Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/d983cd-3f8e-4d6e-a38c-4d8d62b18e89/1/bFMRpXzPy1E1Jh_zm9GaEV7z588.mft
File: bFMRpXzPy1E1Jh_zm9GaEV7z588.mft (raw, json)
Hash identifier: KOkli9ua8+7sHpAtpsR5OxYJnto38biQK9yiw5bQlHU=
Subject key identifier: 1C:BA:19:04:15:C0:15:47:46:8B:70:74:A8:1B:56:D2:22:EC:B8:44
Authority key identifier: 6C:53:11:A5:7C:CF:CB:51:35:26:1F:F3:9B:D1:9A:11:5E:F3:E7:CF
Certificate issuer: /CN=6c5311a57ccfcb5135261ff39bd19a115ef3e7cf
Certificate serial: 01992256121AFB1DCF063035830E0CD65927
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bFMRpXzPy1E1Jh_zm9GaEV7z588.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/d983cd-3f8e-4d6e-a38c-4d8d62b18e89/1/bFMRpXzPy1E1Jh_zm9GaEV7z588.mft
Manifest number: 1673
Signing time: Sun 07 Sep 2025 04:01:29 +0000
Manifest this update: Sun 07 Sep 2025 04:01:29 +0000
Manifest next update: Mon 08 Sep 2025 04:01:29 +0000
Files and hashes: 1: YJycfGdeJ164QrjQ89Pquxal_pc.roa (hash: fDEXe9y2Vppryd4ojiqVG2aN2es1Vh/q/2xftzkXWbQ=)
2: bFMRpXzPy1E1Jh_zm9GaEV7z588.crl (hash: RgVnJoHfHYv3omdE2/NtiqtIw6KnHe/avb6sHTcsOOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/d983cd-3f8e-4d6e-a38c-4d8d62b18e89/1/bFMRpXzPy1E1Jh_zm9GaEV7z588.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/d983cd-3f8e-4d6e-a38c-4d8d62b18e89/1/bFMRpXzPy1E1Jh_zm9GaEV7z588.mft
rsync://rpki.ripe.net/repository/DEFAULT/bFMRpXzPy1E1Jh_zm9GaEV7z588.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:56:12:1a:fb:1d:cf:06:30:35:83:0e:0c:d6:59:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c5311a57ccfcb5135261ff39bd19a115ef3e7cf
Validity
Not Before: Sep 7 04:01:29 2025 GMT
Not After : Sep 8 04:01:29 2025 GMT
Subject: CN=1cba190415c01547468b7074a81b56d222ecb844
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:35:05:4d:48:7d:01:6a:16:32:10:01:03:29:
47:24:7e:df:52:1c:c1:42:21:6f:aa:2c:eb:77:e2:
95:fe:b8:85:62:ee:e9:fe:94:99:72:2e:34:83:e9:
4b:5e:07:8d:21:bb:83:bf:ea:e1:af:81:ae:dc:9a:
c7:93:de:08:a6:b3:bb:9d:63:d5:89:17:53:f2:7b:
f4:c1:1b:0b:b5:fa:1f:70:45:3f:52:6f:9f:ea:39:
f6:6b:c3:5d:63:2c:6d:59:fc:06:61:17:22:69:f7:
26:af:2e:92:93:d8:74:7e:84:0c:07:89:92:de:19:
b9:ed:b0:f9:d9:e9:b5:d6:bd:ef:b3:d0:18:54:19:
09:ed:1b:5f:ae:eb:55:7f:52:10:70:a4:15:19:03:
b3:08:c5:5e:ea:eb:3f:6a:2d:f8:5f:de:1b:1b:65:
a4:f8:ec:de:52:ec:97:28:86:86:95:56:f6:6c:01:
24:c0:c7:a0:54:42:a1:c2:2f:97:66:08:db:ee:7e:
eb:94:c9:ed:83:cd:64:82:44:ee:d8:e2:63:68:50:
bd:9c:ce:e4:c6:c3:69:76:9f:5e:7c:21:f8:d7:d3:
93:62:0c:93:48:3f:be:24:a5:5d:05:10:14:b4:52:
8e:b0:e6:2a:c0:1b:10:97:8b:03:70:0c:78:96:16:
cc:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:BA:19:04:15:C0:15:47:46:8B:70:74:A8:1B:56:D2:22:EC:B8:44
X509v3 Authority Key Identifier:
keyid:6C:53:11:A5:7C:CF:CB:51:35:26:1F:F3:9B:D1:9A:11:5E:F3:E7:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bFMRpXzPy1E1Jh_zm9GaEV7z588.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/d983cd-3f8e-4d6e-a38c-4d8d62b18e89/1/bFMRpXzPy1E1Jh_zm9GaEV7z588.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/d983cd-3f8e-4d6e-a38c-4d8d62b18e89/1/bFMRpXzPy1E1Jh_zm9GaEV7z588.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:35:3d:b4:fe:72:54:ad:61:24:27:9d:c2:39:23:0c:0f:84:
e8:29:a3:40:00:41:80:3d:1c:5e:19:4e:d8:46:b1:49:4b:a6:
c5:fb:82:17:89:bc:06:4d:b5:fd:cb:1f:f2:5d:74:d7:aa:62:
a3:d4:ff:81:45:96:22:79:25:be:b6:7a:bb:59:f7:07:42:6a:
21:7d:fc:7b:2b:16:3e:bc:8c:c6:28:b0:b3:82:4e:60:93:eb:
0c:ab:86:a0:c6:a1:dc:09:a6:0f:61:65:2e:4d:7b:5c:d7:a6:
2f:e5:b9:2f:95:4f:f4:0f:29:f4:8f:37:da:7b:91:df:4f:b1:
b3:a0:bc:6b:e2:2e:17:c0:50:5b:fa:a6:74:96:dd:37:d0:c3:
89:ca:db:b0:6c:bf:fb:54:30:69:99:98:8d:ef:85:25:a8:4e:
09:bc:7c:a4:94:f3:fd:12:ba:3e:6a:52:fc:b4:a7:01:44:cd:
16:27:c5:4f:53:4a:3c:83:1c:bc:c1:92:dc:2f:1c:50:da:c0:
dd:60:01:9c:ce:6a:86:b9:23:b2:23:07:63:89:1f:f5:b3:bf:
a5:e8:94:0e:9d:ba:6c:12:ce:0a:93:15:f7:e7:53:df:bd:a9:
6a:af:1c:08:91:b8:f1:1e:7e:d8:ae:30:ad:b2:94:04:9b:a8:
94:cb:37:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:11:26 2025 by rpki-client