Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/6a11f4-e57f-4117-93ab-0a2ec5a23b98/1/bFklNs4G_apawu5IEXz1eqO0yNA.mft
File: bFklNs4G_apawu5IEXz1eqO0yNA.mft (raw, json)
Hash identifier: 0uyAfikmOCsWR4NYBOJBXLyYOYY2UGC2164NwxGqZAo=
Subject key identifier: 97:33:B3:D8:D8:52:27:02:C0:7B:59:35:9C:22:7D:7A:75:DF:0D:85
Authority key identifier: 6C:59:25:36:CE:06:FD:AA:5A:C2:EE:48:11:7C:F5:7A:A3:B4:C8:D0
Certificate issuer: /CN=6c592536ce06fdaa5ac2ee48117cf57aa3b4c8d0
Certificate serial: 019922C3489219A2E74B9F0F148DCB587E91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bFklNs4G_apawu5IEXz1eqO0yNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/6a11f4-e57f-4117-93ab-0a2ec5a23b98/1/bFklNs4G_apawu5IEXz1eqO0yNA.mft
Manifest number: 0762
Signing time: Sun 07 Sep 2025 06:00:47 +0000
Manifest this update: Sun 07 Sep 2025 06:00:47 +0000
Manifest next update: Mon 08 Sep 2025 06:00:47 +0000
Files and hashes: 1: RRRoI352tPME83y_RWi6YuXJIxo.roa (hash: k7Cx4JuzSdpqE84E3rc6FTyI73B5CT48LupLWUTqrZc=)
2: bFklNs4G_apawu5IEXz1eqO0yNA.crl (hash: rnuhJ0oYgIzXm7x/rs2mfeP06jE7bbihWvapqKQOSq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/6a11f4-e57f-4117-93ab-0a2ec5a23b98/1/bFklNs4G_apawu5IEXz1eqO0yNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/6a11f4-e57f-4117-93ab-0a2ec5a23b98/1/bFklNs4G_apawu5IEXz1eqO0yNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bFklNs4G_apawu5IEXz1eqO0yNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:c3:48:92:19:a2:e7:4b:9f:0f:14:8d:cb:58:7e:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c592536ce06fdaa5ac2ee48117cf57aa3b4c8d0
Validity
Not Before: Sep 7 06:00:47 2025 GMT
Not After : Sep 8 06:00:47 2025 GMT
Subject: CN=9733b3d8d8522702c07b59359c227d7a75df0d85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:36:21:6c:05:3f:e5:04:e6:0c:5d:ef:d2:79:
23:bc:62:c2:b8:2f:e8:2b:ec:a9:66:a3:46:f0:fb:
31:ea:e6:c9:b3:bf:cd:14:44:90:36:a5:6c:c1:e1:
cf:0c:e3:4b:b7:4e:f0:19:9f:c1:72:b5:b8:59:a1:
1b:1e:c7:86:fe:8b:6c:e1:92:f6:c8:5f:ab:62:ce:
37:f0:a7:80:78:32:db:22:63:a2:52:2c:3f:80:af:
35:3a:36:fc:4d:e2:8d:b6:77:1a:a1:12:63:06:e8:
0b:e8:c9:1d:ce:f1:cf:67:44:f5:5a:b9:58:cb:8c:
a5:5d:e7:54:ad:dc:2b:bd:0f:1f:a2:6e:81:7e:98:
fa:54:20:b5:29:32:17:b5:58:75:d3:dc:cb:05:d4:
7f:99:7c:44:42:5b:1d:6b:b1:69:3c:e5:cc:27:50:
4a:b8:81:b2:5d:7b:74:cf:a8:92:2a:95:0e:81:ae:
23:1f:49:6c:4f:94:f1:81:37:4f:b0:31:b1:1c:34:
70:70:ed:35:88:5f:b7:ee:6c:9b:20:ec:a6:16:d8:
62:b6:e4:fb:c0:8d:37:ab:e5:f2:58:0a:a9:1d:b3:
ac:28:14:95:2a:17:b3:7f:74:df:56:e1:a5:d0:2e:
be:e0:1c:7a:43:24:8b:93:2d:32:23:d1:05:96:ff:
5f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:33:B3:D8:D8:52:27:02:C0:7B:59:35:9C:22:7D:7A:75:DF:0D:85
X509v3 Authority Key Identifier:
keyid:6C:59:25:36:CE:06:FD:AA:5A:C2:EE:48:11:7C:F5:7A:A3:B4:C8:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bFklNs4G_apawu5IEXz1eqO0yNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6a11f4-e57f-4117-93ab-0a2ec5a23b98/1/bFklNs4G_apawu5IEXz1eqO0yNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6a11f4-e57f-4117-93ab-0a2ec5a23b98/1/bFklNs4G_apawu5IEXz1eqO0yNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:34:68:18:c2:fd:c3:c2:27:16:d2:f7:7e:c2:15:b9:e9:f0:
49:c8:d0:17:08:9c:c0:54:23:ae:ee:ba:fb:52:9b:58:c1:6f:
4c:1a:77:85:e4:7b:d9:71:62:01:66:d8:a3:bc:6d:bf:69:85:
2d:0b:48:52:31:92:8a:f8:05:1d:6a:6d:37:fd:e9:30:5a:eb:
b6:ed:89:31:0e:de:8d:c5:f0:6c:54:09:e7:00:5a:5e:75:6e:
be:7b:44:1c:42:d3:08:8e:78:9d:49:f9:6b:61:92:48:d4:13:
e2:0d:02:10:d2:d7:7e:04:b3:ad:b5:8e:a7:c6:00:19:fa:e9:
49:a3:91:7c:e4:1e:a4:23:c4:ea:a7:56:e9:88:c2:26:fe:8b:
82:db:82:80:c0:60:af:b5:4a:91:d6:50:b8:2d:b4:09:1b:74:
89:e3:34:e4:be:6a:92:70:b0:72:0d:9b:70:ea:a6:55:88:bb:
b0:08:81:4a:e0:51:3e:0f:57:be:5b:1a:63:d7:a6:aa:f9:47:
62:ee:67:ad:c0:eb:00:3b:6c:18:4d:d5:90:50:5f:15:38:59:
c8:d4:56:1e:76:79:04:31:f2:b2:81:a8:e2:1b:c8:17:21:1b:
92:c7:df:5a:e9:73:54:1a:e8:28:c1:fa:4f:38:d5:09:66:0e:
ab:e6:f6:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 11:39:31 2025 by rpki-client