Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/8d58b5-4f13-47b2-a57e-283bb0923817/1/bBAkoL37rZXwEGTVGM9uqWa0SIo.mft
File: bBAkoL37rZXwEGTVGM9uqWa0SIo.mft (raw, json)
Hash identifier: +n0K56BsREA9745GbtUYL8wxbuATQ2ScCD5c/QJ5JFA=
Subject key identifier: 50:05:CA:0E:D9:4D:D4:D2:1C:DC:18:FF:E6:CA:AA:12:DB:2F:E3:0C
Authority key identifier: 6C:10:24:A0:BD:FB:AD:95:F0:10:64:D5:18:CF:6E:A9:66:B4:48:8A
Certificate issuer: /CN=6c1024a0bdfbad95f01064d518cf6ea966b4488a
Certificate serial: 019921E75449E8C5590E9C322C08A86075B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bBAkoL37rZXwEGTVGM9uqWa0SIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/8d58b5-4f13-47b2-a57e-283bb0923817/1/bBAkoL37rZXwEGTVGM9uqWa0SIo.mft
Manifest number: 1675
Signing time: Sun 07 Sep 2025 02:00:32 +0000
Manifest this update: Sun 07 Sep 2025 02:00:32 +0000
Manifest next update: Mon 08 Sep 2025 02:00:32 +0000
Files and hashes: 1: 2jz_GVg3tc2PAmVfZM229I9y7DM.roa (hash: a4U4fdO6/HHzhz/D1fQJsN+9NOOESB95lRB1mTGoD/4=)
2: bBAkoL37rZXwEGTVGM9uqWa0SIo.crl (hash: ikv+4zwsiuJ6sFEoIg3L1kEfY2oHAN6o+CwjoypajZQ=)
3: qjQqwaE98pw-Tsc3qccVON2SJQg.roa (hash: y4z4CZUi94ZRWjv9y7p8MUe6n4UJbAQ8c5NqooIEDx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/8d58b5-4f13-47b2-a57e-283bb0923817/1/bBAkoL37rZXwEGTVGM9uqWa0SIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/8d58b5-4f13-47b2-a57e-283bb0923817/1/bBAkoL37rZXwEGTVGM9uqWa0SIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/bBAkoL37rZXwEGTVGM9uqWa0SIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:54:49:e8:c5:59:0e:9c:32:2c:08:a8:60:75:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c1024a0bdfbad95f01064d518cf6ea966b4488a
Validity
Not Before: Sep 7 02:00:32 2025 GMT
Not After : Sep 8 02:00:32 2025 GMT
Subject: CN=5005ca0ed94dd4d21cdc18ffe6caaa12db2fe30c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:dd:19:1e:b6:5b:b2:45:39:f0:84:de:29:9e:
40:3e:64:35:6e:0f:3a:ea:05:66:5c:aa:02:62:ba:
fc:53:b4:81:ac:77:15:94:84:7e:84:f6:80:05:3f:
08:a0:9f:f9:fc:cd:cf:b7:75:98:6d:0c:7e:0a:9c:
02:ba:1a:d2:35:c6:8d:a0:38:fc:1c:52:f7:2c:08:
20:e7:f1:f9:23:06:41:23:29:2a:d8:8c:0c:28:63:
67:6f:9a:03:9c:8b:c9:c0:38:2b:67:d3:f8:55:e8:
9a:8b:1f:03:c1:ab:27:40:fb:e0:be:65:5f:b7:b5:
57:9f:d4:34:cf:68:fd:41:da:0e:30:db:86:65:8c:
39:44:06:4d:3f:19:3b:72:5d:84:ab:49:b0:96:37:
d9:ce:8b:20:83:0e:e1:e1:c0:07:65:0f:95:e9:84:
d3:2b:cc:c0:49:88:1c:d6:9e:3f:73:13:04:84:52:
42:32:58:a8:d1:88:58:a0:5c:eb:ab:e1:fb:32:e0:
75:e1:a1:15:21:31:8b:ac:1c:95:7c:8f:9e:b8:43:
10:ac:c5:85:0a:18:4b:82:ab:6d:04:36:11:29:79:
5b:ed:ce:4e:49:28:86:1e:50:6d:0d:73:47:ca:fa:
79:95:02:86:32:03:c1:77:b6:6b:3a:b9:c2:d0:ab:
2a:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:05:CA:0E:D9:4D:D4:D2:1C:DC:18:FF:E6:CA:AA:12:DB:2F:E3:0C
X509v3 Authority Key Identifier:
keyid:6C:10:24:A0:BD:FB:AD:95:F0:10:64:D5:18:CF:6E:A9:66:B4:48:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bBAkoL37rZXwEGTVGM9uqWa0SIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8d58b5-4f13-47b2-a57e-283bb0923817/1/bBAkoL37rZXwEGTVGM9uqWa0SIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/8d58b5-4f13-47b2-a57e-283bb0923817/1/bBAkoL37rZXwEGTVGM9uqWa0SIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:65:6f:4b:76:01:21:69:11:93:b4:62:91:78:8f:61:34:d9:
12:a9:4b:5b:d3:0d:08:f7:73:34:2c:ec:c1:6e:de:e7:eb:4d:
76:9f:f4:4b:f4:49:66:e3:0c:ad:2f:7a:da:90:b8:54:37:54:
22:6d:dd:ed:45:7d:d3:1b:26:0f:7d:55:4c:cc:5f:85:5a:21:
3f:30:50:b8:02:d3:48:2d:39:4c:c6:b0:f0:01:3a:e5:b8:8d:
af:50:fd:74:45:a4:c7:c2:a1:7a:f1:cb:b4:fb:e5:b5:e9:f0:
cc:b9:60:36:fa:f4:0b:a2:44:6d:cb:50:de:22:25:dc:9d:27:
d1:26:ad:40:13:7f:4b:be:d6:d2:0e:a8:93:c6:90:03:56:d3:
90:57:18:87:24:7d:b8:b3:09:d8:13:f2:ce:82:53:ec:f0:95:
f3:64:6a:a3:50:ed:7b:5f:c8:20:04:be:8d:eb:23:ff:c1:b0:
5a:fb:85:31:4d:9a:8a:47:5f:89:95:bf:c3:3e:1d:7e:51:b8:
57:b3:11:77:96:1b:fd:a1:5a:c0:c5:e9:fd:41:b2:9f:c4:a6:
8c:8c:a9:e9:a8:cd:22:03:04:4d:fd:a1:14:7e:9e:2c:0d:74:
10:d8:24:bc:b7:7f:5d:0e:4b:32:c0:74:a0:cf:02:be:c2:4b:
14:26:7f:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:17:40 2025 by rpki-client