Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/9ca58e-9e32-428f-8411-1aeb6a4e45ad/1/bMacPXAwzsGfj7ZuVDveZVlXCKI.mft
File: bMacPXAwzsGfj7ZuVDveZVlXCKI.mft (raw, json)
Hash identifier: vEiyCgJ/x1Izu4q6DWwQ3cINpnitGuZESFn/nbGQ/98=
Subject key identifier: 05:3E:8F:8E:79:BD:4E:1D:7E:1E:37:AA:42:3B:B0:6A:D6:5C:D0:A4
Authority key identifier: 6C:C6:9C:3D:70:30:CE:C1:9F:8F:B6:6E:54:3B:DE:65:59:57:08:A2
Certificate issuer: /CN=6cc69c3d7030cec19f8fb66e543bde65595708a2
Certificate serial: 0198E309C6FA24C04D7EF5764E3102104A06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bMacPXAwzsGfj7ZuVDveZVlXCKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/9ca58e-9e32-428f-8411-1aeb6a4e45ad/1/bMacPXAwzsGfj7ZuVDveZVlXCKI.mft
Manifest number: 074B
Signing time: Mon 25 Aug 2025 21:02:05 +0000
Manifest this update: Mon 25 Aug 2025 21:02:05 +0000
Manifest next update: Tue 26 Aug 2025 21:02:05 +0000
Files and hashes: 1: LRy1Su2fWLwjRlXSpxKiN2HsmOE.roa (hash: VbIoxvhdv4Kz4zlYMs8a+1GTnDDa2PQSnpokMmTeNJI=)
2: MbTvipFbe-Fro7yGscX94j34OpQ.roa (hash: lGgg0U/FzBropaPivoqmUVqyNKPQ65NR2i0gu4fF2i0=)
3: bMacPXAwzsGfj7ZuVDveZVlXCKI.crl (hash: xFa+WQKEhJVDfgaCXdDAnSBGUMazrqtndIWhgViPdbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/9ca58e-9e32-428f-8411-1aeb6a4e45ad/1/bMacPXAwzsGfj7ZuVDveZVlXCKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/9ca58e-9e32-428f-8411-1aeb6a4e45ad/1/bMacPXAwzsGfj7ZuVDveZVlXCKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/bMacPXAwzsGfj7ZuVDveZVlXCKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 26 Aug 2025 14:16:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:e3:09:c6:fa:24:c0:4d:7e:f5:76:4e:31:02:10:4a:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cc69c3d7030cec19f8fb66e543bde65595708a2
Validity
Not Before: Aug 25 21:02:05 2025 GMT
Not After : Aug 26 21:02:05 2025 GMT
Subject: CN=053e8f8e79bd4e1d7e1e37aa423bb06ad65cd0a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ab:6b:e8:f6:ae:40:41:7a:bd:d5:74:dc:99:
dd:31:69:ad:9a:b2:c7:5a:eb:f1:a6:a7:e0:d9:79:
2b:42:fc:a3:92:66:bd:ef:dc:ca:33:69:09:49:d3:
b5:3f:db:e7:17:03:d3:70:b2:cd:92:a3:e0:e2:73:
14:aa:ae:3a:ca:76:e2:cc:0a:22:fc:bb:02:1c:c3:
cb:a1:2d:73:7e:04:b6:91:28:6c:0f:27:f7:39:0b:
32:f5:b0:e6:23:9d:40:d0:7f:19:7b:a8:c1:c7:ff:
48:0c:20:b7:03:62:47:3a:17:a7:03:ca:3b:8c:72:
6a:42:e6:b0:0a:76:fe:2f:c8:7c:cb:eb:5c:2f:a9:
63:e6:7e:ce:13:ba:62:80:84:84:7f:76:83:5f:78:
4d:2f:c1:d3:60:4f:52:f3:63:7d:ff:e3:ba:89:7a:
97:2a:44:29:f1:8d:14:28:04:65:f2:84:a7:0e:d8:
f9:c6:fe:28:e1:4c:41:d1:3e:a6:7a:a5:59:bf:44:
cf:40:eb:ad:54:ff:8c:bb:68:98:81:6f:c0:a3:f9:
05:80:58:15:c0:1b:a8:54:0f:b3:5a:87:13:ec:9e:
9e:a7:a8:ca:84:48:c5:96:b5:13:68:a0:48:17:c8:
21:cd:c3:34:ed:06:4c:ee:ce:3a:87:fd:5d:7a:76:
dc:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:3E:8F:8E:79:BD:4E:1D:7E:1E:37:AA:42:3B:B0:6A:D6:5C:D0:A4
X509v3 Authority Key Identifier:
keyid:6C:C6:9C:3D:70:30:CE:C1:9F:8F:B6:6E:54:3B:DE:65:59:57:08:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMacPXAwzsGfj7ZuVDveZVlXCKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9ca58e-9e32-428f-8411-1aeb6a4e45ad/1/bMacPXAwzsGfj7ZuVDveZVlXCKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9ca58e-9e32-428f-8411-1aeb6a4e45ad/1/bMacPXAwzsGfj7ZuVDveZVlXCKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:5e:e3:90:e3:ae:5d:18:37:29:57:1e:7c:62:e8:83:67:98:
3b:e3:b0:d3:e5:c5:ac:35:aa:1c:e5:4b:f0:ac:1d:7f:d2:6b:
2c:9f:76:da:a3:32:6d:54:b1:4c:e7:98:f6:ad:39:59:1b:79:
74:d7:b4:86:4a:bc:51:5f:1a:69:34:e4:7a:53:68:dd:a1:ca:
8d:ef:1c:cb:eb:fe:8f:f1:0f:8a:fa:52:69:71:7e:0e:e0:95:
db:37:1f:87:71:41:d5:24:68:6f:57:65:3f:9b:a6:a2:02:f6:
8e:4d:7a:ce:50:04:17:c5:6d:8f:86:d3:0e:2c:b6:99:52:6a:
a2:4c:c7:bb:61:84:59:ae:d3:78:2b:81:03:31:9c:fd:8c:0b:
8b:8f:be:fa:1a:9d:d5:38:7b:7a:10:ba:75:d2:41:51:34:f1:
76:a3:89:cc:c2:08:6f:b4:06:a9:2d:f9:2f:78:ee:cc:39:1e:
57:84:1c:2b:b5:6c:dd:96:7e:e9:b3:fb:33:67:72:0e:96:b4:
07:ed:b7:65:44:55:97:e0:3c:e2:e6:da:b6:1c:06:7b:4b:3c:
22:f0:ce:7e:62:49:60:77:5a:39:87:c6:66:1a:c5:c5:23:b6:
53:b2:d5:a8:f9:9d:7d:3e:53:8c:15:1b:4c:4d:a6:18:b4:2c:
3d:ca:a6:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 26 00:13:44 2025 by rpki-client