Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/3f3e57-0e00-4f2f-976b-414f09b92c15/1/v7sDAWyDzqiqT6nDajZDpWXMk-Y.mft
File: v7sDAWyDzqiqT6nDajZDpWXMk-Y.mft (raw, json)
Hash identifier: atiVk4XOjHAL6211F6DsCQIImPDfUKhb7nekUOGR3xI=
Subject key identifier: 83:A3:7F:C0:6A:75:D6:C9:BF:18:56:85:30:F6:CC:0A:B2:36:80:82
Authority key identifier: BF:BB:03:01:6C:83:CE:A8:AA:4F:A9:C3:6A:36:43:A5:65:CC:93:E6
Certificate issuer: /CN=bfbb03016c83cea8aa4fa9c36a3643a565cc93e6
Certificate serial: 0199345BB5A9DB2C6B6640C16DA493CD0390
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v7sDAWyDzqiqT6nDajZDpWXMk-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/3f3e57-0e00-4f2f-976b-414f09b92c15/1/v7sDAWyDzqiqT6nDajZDpWXMk-Y.mft
Manifest number: 0ACC
Signing time: Wed 10 Sep 2025 16:00:49 +0000
Manifest this update: Wed 10 Sep 2025 16:00:49 +0000
Manifest next update: Thu 11 Sep 2025 16:00:49 +0000
Files and hashes: 1: bzs57lv3Qbjc1TLCtfvKYgEau6U.roa (hash: HAYnok72dCcoCWV0+wPH7iuTT6c76+rSS6MIun+rwec=)
2: v7sDAWyDzqiqT6nDajZDpWXMk-Y.crl (hash: f9UW4bd7ioKQeLUkJ4zdV8VsWXGybDLcXt4gHNJ5OB4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/3f3e57-0e00-4f2f-976b-414f09b92c15/1/v7sDAWyDzqiqT6nDajZDpWXMk-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/3f3e57-0e00-4f2f-976b-414f09b92c15/1/v7sDAWyDzqiqT6nDajZDpWXMk-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/v7sDAWyDzqiqT6nDajZDpWXMk-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 11 Sep 2025 16:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:34:5b:b5:a9:db:2c:6b:66:40:c1:6d:a4:93:cd:03:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfbb03016c83cea8aa4fa9c36a3643a565cc93e6
Validity
Not Before: Sep 10 16:00:49 2025 GMT
Not After : Sep 11 16:00:49 2025 GMT
Subject: CN=83a37fc06a75d6c9bf18568530f6cc0ab2368082
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5d:08:ae:65:e1:5e:3f:d8:42:02:8b:7a:88:
57:50:c9:51:45:23:0f:c2:f9:15:0f:a3:2e:c1:fe:
97:c5:c8:69:49:ca:a8:79:ac:80:b7:d1:34:b3:b8:
47:b5:cd:f4:0c:37:b8:0e:e9:47:83:91:ac:a7:28:
ae:b4:1f:9b:e6:92:30:3f:03:3b:24:02:aa:24:4f:
ff:57:cf:f0:68:55:16:30:da:2f:a8:49:b7:c2:76:
8a:10:2c:43:cf:fc:7e:2a:08:a7:4e:05:96:9c:52:
2a:bf:30:23:4c:c3:7c:aa:92:9c:66:4d:2d:40:07:
1f:00:2f:f5:c5:7c:fa:4a:2b:3d:60:ac:8d:77:f2:
66:00:20:37:22:ee:1f:4d:08:bc:da:ad:41:dd:73:
a1:18:a4:e2:fe:fb:10:d4:fd:38:51:6a:6a:6a:0c:
7b:1f:9a:bd:b3:61:7e:c0:da:b2:93:fa:4d:fd:3f:
bd:bc:74:a7:17:12:52:ef:ec:20:37:89:64:dc:13:
45:1c:5c:3f:9c:f4:72:0a:4e:ff:76:8c:09:e8:17:
6d:a0:e5:f9:7a:ed:e5:c2:99:c1:d7:60:07:2b:46:
0d:3c:73:47:cc:b6:12:13:ce:3f:81:55:4c:4e:60:
93:19:5c:7f:b3:fc:9e:20:ac:c1:d8:42:ac:5d:1f:
67:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:A3:7F:C0:6A:75:D6:C9:BF:18:56:85:30:F6:CC:0A:B2:36:80:82
X509v3 Authority Key Identifier:
keyid:BF:BB:03:01:6C:83:CE:A8:AA:4F:A9:C3:6A:36:43:A5:65:CC:93:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7sDAWyDzqiqT6nDajZDpWXMk-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/3f3e57-0e00-4f2f-976b-414f09b92c15/1/v7sDAWyDzqiqT6nDajZDpWXMk-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/3f3e57-0e00-4f2f-976b-414f09b92c15/1/v7sDAWyDzqiqT6nDajZDpWXMk-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:2f:f8:24:2e:77:26:ba:01:a1:1c:06:a9:ad:42:7a:6d:fe:
6e:bb:c9:00:80:89:ae:ad:61:bf:59:c3:e1:63:93:ed:e0:9e:
e2:e8:a3:aa:d4:df:6b:f1:d3:31:5b:b4:ab:fc:d3:6a:c8:8b:
18:9f:35:c7:a3:7e:ca:f0:9a:08:47:19:a2:cb:4a:dd:90:00:
d8:bd:95:f9:1c:d5:58:6f:50:39:58:f2:41:1b:e3:9d:06:30:
2e:7f:92:d8:a6:5f:d9:85:58:a4:fa:25:dc:a7:06:ac:79:99:
33:c4:b7:cf:66:ff:90:3c:6d:da:d2:74:0b:d8:cf:96:0a:d1:
10:27:bd:cc:f5:a3:44:8d:85:cb:c7:43:e3:8c:23:b0:c2:33:
c3:23:10:9f:cb:09:5c:99:10:79:e0:3f:58:ff:ad:2d:07:10:
50:82:79:e1:86:81:6f:84:68:67:71:3e:4a:11:1f:b6:63:35:
67:e7:36:28:87:fd:be:74:72:89:55:95:ad:fd:0f:b0:50:d8:
b1:7f:71:51:be:74:61:0d:d1:c2:83:f7:db:c8:d0:de:f6:88:
ef:5b:15:78:f4:cc:4f:bb:3c:b9:7d:c4:f2:b1:63:de:56:55:
c5:cf:94:71:32:52:42:92:6e:7e:03:70:94:34:2e:c2:f0:b0:
8e:1a:c8:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 10 22:00:03 2025 by rpki-client