Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/dd7764-1a58-45e6-ad83-32a60912ef40/1/bG3bcucmgpjBcUWDExu-SuTvCRY.mft
File: bG3bcucmgpjBcUWDExu-SuTvCRY.mft (raw, json)
Hash identifier: zC3TTt1tO1RvztEIzZTFFCiZ698TwQzVxyn2zsUBuXw=
Subject key identifier: 42:80:A3:18:94:D1:C5:17:21:38:12:3A:A3:87:E1:C3:F5:E6:E3:57
Authority key identifier: 6C:6D:DB:72:E7:26:82:98:C1:71:45:83:13:1B:BE:4A:E4:EF:09:16
Certificate issuer: /CN=6c6ddb72e7268298c1714583131bbe4ae4ef0916
Certificate serial: 019933801FD9BB3553135F88A890316404D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bG3bcucmgpjBcUWDExu-SuTvCRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/dd7764-1a58-45e6-ad83-32a60912ef40/1/bG3bcucmgpjBcUWDExu-SuTvCRY.mft
Manifest number: 0ADE
Signing time: Wed 10 Sep 2025 12:00:58 +0000
Manifest this update: Wed 10 Sep 2025 12:00:58 +0000
Manifest next update: Thu 11 Sep 2025 12:00:58 +0000
Files and hashes: 1: 29nd_dOa0jOSjO-BSVNW7WFQmeU.roa (hash: PQzBa+M3c2965MBEIUlCwMA/PPxb1gOFyUG0cf3P01E=)
2: bG3bcucmgpjBcUWDExu-SuTvCRY.crl (hash: GQtlqtc7IBn6zYI1f13vE3gTt1uMEO8M4Q3Q7Vvmhwk=)
3: zSoruqrv0RMRlvtEdSofVrHKUNM.roa (hash: zchVE5WsD0we5YnngEjVpAF61yVGUwwg3Aq8gS0jfiI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/dd7764-1a58-45e6-ad83-32a60912ef40/1/bG3bcucmgpjBcUWDExu-SuTvCRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/dd7764-1a58-45e6-ad83-32a60912ef40/1/bG3bcucmgpjBcUWDExu-SuTvCRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bG3bcucmgpjBcUWDExu-SuTvCRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 11:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:33:80:1f:d9:bb:35:53:13:5f:88:a8:90:31:64:04:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c6ddb72e7268298c1714583131bbe4ae4ef0916
Validity
Not Before: Sep 10 12:00:58 2025 GMT
Not After : Sep 11 12:00:58 2025 GMT
Subject: CN=4280a31894d1c5172138123aa387e1c3f5e6e357
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:74:ed:54:06:41:2f:ac:19:5f:49:de:69:78:
2a:d6:8e:a1:95:a5:79:49:1a:53:65:44:fb:cc:a2:
85:75:f1:6a:da:7a:f7:f3:62:3f:ac:17:2d:34:bb:
db:b7:63:3e:a2:6f:18:c1:a6:bc:8c:47:9b:07:c8:
ff:d5:29:03:7e:1e:1e:d0:6a:fe:d5:89:3e:81:48:
d6:a3:a2:02:32:53:aa:5b:a1:f0:a0:e7:12:31:a9:
70:40:c2:79:c0:b3:20:61:d4:51:f3:f9:c2:09:26:
ed:a4:c9:cb:0f:3f:89:6b:d0:f4:07:0f:21:28:42:
52:e8:2b:b6:08:f6:74:d7:2b:e1:4f:6e:e6:6f:f6:
ab:d3:d9:19:fa:93:02:9e:4e:cd:39:f7:99:af:7b:
d1:7e:da:f5:7e:48:c5:d6:9e:db:6d:95:73:8e:72:
75:05:08:1c:7f:62:3f:9b:55:e7:49:db:42:91:12:
01:44:27:66:cf:71:f4:ca:2a:98:75:81:e3:a0:78:
d1:3d:03:0d:c1:5c:b1:4f:61:86:4f:89:d2:cc:9c:
6d:29:4c:5a:87:ce:91:d8:a3:03:b4:53:51:86:9c:
a6:fa:61:b9:01:b3:07:45:75:bd:d5:0c:66:62:55:
8b:52:5e:a5:10:a2:c5:45:5f:a2:6a:1e:65:db:6d:
20:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:80:A3:18:94:D1:C5:17:21:38:12:3A:A3:87:E1:C3:F5:E6:E3:57
X509v3 Authority Key Identifier:
keyid:6C:6D:DB:72:E7:26:82:98:C1:71:45:83:13:1B:BE:4A:E4:EF:09:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bG3bcucmgpjBcUWDExu-SuTvCRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/dd7764-1a58-45e6-ad83-32a60912ef40/1/bG3bcucmgpjBcUWDExu-SuTvCRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/dd7764-1a58-45e6-ad83-32a60912ef40/1/bG3bcucmgpjBcUWDExu-SuTvCRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:b1:57:69:fa:59:ec:1a:fd:b8:fe:7b:59:8c:17:37:29:59:
35:c5:6b:5c:c1:46:39:6a:7e:a8:e9:c6:d0:79:98:36:20:0d:
aa:0b:23:af:ca:81:9a:70:3c:20:15:e7:50:6a:87:33:88:11:
8a:c5:69:c5:9b:26:d7:49:e0:eb:8f:a5:19:d7:58:dd:d6:1e:
f6:74:e6:e1:44:8c:b2:59:04:e5:e2:b0:be:52:3d:67:2e:80:
28:ac:f8:06:38:16:6f:1a:4e:cd:d8:ef:9e:ae:e9:16:67:27:
85:6e:fe:b2:5e:ff:00:cc:a3:ae:a4:96:22:36:bc:c5:6d:b9:
e7:45:f9:59:f3:f6:1a:98:9a:09:b8:ae:6f:fa:f8:66:31:70:
2d:22:4f:19:97:f3:d2:47:65:65:77:0a:a5:22:2c:dd:b4:1c:
79:b5:ef:9a:f9:fb:40:d1:26:d3:e0:f2:73:da:64:b6:85:be:
a5:48:9e:63:9f:76:a6:ec:78:2b:3b:12:f8:99:c1:df:41:f3:
09:4b:dc:ac:df:e3:5e:8e:b1:9d:f8:d1:0a:1f:27:db:2d:4b:
48:8c:b3:eb:26:0c:52:bc:12:49:8e:7c:29:8c:5b:83:d5:c1:
3c:52:53:bf:c9:e7:37:4a:ae:9d:a7:a3:66:6d:f1:28:99:9c:
dc:c2:82:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 14:14:11 2025 by rpki-client