d:19:
7b:b1:d9:bd:ff:19:84:79:ed:21:c1:ab:01:d1:d3:12:41:db:
1b:9d:ac:e1:34:0d:0f:6f:46:c0:36:0b:49:41:06:ee:fa:78:
c6:11:3f:36:d4:f2:27:1e:e9:b4:9e:f4:a9:b7:e4:da:3c:b7:
d3:06:42:a1:48:9d:85:8e:4e:76:1b:29:b1:b9:78:30:42:43:
55:0a:76:fa:49:36:49:37:0b:c3:8b:83:34:16:6d:35:d7:c1:
ca:2d:51:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:49:58 2025 by rpki-client