Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/42af1e-d553-4fe6-9fc3-f9633292c977/1/bHOgSn0Ost9H2vDDn7p142XIhT0.mft
File: bHOgSn0Ost9H2vDDn7p142XIhT0.mft (raw, json)
Hash identifier: m+uxAbQibl7nDtc1eOgW6FHlbauUM/9aMqe0M3wcjeM=
Subject key identifier: D5:83:37:99:25:A3:CF:8D:E2:6C:7B:7D:5B:40:06:BA:26:9D:96:F1
Authority key identifier: 6C:73:A0:4A:7D:0E:B2:DF:47:DA:F0:C3:9F:BA:75:E3:65:C8:85:3D
Certificate issuer: /CN=6c73a04a7d0eb2df47daf0c39fba75e365c8853d
Certificate serial: 01992255D3E4D8B65D3AE9A5B2D748275D22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bHOgSn0Ost9H2vDDn7p142XIhT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/42af1e-d553-4fe6-9fc3-f9633292c977/1/bHOgSn0Ost9H2vDDn7p142XIhT0.mft
Manifest number: 1043
Signing time: Sun 07 Sep 2025 04:01:14 +0000
Manifest this update: Sun 07 Sep 2025 04:01:14 +0000
Manifest next update: Mon 08 Sep 2025 04:01:14 +0000
Files and hashes: 1: 1g8u0Gir8yCyVBvzcuA27ZsMTcA.roa (hash: hLEqWjYzmOf232eRZFufaSm1niRcj5QeYBzcD6/dycc=)
2: bHOgSn0Ost9H2vDDn7p142XIhT0.crl (hash: z60KaRCogP5Vc1e3rChoY+iY490D7e9mYvALtIQUmUA=)
3: uSLH-6azWyM6_toWim6PNb4arp4.roa (hash: imwU+Zb8TWocoYkIF0ZGoxJDK+doen6jZopoR2zFVWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/42af1e-d553-4fe6-9fc3-f9633292c977/1/bHOgSn0Ost9H2vDDn7p142XIhT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/42af1e-d553-4fe6-9fc3-f9633292c977/1/bHOgSn0Ost9H2vDDn7p142XIhT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bHOgSn0Ost9H2vDDn7p142XIhT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:d3:e4:d8:b6:5d:3a:e9:a5:b2:d7:48:27:5d:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c73a04a7d0eb2df47daf0c39fba75e365c8853d
Validity
Not Before: Sep 7 04:01:14 2025 GMT
Not After : Sep 8 04:01:14 2025 GMT
Subject: CN=d583379925a3cf8de26c7b7d5b4006ba269d96f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:79:21:09:d7:b9:63:1f:7f:e6:d1:f9:8d:e5:
ec:fc:b4:b0:b0:68:1e:90:a6:e5:39:48:1d:0c:7f:
93:ec:86:d7:d3:a7:d7:70:4b:dd:72:5f:d3:5e:3c:
81:36:5e:7c:d0:57:21:c5:41:c2:39:94:27:9e:09:
70:6a:fb:5a:b4:33:2c:81:8d:dd:47:d3:7b:48:b3:
60:77:1c:7d:f2:fc:1f:14:47:4f:93:a8:25:8d:1e:
b1:69:bd:bd:72:c9:c8:f8:c3:1b:4d:12:ff:c1:66:
7f:65:95:a0:9c:6b:25:0f:e1:8b:aa:87:12:49:51:
f4:ab:dd:df:2a:2a:f2:4b:6a:ef:85:2f:a5:97:5f:
14:a3:c3:de:c4:52:82:1a:5a:d9:7c:17:9a:9f:7e:
9d:52:ec:90:23:ad:d6:70:6a:2a:17:95:51:53:32:
59:0b:29:e4:74:13:67:fd:a9:19:07:fd:54:b1:94:
f6:14:eb:c7:0c:a1:41:6d:c2:72:6c:31:78:47:4c:
09:a2:16:da:84:54:b2:12:d2:6a:0d:c3:5e:53:be:
d8:d0:54:aa:78:83:25:3e:6d:91:ef:b8:6d:35:23:
1e:68:4f:b4:71:b7:70:fb:eb:57:3c:57:6d:9f:04:
f7:43:20:c0:1d:d6:67:ae:80:6d:0b:ab:da:04:be:
c2:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:83:37:99:25:A3:CF:8D:E2:6C:7B:7D:5B:40:06:BA:26:9D:96:F1
X509v3 Authority Key Identifier:
keyid:6C:73:A0:4A:7D:0E:B2:DF:47:DA:F0:C3:9F:BA:75:E3:65:C8:85:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bHOgSn0Ost9H2vDDn7p142XIhT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/42af1e-d553-4fe6-9fc3-f9633292c977/1/bHOgSn0Ost9H2vDDn7p142XIhT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/42af1e-d553-4fe6-9fc3-f9633292c977/1/bHOgSn0Ost9H2vDDn7p142XIhT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:93:9b:cb:2f:37:b3:e6:94:34:94:28:a3:15:24:27:bc:46:
85:0d:4a:68:b2:5e:c5:eb:e5:93:4a:b7:0d:ea:7b:76:b8:f9:
a9:45:5e:b3:11:a2:18:2d:c9:63:5b:76:f6:9b:45:13:0e:ae:
de:d0:b4:18:60:43:17:bf:71:31:53:b7:54:15:b5:07:e6:7c:
4a:7e:75:56:08:84:28:1b:16:3c:a2:d4:49:f0:9e:3e:ac:25:
67:b4:92:6d:18:8c:54:3b:ce:97:35:e7:f3:f6:85:a3:86:c9:
52:98:a4:74:4e:19:0b:f0:ef:8e:e0:c8:85:92:15:45:af:e2:
14:b8:46:0e:3e:57:d5:2a:fa:90:6d:bf:34:eb:49:db:7a:9e:
57:82:7e:55:32:b4:b1:55:ec:b0:c7:11:8c:7c:0a:b9:0e:13:
be:ac:ec:d6:e0:85:b7:27:c3:c3:fb:c4:49:aa:d1:b3:85:9d:
70:3b:88:fa:a2:42:a0:15:cf:9f:e1:93:43:c6:75:0d:8d:80:
7c:6f:ed:b3:bb:2f:b1:40:1f:87:2f:d0:82:a3:95:d1:30:88:
83:fd:f4:91:8e:97:74:0e:43:a9:77:f9:fc:be:ed:e5:7b:1d:
b9:39:90:4e:71:5c:2b:34:40:4e:3e:42:0c:11:2a:1e:76:94:
8b:a9:a2:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:08:28 2025 by rpki-client