Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/31bd07-9a1f-4345-a66b-7942404016f3/1/bQyAMYF3vBa3I4P44JLVKjrhM7Q.mft
File: bQyAMYF3vBa3I4P44JLVKjrhM7Q.mft (raw, json)
Hash identifier: 9Tn3f1wGWFeRWnD1soJl0ZyABkeFqh29QkFNwYgdIZE=
Subject key identifier: 3A:C0:91:04:5E:75:FC:69:6C:EB:D1:89:C9:8F:B4:6A:54:7B:3A:50
Authority key identifier: 6D:0C:80:31:81:77:BC:16:B7:23:83:F8:E0:92:D5:2A:3A:E1:33:B4
Certificate issuer: /CN=6d0c80318177bc16b72383f8e092d52a3ae133b4
Certificate serial: 019921B0DF3964DAB53FC6BB4568FB81EEB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQyAMYF3vBa3I4P44JLVKjrhM7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/31bd07-9a1f-4345-a66b-7942404016f3/1/bQyAMYF3vBa3I4P44JLVKjrhM7Q.mft
Manifest number: 14D0
Signing time: Sun 07 Sep 2025 01:01:03 +0000
Manifest this update: Sun 07 Sep 2025 01:01:03 +0000
Manifest next update: Mon 08 Sep 2025 01:01:03 +0000
Files and hashes: 1: 1-w5DNPlIhExlDG3JJ8YehKY8B2s.roa (hash: 2oDdXXuxPyseKyeUOGZKSwRrTeZuxQlLGL5+bIlribY=)
2: bQyAMYF3vBa3I4P44JLVKjrhM7Q.crl (hash: HWRjQrqZcDQO6J93Cwuenll25kTPgicvkRYTZ4bineA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/31bd07-9a1f-4345-a66b-7942404016f3/1/bQyAMYF3vBa3I4P44JLVKjrhM7Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/31bd07-9a1f-4345-a66b-7942404016f3/1/bQyAMYF3vBa3I4P44JLVKjrhM7Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/bQyAMYF3vBa3I4P44JLVKjrhM7Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b0:df:39:64:da:b5:3f:c6:bb:45:68:fb:81:ee:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d0c80318177bc16b72383f8e092d52a3ae133b4
Validity
Not Before: Sep 7 01:01:03 2025 GMT
Not After : Sep 8 01:01:03 2025 GMT
Subject: CN=3ac091045e75fc696cebd189c98fb46a547b3a50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2b:82:f5:5f:db:a1:34:2e:4f:a3:b4:82:b2:
9f:61:5b:ba:21:e5:95:35:89:43:06:28:76:00:18:
0f:cf:14:77:00:b5:12:d9:57:2a:4b:1a:97:66:fc:
c4:48:71:61:95:fd:d1:3e:1b:7c:e4:77:5c:2b:c7:
46:43:26:f7:63:32:45:1a:c4:b7:09:c9:85:5d:65:
45:da:b4:64:e4:8b:33:5d:b4:c1:8b:c2:8b:63:cb:
46:29:b0:16:f7:42:53:b6:85:ae:83:2f:72:03:1c:
a8:1a:9e:9f:57:04:a2:f7:5e:02:66:1a:67:29:00:
8b:f0:45:01:27:2f:49:6b:31:74:d1:15:9e:0b:7b:
98:53:67:48:23:a1:c8:8a:a2:91:91:21:26:7c:e5:
ca:19:c8:f3:47:38:3e:1b:5e:4b:7e:31:52:d0:c6:
58:99:f8:44:13:c0:b2:a9:59:07:ac:51:da:50:a7:
fb:b1:95:2a:06:39:f9:59:8d:3b:8b:b8:69:94:d8:
14:df:4a:29:56:b8:44:2c:23:53:cb:bc:20:f8:c7:
ea:bc:67:3b:f3:09:99:e0:eb:e0:31:89:a5:16:3f:
d0:8b:0a:f3:a6:8b:a0:05:9b:d3:e3:6d:02:e6:08:
bc:79:bf:fb:0d:bc:fc:b5:ec:d9:d6:af:d5:1f:fb:
ea:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:C0:91:04:5E:75:FC:69:6C:EB:D1:89:C9:8F:B4:6A:54:7B:3A:50
X509v3 Authority Key Identifier:
keyid:6D:0C:80:31:81:77:BC:16:B7:23:83:F8:E0:92:D5:2A:3A:E1:33:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQyAMYF3vBa3I4P44JLVKjrhM7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/31bd07-9a1f-4345-a66b-7942404016f3/1/bQyAMYF3vBa3I4P44JLVKjrhM7Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/31bd07-9a1f-4345-a66b-7942404016f3/1/bQyAMYF3vBa3I4P44JLVKjrhM7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:bc:3d:85:71:74:03:c1:6b:4e:dd:7d:9d:7e:f5:b3:ab:16:
be:b8:52:a4:80:f3:24:a1:c6:09:cc:01:d0:99:f4:ca:44:af:
d3:b9:2a:26:28:57:cd:3a:13:72:4e:09:29:79:63:4b:2a:b9:
c4:db:90:cf:4c:55:f7:d0:3d:cd:49:02:e2:e4:87:8d:53:f2:
2f:51:6f:f6:f3:c9:eb:12:28:49:0e:34:2f:52:1a:bd:f4:71:
cb:5b:ff:b8:af:fb:6b:9c:20:6d:ac:0d:7c:69:e9:22:36:f6:
54:e2:e3:3c:6b:93:91:af:bf:fc:22:6a:e8:a1:b0:b3:03:aa:
41:33:d6:ee:12:36:d2:d6:df:11:d9:23:78:b9:59:2c:55:a6:
45:10:ba:c5:a0:18:7a:96:96:4a:8b:5f:f0:73:d1:8e:03:70:
66:6d:3a:e1:ba:32:02:cf:66:4c:7f:05:bb:28:5c:d9:59:70:
78:cf:00:5d:03:01:d2:04:a3:b7:1c:19:2f:12:8a:da:4c:e0:
1c:90:4a:ca:ab:23:da:ee:9a:d6:a0:03:25:8a:5a:3c:4d:79:
16:f8:43:44:02:ea:40:41:93:9a:75:e9:b2:7d:78:2f:2c:af:
97:83:5d:4d:3f:08:b5:c6:6b:cc:c1:00:49:78:9d:65:26:07:
76:88:96:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 09:50:48 2025 by rpki-client