Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/9db87f-a31a-4b4d-8624-280f5a4b5e03/1/bLyEAvCSNDucA9OGBpco-Jg-YAg.mft
File: bLyEAvCSNDucA9OGBpco-Jg-YAg.mft (raw, json)
Hash identifier: V/Z/E823tP1ztNLYqIiq7AsaA/y2Yvwt2ZX7xeV3y8A=
Subject key identifier: 46:95:E6:AF:F7:D7:30:A5:31:49:C1:34:B9:C9:45:AC:57:F1:41:5D
Authority key identifier: 6C:BC:84:02:F0:92:34:3B:9C:03:D3:86:06:97:28:F8:98:3E:60:08
Certificate issuer: /CN=6cbc8402f092343b9c03d386069728f8983e6008
Certificate serial: 0198C75B4AEC26FF635B9A051B9AFFA120E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bLyEAvCSNDucA9OGBpco-Jg-YAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/9db87f-a31a-4b4d-8624-280f5a4b5e03/1/bLyEAvCSNDucA9OGBpco-Jg-YAg.mft
Manifest number: 0EAB
Signing time: Wed 20 Aug 2025 12:01:45 +0000
Manifest this update: Wed 20 Aug 2025 12:01:45 +0000
Manifest next update: Thu 21 Aug 2025 12:01:45 +0000
Files and hashes: 1: bLyEAvCSNDucA9OGBpco-Jg-YAg.crl (hash: U3f9ZvfDz8NrRN2Iw5vlyPhKbtRSGrQ4UD479J8nTK8=)
2: cdM459bUqR9CDHxK6hkgW3z_lyI.roa (hash: yGuDalXNxH1KMB1e5SARV7XMjke+R1A0tgbxBSQwq0g=)
3: gDWc6H7uj9ibkrZP4t2rHY2dAjc.roa (hash: kA5V7O8+i9I2snnuaBTFlKTpJopDxBn7UIT61zUY590=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/9db87f-a31a-4b4d-8624-280f5a4b5e03/1/bLyEAvCSNDucA9OGBpco-Jg-YAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/9db87f-a31a-4b4d-8624-280f5a4b5e03/1/bLyEAvCSNDucA9OGBpco-Jg-YAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/bLyEAvCSNDucA9OGBpco-Jg-YAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 21 Aug 2025 12:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:c7:5b:4a:ec:26:ff:63:5b:9a:05:1b:9a:ff:a1:20:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cbc8402f092343b9c03d386069728f8983e6008
Validity
Not Before: Aug 20 12:01:45 2025 GMT
Not After : Aug 21 12:01:45 2025 GMT
Subject: CN=4695e6aff7d730a53149c134b9c945ac57f1415d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0f:f8:11:07:08:db:4c:04:4c:d7:98:1a:34:
f8:ab:ab:b3:d0:bf:fe:4c:68:0e:2f:79:d2:e8:43:
d8:da:a6:92:40:d8:73:2d:5c:55:20:fa:7e:71:1b:
c7:31:d1:ab:5b:a8:c0:da:6f:f6:4f:47:a9:22:a2:
fe:cf:3d:64:a9:af:5e:54:d2:b4:bc:22:03:41:ec:
56:81:11:0e:30:9f:52:87:e0:6c:f4:5b:3f:79:95:
8e:cf:97:62:bc:6f:e5:1f:50:6c:68:4f:3b:56:72:
e3:cf:75:34:d3:ec:6c:c6:23:a5:55:c1:d3:86:76:
72:6f:a8:84:b4:e9:d0:f0:d6:4c:f3:ab:a1:35:1a:
58:58:ee:08:7a:80:26:10:43:3f:dc:36:60:67:72:
03:dd:08:02:f0:7b:0f:e9:58:a7:04:c1:b9:2a:16:
49:62:10:a8:09:46:13:7f:44:10:68:06:b0:4c:72:
80:01:ba:3e:3f:95:41:ba:c7:2f:22:51:b2:6e:96:
0b:fe:f8:8b:51:1d:fb:07:46:bf:57:a9:14:2c:fd:
11:e2:4c:a2:ce:08:7a:9a:0f:ac:97:ae:80:1a:1d:
39:e7:d2:5e:c6:8e:ee:85:2f:86:f9:8f:31:d4:93:
7a:e2:7e:84:54:f5:b2:b9:ab:f1:70:aa:e7:f7:54:
2e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:95:E6:AF:F7:D7:30:A5:31:49:C1:34:B9:C9:45:AC:57:F1:41:5D
X509v3 Authority Key Identifier:
keyid:6C:BC:84:02:F0:92:34:3B:9C:03:D3:86:06:97:28:F8:98:3E:60:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bLyEAvCSNDucA9OGBpco-Jg-YAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/9db87f-a31a-4b4d-8624-280f5a4b5e03/1/bLyEAvCSNDucA9OGBpco-Jg-YAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/9db87f-a31a-4b4d-8624-280f5a4b5e03/1/bLyEAvCSNDucA9OGBpco-Jg-YAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:39:1c:83:5c:14:72:70:45:39:08:2c:f2:4a:24:c1:b9:41:
0b:5c:9a:87:de:bb:42:7f:9f:da:28:12:11:9d:66:8b:9e:87:
4a:65:d5:ca:ad:7a:f0:94:5d:50:9e:ae:3c:ed:3f:e5:9e:3d:
ca:d5:df:7a:dc:7b:b8:c1:2c:a6:37:26:ca:29:ca:96:c9:66:
5d:f2:d1:21:3b:6a:43:68:4b:24:77:9f:b5:2e:86:10:c3:f8:
a7:d4:fd:0a:e4:fa:66:79:5d:e7:78:b1:c0:31:65:c2:25:cb:
66:42:9e:92:04:9b:d8:3d:d2:b7:4a:e3:83:44:e6:16:d3:30:
9a:87:e7:b5:e7:8d:d7:f9:94:53:55:09:e7:ff:2e:a3:05:bc:
01:55:a6:a3:c8:40:2e:4f:18:c5:b5:ae:9d:77:90:7c:68:bb:
cf:3f:eb:a2:bd:14:0e:30:5d:b2:74:32:4b:49:22:f3:4c:59:
45:1d:ac:08:a8:87:dc:3f:16:a9:97:89:00:0e:9f:61:8c:bc:
12:7a:bd:df:2c:94:91:9a:3b:a6:78:45:b0:06:c8:64:3f:3c:
2a:42:bb:e5:04:70:55:97:0d:01:43:6f:73:a1:00:c4:c7:f5:
ac:ea:fa:a1:b0:0e:e4:9b:05:5d:67:68:1c:9c:ac:04:de:f2:
a3:0a:bf:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 20 15:31:35 2025 by rpki-client