
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/0e5a71-2c0b-4f04-9466-31411d91576a/1/1bgBgLQNWFtzZlh9-13nvzB3hD4.mft
File: 1bgBgLQNWFtzZlh9-13nvzB3hD4.mft (raw, json)
Hash identifier: Ty/2DWmaoAGAVu22FwyBOR01npC27Ks1jArmBSumJAQ=
Subject key identifier: 6A:D7:F8:4C:52:EE:C1:58:F5:88:4D:FF:CD:A1:FC:AD:29:D6:42:9F
Authority key identifier: D5:B8:01:80:B4:0D:58:5B:73:66:58:7D:FB:5D:E7:BF:30:77:84:3E
Certificate issuer: /CN=d5b80180b40d585b7366587dfb5de7bf3077843e
Certificate serial: 01992255C0D56928D44E275C9F3B7DD0CB06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1bgBgLQNWFtzZlh9-13nvzB3hD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/0e5a71-2c0b-4f04-9466-31411d91576a/1/1bgBgLQNWFtzZlh9-13nvzB3hD4.mft
Manifest number: 0C4C
Signing time: Sun 07 Sep 2025 04:01:09 +0000
Manifest this update: Sun 07 Sep 2025 04:01:09 +0000
Manifest next update: Mon 08 Sep 2025 04:01:09 +0000
Files and hashes: 1: 1bgBgLQNWFtzZlh9-13nvzB3hD4.crl (hash: DmBvejJUmxvx/3TZNmb/9KxuzFeeXQfs4PjvPq+BCI4=)
2: pIHIruBkWSXEhwElM3sSrgjzMr0.roa (hash: fGR515hTUFGy9ET2ASre0fRJ4owzzw/uRYZkelb0/PE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/0e5a71-2c0b-4f04-9466-31411d91576a/1/1bgBgLQNWFtzZlh9-13nvzB3hD4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/0e5a71-2c0b-4f04-9466-31411d91576a/1/1bgBgLQNWFtzZlh9-13nvzB3hD4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1bgBgLQNWFtzZlh9-13nvzB3hD4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 04:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:55:c0:d5:69:28:d4:4e:27:5c:9f:3b:7d:d0:cb:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5b80180b40d585b7366587dfb5de7bf3077843e
Validity
Not Before: Sep 7 04:01:09 2025 GMT
Not After : Sep 8 04:01:09 2025 GMT
Subject: CN=6ad7f84c52eec158f5884dffcda1fcad29d6429f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:59:90:c1:de:2a:ac:12:88:20:2f:87:86:d8:
14:66:d8:d1:3c:b3:43:f1:13:43:76:1b:c9:d8:69:
b7:c6:13:25:1d:4a:6e:2f:57:fe:2d:ac:28:5e:f2:
da:46:54:da:0c:dd:bb:d2:27:57:30:77:82:51:6c:
2c:8a:b2:2f:5c:56:63:01:35:9d:00:cc:38:bf:63:
7c:bd:7d:95:a8:72:c6:d9:c5:64:63:dd:fa:29:08:
94:43:7d:08:94:af:68:62:08:6f:83:99:d0:9d:03:
36:17:07:e8:aa:66:5f:87:7f:9e:6e:74:d2:2e:4d:
72:ea:1f:60:00:f1:34:5d:59:28:3e:34:ec:32:a5:
bf:12:8e:b7:d3:db:b2:61:1e:b5:e6:0b:ec:84:a0:
ba:bf:8f:e2:a5:8a:07:df:dc:b3:4a:d1:8b:46:59:
b3:a6:45:fb:95:e4:e4:4c:55:07:37:46:9c:c7:97:
71:0d:5a:92:0c:48:c3:6b:b7:a0:16:01:85:dd:d2:
26:b2:75:87:1a:6b:2b:3a:05:c9:ce:9f:ce:39:fd:
25:77:76:d4:9a:a3:2c:24:b1:84:c9:a6:58:59:df:
09:76:5a:4a:6a:11:9c:86:2a:da:69:b9:63:72:49:
fc:cd:38:9f:90:02:81:3f:95:99:e3:05:7d:12:30:
de:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:D7:F8:4C:52:EE:C1:58:F5:88:4D:FF:CD:A1:FC:AD:29:D6:42:9F
X509v3 Authority Key Identifier:
keyid:D5:B8:01:80:B4:0D:58:5B:73:66:58:7D:FB:5D:E7:BF:30:77:84:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1bgBgLQNWFtzZlh9-13nvzB3hD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0e5a71-2c0b-4f04-9466-31411d91576a/1/1bgBgLQNWFtzZlh9-13nvzB3hD4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0e5a71-2c0b-4f04-9466-31411d91576a/1/1bgBgLQNWFtzZlh9-13nvzB3hD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:a8:38:4e:02:dd:91:3a:43:71:5e:81:0c:8f:ea:4d:4c:61:
4d:42:bf:9e:94:44:6a:e2:c8:bd:92:1f:12:bc:29:6c:56:7e:
d0:af:bb:ca:82:e3:e7:6c:cb:44:30:11:6b:f3:11:4f:a9:ef:
31:ed:3e:22:5e:34:65:c3:05:d4:1d:1e:48:7e:b2:10:04:34:
2b:71:95:b0:43:6d:4c:3e:b0:ac:5f:4c:f2:3d:44:de:94:ef:
2f:e4:90:a4:e9:c7:99:68:f8:06:bd:85:67:68:39:b1:db:8d:
7d:51:22:39:6c:28:57:51:50:bb:dc:89:1f:39:01:2a:fe:82:
dd:fc:0f:46:da:28:b2:cc:40:4d:5c:ce:e2:4e:09:bc:cf:24:
64:d7:d3:f1:5e:2f:01:a8:c8:03:62:aa:7b:ce:1e:98:f8:79:
1e:7b:20:74:34:9d:f4:d0:47:f5:31:23:1d:28:8d:29:52:55:
fc:2c:5a:d7:23:9c:29:a0:50:59:db:b4:28:1d:84:6e:9e:01:
20:88:9a:bc:41:32:dc:cc:e9:41:7b:28:bc:0a:54:1c:13:ef:
6d:2c:6c:4f:d3:81:f2:ed:bb:3d:47:e4:9f:dd:99:5e:a9:a9:
70:2c:b4:a2:8b:37:32:85:aa:62:1b:f0:38:b4:6c:a6:f2:80:
d2:0c:36:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:12:04 2025 by rpki-client