Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/f9503e-da85-45fc-b032-b2e7feff402f/1/bV-D7gKxc3SL5d47O5wlMXmSaOg.mft
File: bV-D7gKxc3SL5d47O5wlMXmSaOg.mft (raw, json)
Hash identifier: oXSIklEwPf/Cf/XSUTx+sUpID67jgTtObVAa+yoFimg=
Subject key identifier: 9A:BE:D8:62:E0:1C:EF:73:5F:C4:97:AA:8A:4C:08:F4:31:3D:7E:68
Authority key identifier: 6D:5F:83:EE:02:B1:73:74:8B:E5:DE:3B:3B:9C:25:31:79:92:68:E8
Certificate issuer: /CN=6d5f83ee02b173748be5de3b3b9c2531799268e8
Certificate serial: 0199225547725401F9972F5AF733B0735A9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bV-D7gKxc3SL5d47O5wlMXmSaOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/f9503e-da85-45fc-b032-b2e7feff402f/1/bV-D7gKxc3SL5d47O5wlMXmSaOg.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 04:00:38 +0000
Manifest this update: Sun 07 Sep 2025 04:00:38 +0000
Manifest next update: Mon 08 Sep 2025 04:00:38 +0000
Files and hashes: 1: TOEiqlLp3YhnuZt00V4Ge_gWm3w.roa (hash: 7eGYzt0fIboqSotZXLbGSLMqFgnc7lNxn1f/rJYyeyA=)
2: bV-D7gKxc3SL5d47O5wlMXmSaOg.crl (hash: axH+EQ/HiH6MiwdaVw31ikDru2s2VqNZtTl5qT/Kktw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/f9503e-da85-45fc-b032-b2e7feff402f/1/bV-D7gKxc3SL5d47O5wlMXmSaOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/f9503e-da85-45fc-b032-b2e7feff402f/1/bV-D7gKxc3SL5d47O5wlMXmSaOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/bV-D7gKxc3SL5d47O5wlMXmSaOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:47:72:54:01:f9:97:2f:5a:f7:33:b0:73:5a:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d5f83ee02b173748be5de3b3b9c2531799268e8
Validity
Not Before: Sep 7 04:00:38 2025 GMT
Not After : Sep 8 04:00:38 2025 GMT
Subject: CN=9abed862e01cef735fc497aa8a4c08f4313d7e68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f0:6b:d9:19:95:24:dc:bb:63:6b:88:0b:58:
b8:21:d2:18:60:69:e5:2f:2a:1d:2a:a9:e3:3c:5d:
18:92:42:fd:f1:5a:b0:91:2e:b4:34:b6:95:e8:61:
bd:2e:b9:4f:27:0b:36:8f:bc:54:72:09:e0:b9:2c:
74:81:c4:7b:86:f3:4b:80:32:61:9e:0c:90:b1:1a:
4f:6c:b4:20:22:eb:be:d5:8e:ce:e7:9b:9d:d8:7d:
20:86:c4:65:56:26:9a:d2:e7:81:be:d3:fb:e4:ff:
05:70:7b:74:a8:ef:03:c3:fd:6b:e8:f8:a6:45:7c:
21:23:8a:c8:7a:75:20:9b:43:16:59:c0:54:ea:13:
aa:95:34:4d:96:7f:d3:16:2a:2d:ad:b8:e3:53:cf:
67:bd:f1:85:71:60:e5:6d:73:8a:e8:5c:07:6d:97:
68:bf:cf:35:6d:36:5f:8b:28:b8:19:70:a4:1a:3a:
df:63:6e:69:cb:6d:a2:74:c7:63:84:b4:d2:3a:0a:
48:7f:f6:9a:36:c3:d2:c6:af:18:4f:d0:7a:21:0f:
2e:22:a9:3f:e0:20:0e:84:00:65:61:79:7a:9e:46:
4d:49:68:30:c9:f4:a9:af:3d:e3:83:95:01:d3:f7:
12:6d:40:f6:21:e7:cf:4d:26:00:ad:a1:87:9d:f5:
b0:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:BE:D8:62:E0:1C:EF:73:5F:C4:97:AA:8A:4C:08:F4:31:3D:7E:68
X509v3 Authority Key Identifier:
keyid:6D:5F:83:EE:02:B1:73:74:8B:E5:DE:3B:3B:9C:25:31:79:92:68:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bV-D7gKxc3SL5d47O5wlMXmSaOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/f9503e-da85-45fc-b032-b2e7feff402f/1/bV-D7gKxc3SL5d47O5wlMXmSaOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/f9503e-da85-45fc-b032-b2e7feff402f/1/bV-D7gKxc3SL5d47O5wlMXmSaOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:86:d6:a1:07:ba:1e:95:69:9c:7b:1f:dd:cc:e9:ea:84:f0:
bb:24:01:27:f7:12:6e:3b:21:17:bc:7e:f8:0c:3e:c4:0f:26:
8d:e9:bd:67:d2:06:33:5b:57:36:f2:6c:d4:05:54:6a:98:23:
6e:1a:7e:5c:9a:ef:7d:4a:c2:9c:8e:f8:3e:48:c1:2e:16:9a:
67:1c:ff:7b:e3:55:d9:da:eb:72:1b:28:21:e7:de:b4:d5:a6:
45:97:02:87:04:41:87:1b:53:5a:da:41:29:30:3d:1e:e5:0b:
59:58:6e:90:48:fa:c9:81:ea:bd:51:89:44:90:be:bc:c7:55:
8e:ce:68:76:55:23:2c:de:37:75:7c:27:42:7a:87:5f:95:22:
0b:24:59:9a:14:ca:2c:44:c7:14:60:89:d7:f8:09:97:02:ea:
37:4c:be:79:ce:98:06:dd:8f:99:4f:de:9a:4a:3e:0f:eb:a5:
14:cb:55:ff:97:c1:43:32:f2:9b:cb:2d:08:82:f4:4a:28:b2:
ea:c5:02:d6:70:2a:c6:bd:f9:b2:96:34:95:1b:b7:ac:47:1b:
51:dd:30:47:f0:15:f4:6d:30:a4:9f:5b:ae:92:2f:09:97:30:
e3:4d:72:27:74:17:bf:35:63:26:b6:61:f9:7d:e4:7d:f7:bf:
eb:67:85:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:37:40 2025 by rpki-client