Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/33b69d-f4ca-43aa-9780-1d55d5929cec/1/x6trIlTkVzCq-kWrUZcyA2FLtsw.mft
File: x6trIlTkVzCq-kWrUZcyA2FLtsw.mft (raw, json)
Hash identifier: SeeiMa2UFMxVQn8hCRCcWZCuBA8Zhv+lryYruqTYQ8E=
Subject key identifier: BB:C3:3F:31:38:14:99:E3:34:99:E2:59:29:52:79:F1:34:E3:D5:03
Authority key identifier: C7:AB:6B:22:54:E4:57:30:AA:FA:45:AB:51:97:32:03:61:4B:B6:CC
Certificate issuer: /CN=c7ab6b2254e45730aafa45ab51973203614bb6cc
Certificate serial: 0199221E43B17E5B380F54D5AA9598974371
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x6trIlTkVzCq-kWrUZcyA2FLtsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/33b69d-f4ca-43aa-9780-1d55d5929cec/1/x6trIlTkVzCq-kWrUZcyA2FLtsw.mft
Manifest number: 13B4
Signing time: Sun 07 Sep 2025 03:00:32 +0000
Manifest this update: Sun 07 Sep 2025 03:00:32 +0000
Manifest next update: Mon 08 Sep 2025 03:00:32 +0000
Files and hashes: 1: 1-nvEOeF_8-seqo32QYrx6ZTVBbQ.roa (hash: wVf2ruzd40pFbTR8RI0Ob3qelEQ26yizyOMJb6WWHNQ=)
2: G0WvFuc_CxaN6eARB2yClzaX2KQ.roa (hash: OXBzj+MAAD5v1p61n5nSRmMEjnNH86aTtUDpVIx76+o=)
3: x6trIlTkVzCq-kWrUZcyA2FLtsw.crl (hash: odRUR/UCL664/81G9esgVfpxUokzYo4IT9fBhERwPCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/33b69d-f4ca-43aa-9780-1d55d5929cec/1/x6trIlTkVzCq-kWrUZcyA2FLtsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/33b69d-f4ca-43aa-9780-1d55d5929cec/1/x6trIlTkVzCq-kWrUZcyA2FLtsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/x6trIlTkVzCq-kWrUZcyA2FLtsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:43:b1:7e:5b:38:0f:54:d5:aa:95:98:97:43:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7ab6b2254e45730aafa45ab51973203614bb6cc
Validity
Not Before: Sep 7 03:00:32 2025 GMT
Not After : Sep 8 03:00:32 2025 GMT
Subject: CN=bbc33f31381499e33499e259295279f134e3d503
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:cd:bd:e9:da:a9:f5:3e:ba:eb:8f:48:a8:a0:
fb:3f:9f:d0:f0:7c:fd:0d:92:41:c5:00:68:21:90:
16:d0:91:34:0e:06:db:c1:35:86:c2:6e:86:68:b0:
f3:49:6b:5d:39:26:05:14:75:35:e7:5f:b1:77:24:
31:cd:68:90:b4:5f:e4:a6:93:ed:29:8a:9c:e5:1d:
a4:0a:9b:2d:e3:62:e9:60:ad:ea:35:cb:d0:a0:77:
1d:e9:0b:b8:d8:b3:6b:4c:19:0c:5a:4f:ae:65:4d:
9e:93:bf:24:f7:83:73:c8:e9:6b:f5:89:a4:10:8f:
b2:14:89:1d:44:31:83:fc:cf:44:5d:43:02:eb:37:
51:8b:24:d7:49:b8:38:81:af:f6:aa:bc:4c:a2:b2:
e5:78:39:31:be:8f:69:f1:45:bf:fb:21:a9:1f:2e:
b7:c1:9e:79:94:f6:28:a0:27:47:8b:67:a9:90:05:
5d:61:fb:32:c0:50:56:73:1a:37:c4:b1:e9:69:c8:
8c:ca:73:ea:3c:55:3d:a6:be:d2:32:40:21:bf:4e:
49:f7:e1:2f:4e:f9:29:4e:59:43:e9:2b:12:11:c9:
1b:8c:d3:3c:de:95:65:4e:21:3f:0d:57:55:e6:fb:
83:6e:6f:30:e9:68:8f:d9:5e:43:ca:20:44:a2:d2:
5d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:C3:3F:31:38:14:99:E3:34:99:E2:59:29:52:79:F1:34:E3:D5:03
X509v3 Authority Key Identifier:
keyid:C7:AB:6B:22:54:E4:57:30:AA:FA:45:AB:51:97:32:03:61:4B:B6:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x6trIlTkVzCq-kWrUZcyA2FLtsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/33b69d-f4ca-43aa-9780-1d55d5929cec/1/x6trIlTkVzCq-kWrUZcyA2FLtsw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/33b69d-f4ca-43aa-9780-1d55d5929cec/1/x6trIlTkVzCq-kWrUZcyA2FLtsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:ab:ab:47:b8:f6:37:04:c1:56:ab:4b:f1:c9:36:f1:03:1e:
6f:05:5c:88:80:7d:9e:f7:1d:68:ca:74:05:ba:11:1d:23:ae:
fa:59:a5:bf:66:c3:44:48:14:cc:de:4b:eb:14:4a:db:e7:bb:
b9:b7:33:2c:ba:32:46:20:ec:cb:ac:e4:27:48:dd:99:75:f1:
ff:96:c3:d5:7c:3e:69:5a:9f:fd:97:0c:74:f1:af:d3:b9:9d:
c0:bd:96:78:4a:72:6c:50:10:d1:87:9f:fa:6f:d6:ee:d2:4f:
08:fc:e2:91:e9:ff:7f:fc:b4:41:78:47:e2:ed:98:f0:3b:fe:
47:91:35:f5:6a:ad:65:e9:60:02:02:81:06:0a:8a:8f:94:6e:
50:30:35:8c:3b:6c:25:ad:54:5d:c5:4f:1d:fb:87:61:98:8c:
af:d6:9c:25:c8:28:dc:20:0b:94:29:ec:a2:9c:75:5e:57:40:
75:4d:6c:91:5b:56:ca:d4:8b:0c:1c:33:68:12:fc:32:65:17:
e3:15:3e:97:ab:8e:a1:c7:0f:11:6b:74:23:9a:b6:ae:aa:cc:
44:32:37:13:fa:44:91:37:1c:e3:40:a6:ba:15:fe:c4:e5:77:
ce:76:d0:e1:53:f5:f7:dc:d7:33:41:14:80:46:d0:f3:fe:ce:
8f:90:52:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:24:11 2025 by rpki-client