Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/311508-d5a2-4dc5-bc93-50e746424630/1/bvSHSZTeehTktYT20rlrLZkbHpE.mft
File: bvSHSZTeehTktYT20rlrLZkbHpE.mft (raw, json)
Hash identifier: 2OO2YjTantWfFZjNdWkgNMfmeGRREYwgXYQFJAMk6yI=
Subject key identifier: 99:47:FC:93:96:00:D1:B6:6F:76:3F:8F:83:D6:97:74:58:01:FA:D7
Authority key identifier: 6E:F4:87:49:94:DE:7A:14:E4:B5:84:F6:D2:B9:6B:2D:99:1B:1E:91
Certificate issuer: /CN=6ef4874994de7a14e4b584f6d2b96b2d991b1e91
Certificate serial: 019923A0DA7D69976FC28B0A04E0A18F6328
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bvSHSZTeehTktYT20rlrLZkbHpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/311508-d5a2-4dc5-bc93-50e746424630/1/bvSHSZTeehTktYT20rlrLZkbHpE.mft
Manifest number: 07F3
Signing time: Sun 07 Sep 2025 10:02:48 +0000
Manifest this update: Sun 07 Sep 2025 10:02:48 +0000
Manifest next update: Mon 08 Sep 2025 10:02:48 +0000
Files and hashes: 1: bvSHSZTeehTktYT20rlrLZkbHpE.crl (hash: mibp+jVAN1dXZafJAAG1uZobvkDubbMwS2YjABZWYA0=)
2: nAw-tu2iFsVUAoD3d-PCO-n0nlU.roa (hash: NhBATsK7uGGdrOKi4JXrK4LsPo0OG9umtxigUZlp7BQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/311508-d5a2-4dc5-bc93-50e746424630/1/bvSHSZTeehTktYT20rlrLZkbHpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/311508-d5a2-4dc5-bc93-50e746424630/1/bvSHSZTeehTktYT20rlrLZkbHpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/bvSHSZTeehTktYT20rlrLZkbHpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:a0:da:7d:69:97:6f:c2:8b:0a:04:e0:a1:8f:63:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ef4874994de7a14e4b584f6d2b96b2d991b1e91
Validity
Not Before: Sep 7 10:02:48 2025 GMT
Not After : Sep 8 10:02:48 2025 GMT
Subject: CN=9947fc939600d1b66f763f8f83d697745801fad7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:15:b5:1e:45:75:93:47:4c:df:69:ff:4c:2c:
82:7d:ca:a4:c5:62:ae:94:8f:0b:d1:5e:3d:32:a7:
f9:c2:4e:e6:22:99:06:05:f5:7f:7d:29:fc:f1:c5:
d7:e8:44:8d:92:9b:60:f4:d2:a5:19:89:75:7d:93:
91:fb:43:99:3a:e6:49:74:10:12:87:b1:7f:a0:a6:
d2:bf:11:86:92:d2:84:9a:63:1f:2c:8b:da:8d:4a:
7c:ce:32:07:eb:a3:f9:08:69:a7:d2:cb:c5:f5:82:
10:2b:b9:9c:ff:4b:f9:56:08:32:4a:8c:f0:3b:5d:
2e:3c:41:39:01:ef:30:1a:3b:2d:b1:1a:68:14:5d:
c7:49:26:dd:d2:db:5e:42:fb:a6:fa:e4:59:cb:60:
48:e6:5e:40:be:e2:41:a0:3f:ee:c1:03:b8:3f:f4:
0b:a9:fa:d5:93:fd:e6:6e:e6:74:a2:ee:10:77:a5:
8d:b2:9f:21:2b:15:c3:00:cd:fb:f4:a6:6c:d3:8a:
71:7b:24:5d:42:8d:e3:da:3e:52:af:44:9d:c2:94:
c5:26:45:70:6a:3a:f8:d8:b7:0c:f4:4c:7d:0b:8f:
7b:34:37:88:f5:ef:85:97:6d:58:f5:08:05:42:f7:
61:2c:5e:92:80:e2:9b:db:ce:e2:92:51:0b:cf:b6:
50:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:47:FC:93:96:00:D1:B6:6F:76:3F:8F:83:D6:97:74:58:01:FA:D7
X509v3 Authority Key Identifier:
keyid:6E:F4:87:49:94:DE:7A:14:E4:B5:84:F6:D2:B9:6B:2D:99:1B:1E:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bvSHSZTeehTktYT20rlrLZkbHpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/311508-d5a2-4dc5-bc93-50e746424630/1/bvSHSZTeehTktYT20rlrLZkbHpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/311508-d5a2-4dc5-bc93-50e746424630/1/bvSHSZTeehTktYT20rlrLZkbHpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:5e:75:1a:ea:60:93:ee:ef:6b:91:c0:c3:83:a7:da:5f:b2:
05:6b:f1:77:e6:3e:ba:3c:91:7c:40:15:2a:0b:4c:6f:3f:2d:
ab:28:fe:ee:65:81:88:85:23:b3:10:67:af:d3:3f:19:fb:d3:
b5:bb:6b:34:c8:83:32:a2:be:81:67:36:08:27:17:80:6f:00:
91:1e:8d:12:95:39:9d:84:9e:ea:fd:ed:aa:d4:dd:1b:65:c3:
83:9b:94:a9:41:b6:62:d5:21:4b:8d:42:ea:ee:95:f2:86:4f:
a4:36:07:83:94:4c:89:83:00:3c:b2:47:6f:1c:18:ae:67:14:
f0:69:b4:be:ba:c7:59:29:4b:ae:c3:69:ef:f6:7e:c2:32:65:
54:3f:4f:8e:98:13:e4:d1:e0:5d:7c:7c:b0:08:9a:de:74:2e:
c0:7f:8b:1b:69:6b:2e:91:2a:77:c8:5d:91:5b:8d:68:39:59:
9f:a0:83:ce:9c:ac:d5:19:4c:94:57:90:2a:2e:4e:7d:fb:66:
b7:37:71:19:9b:52:fc:72:bb:6e:29:b4:dd:d6:79:16:be:10:
56:33:08:84:46:86:b3:fd:38:1c:e9:7c:45:b6:10:86:3f:4f:
d1:b3:b5:5c:65:0d:60:fb:4e:fa:77:20:6b:14:e8:dc:b8:f7:
b1:32:0d:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 14:51:09 2025 by rpki-client