Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.mft
File: Bk3NDucBTvsuO1VPu3BjhO8R0FE.mft (raw, json)
Hash identifier: 9yjP53o5rlmcvG+k8D8u5suKXwG+iz8b1tFgD524bfw=
Subject key identifier: 60:54:46:23:17:88:64:DF:6B:03:AE:57:62:FD:EF:B4:F7:D5:2B:0A
Authority key identifier: 06:4D:CD:0E:E7:01:4E:FB:2E:3B:55:4F:BB:70:63:84:EF:11:D0:51
Certificate issuer: /CN=064dcd0ee7014efb2e3b554fbb706384ef11d051
Certificate serial: 0199228CA40B36CEBCA6504218360E5F2784
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bk3NDucBTvsuO1VPu3BjhO8R0FE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 05:01:06 +0000
Manifest this update: Sun 07 Sep 2025 05:01:06 +0000
Manifest next update: Mon 08 Sep 2025 05:01:06 +0000
Files and hashes: 1: Bk3NDucBTvsuO1VPu3BjhO8R0FE.crl (hash: ulDBR/Mijt3aV5FdC2Pf1MwqM1yzNQvQvKRhS/606MI=)
2: GCU6ctyJbqAMhWQYVpX0QaP8Qy4.roa (hash: dW5jCxXLX0Q6KCT48fWLPtjZskUAawNAnNuHkyFw1ow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bk3NDucBTvsuO1VPu3BjhO8R0FE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:a4:0b:36:ce:bc:a6:50:42:18:36:0e:5f:27:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=064dcd0ee7014efb2e3b554fbb706384ef11d051
Validity
Not Before: Sep 7 05:01:06 2025 GMT
Not After : Sep 8 05:01:06 2025 GMT
Subject: CN=60544623178864df6b03ae5762fdefb4f7d52b0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0d:aa:dd:0e:d6:c6:0d:22:26:16:88:9a:9f:
09:59:5e:4e:1a:c6:29:ee:03:28:eb:e2:67:4e:10:
b5:62:5d:56:c6:1b:07:d2:63:17:a2:59:c8:da:d1:
08:86:2e:85:6b:7c:83:74:ff:d7:9b:4f:49:18:1e:
4c:48:41:65:3e:ff:1a:4c:29:5c:a0:a2:f5:27:24:
48:32:35:ca:72:ce:e8:1d:a6:88:7e:1e:3a:ce:2e:
4b:83:c6:df:cf:9a:74:85:ab:0e:1b:5b:b0:fb:9a:
8b:41:f9:c1:71:b4:7d:8a:5b:95:94:80:2b:73:8c:
bf:f6:df:f0:19:b9:1f:ec:39:96:4f:ff:b8:58:17:
cb:9c:ed:4f:80:d5:9d:39:9d:1b:eb:d1:1e:76:c0:
84:39:46:66:d7:d8:67:30:f8:91:26:88:07:2c:30:
4c:81:2a:72:9e:6b:f4:4d:e3:26:dd:4f:6b:6f:41:
66:73:f6:08:f3:ee:69:09:f9:34:11:18:e5:73:d7:
66:aa:68:76:2a:50:8f:63:00:b0:71:78:27:0e:58:
40:d8:79:f5:49:ac:2e:95:ba:fa:a3:d9:68:41:65:
1b:3e:31:ad:14:5c:d1:6c:ca:c4:ab:e9:30:da:43:
f5:0f:53:ba:5b:1f:e7:ce:e5:2e:90:79:cc:d8:28:
97:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:54:46:23:17:88:64:DF:6B:03:AE:57:62:FD:EF:B4:F7:D5:2B:0A
X509v3 Authority Key Identifier:
keyid:06:4D:CD:0E:E7:01:4E:FB:2E:3B:55:4F:BB:70:63:84:EF:11:D0:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bk3NDucBTvsuO1VPu3BjhO8R0FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:4b:69:28:4f:01:4b:dc:d7:12:3d:4e:cc:5c:b3:bc:9a:6f:
93:22:a2:43:cb:49:fa:4d:d3:51:19:1d:4f:f8:ed:df:08:52:
aa:9e:f4:96:95:d4:df:9b:68:ab:33:f8:2b:83:e9:64:01:d4:
04:9f:60:04:e2:c2:41:7d:df:5c:b9:02:9c:45:6e:86:1f:67:
92:36:fc:35:a5:fd:1e:98:ed:45:ce:f2:40:6d:23:6d:42:cc:
d4:7c:24:80:12:b2:84:da:c5:90:7a:b6:c7:15:98:6b:de:27:
ed:eb:a4:99:72:cf:cd:f5:6e:6e:68:00:0a:db:9b:3e:7e:25:
2f:87:79:3a:e2:19:9e:b1:15:34:70:45:95:fb:5b:f9:d1:f5:
a3:3a:57:27:1c:86:73:c0:01:d7:3c:92:c5:58:12:9e:3e:07:
22:88:7d:cc:69:c9:d8:e9:d3:8f:14:dc:2b:16:9e:f9:1f:e6:
de:71:0e:be:b1:a6:79:7d:93:ee:78:51:bc:0a:e6:8b:54:fe:
af:23:87:6d:88:11:79:1b:ab:49:a9:9c:4f:60:41:3a:f8:69:
1f:b7:d4:ff:72:49:01:60:4b:ce:54:bd:e6:5f:0c:dd:cc:d1:
a3:d3:59:68:86:77:0e:e2:87:83:b0:05:56:06:41:c8:ba:af:
26:82:c3:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:40:00 2025 by rpki-client