Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/344e2c-1c56-43ab-8108-eaf68b59e599/1/bP02Bzbx-myXcPy0i-WUvmCeWz4.mft
File: bP02Bzbx-myXcPy0i-WUvmCeWz4.mft (raw, json)
Hash identifier: IUa+a64BAykRqc7Wt4y/fx/y0NWBBZY+e2R18t2Kt/w=
Subject key identifier: E4:2F:7F:A0:56:4B:B0:3D:31:5F:DC:32:F2:34:5A:A3:3D:D0:3B:83
Authority key identifier: 6C:FD:36:07:36:F1:FA:6C:97:70:FC:B4:8B:E5:94:BE:60:9E:5B:3E
Certificate issuer: /CN=6cfd360736f1fa6c9770fcb48be594be609e5b3e
Certificate serial: 019936EEBA51EDB2313067BC8295D244DA09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bP02Bzbx-myXcPy0i-WUvmCeWz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/344e2c-1c56-43ab-8108-eaf68b59e599/1/bP02Bzbx-myXcPy0i-WUvmCeWz4.mft
Manifest number: 167C
Signing time: Thu 11 Sep 2025 04:00:38 +0000
Manifest this update: Thu 11 Sep 2025 04:00:38 +0000
Manifest next update: Fri 12 Sep 2025 04:00:38 +0000
Files and hashes: 1: DC68jaJzKs4sWOyzS3O5wTgtZNE.roa (hash: 1O1Vjs/w38AlpgFvrtScFHTsBaANSIlvVfPi7Rtab9k=)
2: Pp9dfiM_MT5SdF1T82CtQd0OZJw.roa (hash: h3fdCt6Okubry0k+FISuRK++uR3zvuFiodlZnV6ykfI=)
3: bP02Bzbx-myXcPy0i-WUvmCeWz4.crl (hash: 5NCpuLcq+KPiBY0n0Bnp4YSKIa8WbPkpmsc8YOQGFQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/344e2c-1c56-43ab-8108-eaf68b59e599/1/bP02Bzbx-myXcPy0i-WUvmCeWz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/344e2c-1c56-43ab-8108-eaf68b59e599/1/bP02Bzbx-myXcPy0i-WUvmCeWz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/bP02Bzbx-myXcPy0i-WUvmCeWz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Sep 2025 04:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:36:ee:ba:51:ed:b2:31:30:67:bc:82:95:d2:44:da:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cfd360736f1fa6c9770fcb48be594be609e5b3e
Validity
Not Before: Sep 11 04:00:38 2025 GMT
Not After : Sep 12 04:00:38 2025 GMT
Subject: CN=e42f7fa0564bb03d315fdc32f2345aa33dd03b83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:63:b8:39:fc:77:cf:a0:75:50:b3:98:02:96:
aa:4b:92:93:ba:4c:25:a4:ce:15:1c:dc:9a:04:d4:
1f:c5:45:e8:b9:49:7e:89:8c:14:7a:75:0d:34:19:
a9:c0:e4:ac:c6:de:ec:0d:1e:e4:e6:29:20:7c:dc:
d2:fd:12:85:83:3d:17:ab:2e:2d:ab:13:dd:c3:74:
e9:22:1f:24:c3:fc:98:e1:1b:38:be:c3:fb:dd:ee:
61:cc:3d:df:aa:d5:8a:bd:3d:0c:bb:47:e3:0c:28:
19:97:bc:6f:cc:bc:6d:30:5d:7b:e6:59:74:be:ff:
b9:85:b9:eb:3c:6d:9a:45:92:e8:c0:7e:32:ad:73:
27:d5:88:ef:d0:dd:47:c5:ee:32:b5:47:88:3f:48:
58:2d:ca:68:3e:1b:a9:9f:5c:aa:a5:9b:b3:ae:01:
29:87:eb:56:6c:90:24:f7:bc:82:83:bf:86:30:91:
8c:f9:6b:da:72:b4:d3:b0:0e:8b:9b:43:df:1e:91:
6b:84:32:9d:96:2a:c3:14:47:82:ce:4b:4b:87:e2:
bf:b3:3e:e8:3e:c0:df:b5:cf:35:04:f1:e7:a9:2f:
96:0e:98:d6:b9:c0:e4:4e:14:9d:d7:ad:b4:6f:3e:
0d:31:1b:c2:9a:83:d8:d4:b6:4c:a0:72:59:ef:71:
f2:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:2F:7F:A0:56:4B:B0:3D:31:5F:DC:32:F2:34:5A:A3:3D:D0:3B:83
X509v3 Authority Key Identifier:
keyid:6C:FD:36:07:36:F1:FA:6C:97:70:FC:B4:8B:E5:94:BE:60:9E:5B:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bP02Bzbx-myXcPy0i-WUvmCeWz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/344e2c-1c56-43ab-8108-eaf68b59e599/1/bP02Bzbx-myXcPy0i-WUvmCeWz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/344e2c-1c56-43ab-8108-eaf68b59e599/1/bP02Bzbx-myXcPy0i-WUvmCeWz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:33:27:d9:72:1d:6f:71:da:39:36:cf:10:88:8b:31:9d:07:
59:dd:48:06:b0:fa:9f:17:f6:07:9c:e2:21:83:9e:a3:e4:38:
d5:6b:69:3b:54:c1:31:e0:51:2d:ee:94:d0:43:8d:09:3b:e3:
be:68:37:42:97:dd:0a:69:2e:43:95:1e:ca:a4:f0:c3:cc:d2:
7a:9e:44:e8:f8:94:3d:e1:9b:81:3b:c8:61:51:79:da:7b:33:
be:02:c6:94:f6:3d:46:7e:4a:3a:16:81:48:84:d8:3a:67:55:
a6:27:d1:10:8c:74:81:d2:37:3b:ce:6d:66:d2:99:76:d9:27:
41:db:27:eb:23:88:9e:ce:09:d7:25:9a:83:39:ee:32:ee:84:
2b:63:9b:a5:e5:ba:d6:80:ff:59:f8:df:ae:1b:d3:c8:ad:16:
2a:7d:da:3a:a3:ab:bb:0f:93:1d:61:98:c5:a2:5f:da:8c:ab:
41:e2:97:5f:c6:25:12:d1:0f:e8:a1:87:62:48:91:88:9e:c1:
23:b4:2c:ee:30:21:b9:74:3a:99:a5:40:05:dd:91:55:22:57:
3b:0e:7e:e5:16:1e:16:66:ee:4b:71:32:42:f9:1b:4c:00:28:
53:94:42:3e:60:e7:40:47:ab:b4:87:32:bc:0a:c3:0f:07:9e:
fe:68:b5:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 11 11:47:03 2025 by rpki-client