Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/589eca-3f19-4e23-a3fb-3303f71622f9/1/bkBn13v-qZ3yXOXgipIT0RKAFM8.mft
File: bkBn13v-qZ3yXOXgipIT0RKAFM8.mft (raw, json)
Hash identifier: Dt9oNCdqkC8gwXo/O762VlSCLL5xixypYWKvduSTSaU=
Subject key identifier: 7A:20:6D:A3:E0:6A:3B:D1:0C:75:77:16:55:5B:8C:F5:1A:CB:11:12
Authority key identifier: 6E:40:67:D7:7B:FE:A9:9D:F2:5C:E5:E0:8A:92:13:D1:12:80:14:CF
Certificate issuer: /CN=6e4067d77bfea99df25ce5e08a9213d1128014cf
Certificate serial: 01976E8731C016C94EF3A4073FF1176FD6DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bkBn13v-qZ3yXOXgipIT0RKAFM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/589eca-3f19-4e23-a3fb-3303f71622f9/1/bkBn13v-qZ3yXOXgipIT0RKAFM8.mft
Manifest number: 1596
Signing time: Sat 14 Jun 2025 13:00:43 +0000
Manifest this update: Sat 14 Jun 2025 13:00:43 +0000
Manifest next update: Sun 15 Jun 2025 13:00:43 +0000
Files and hashes: 1: adNDLvUmYkNZRHIO-8EvQkOny3U.roa (hash: JFJ+lodVDeHLySNvitcsYBxq8cfuImJHPxEA0H+DjjY=)
2: bkBn13v-qZ3yXOXgipIT0RKAFM8.crl (hash: 5Id037e9Qsbu7EG+wodVtsjEfJpHxVquCrJ9mpQy9ng=)
3: iktdBTw9X8o6AOOEkLAyuZNK_gg.roa (hash: 2nzjnmBtk5vklJiWyvmO30xEFTmYF5gvtQ11fyrTZUE=)
4: mQ9zePbKKPrER63rktmN5-Z8AoQ.roa (hash: qfFxiv4hVcYLNON7vIi9UIknKo4icjwq21EoSvpzScg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/589eca-3f19-4e23-a3fb-3303f71622f9/1/bkBn13v-qZ3yXOXgipIT0RKAFM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/589eca-3f19-4e23-a3fb-3303f71622f9/1/bkBn13v-qZ3yXOXgipIT0RKAFM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bkBn13v-qZ3yXOXgipIT0RKAFM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 13:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:87:31:c0:16:c9:4e:f3:a4:07:3f:f1:17:6f:d6:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e4067d77bfea99df25ce5e08a9213d1128014cf
Validity
Not Before: Jun 14 13:00:43 2025 GMT
Not After : Jun 15 13:00:43 2025 GMT
Subject: CN=7a206da3e06a3bd10c757716555b8cf51acb1112
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:9d:ec:dc:de:57:9a:9e:0b:69:77:81:85:b0:
37:31:2a:72:90:3a:78:a9:9e:2f:33:c4:dc:36:cb:
f1:6c:2d:af:bd:4c:2d:2a:45:cf:b5:c5:43:af:d9:
43:2f:34:c9:3f:fb:4b:aa:f1:30:10:7d:6b:36:0c:
77:8d:10:3a:5b:ba:b5:89:4d:86:a2:a5:45:98:b1:
6c:4b:27:e3:e3:21:39:3f:ed:63:5f:02:80:8c:aa:
48:96:cc:15:65:7d:c6:50:ee:21:39:e9:a9:8e:9e:
52:db:1c:43:14:43:ba:47:68:17:15:d8:55:06:b8:
d0:b6:1f:91:91:93:9f:fb:79:0e:74:cd:62:02:6d:
56:85:f3:bf:48:b9:72:fb:77:a0:f3:80:1d:8a:dc:
e7:03:d2:7e:61:a7:c5:9d:fb:ff:1d:c8:19:24:4f:
a0:11:18:1a:a6:de:6b:0e:99:0a:19:72:2e:a3:83:
41:92:71:0b:0b:58:1b:57:41:54:11:3e:08:2d:95:
c9:31:50:fa:32:5a:89:ae:de:be:80:3f:b9:1d:2c:
49:85:7a:54:f8:c3:20:62:4d:86:ac:96:a9:a7:ce:
bd:5d:62:44:43:97:0c:e8:62:ba:de:bb:3a:fa:0a:
81:0a:e7:e7:75:d3:56:ca:39:c4:65:f5:f5:3e:54:
a3:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:20:6D:A3:E0:6A:3B:D1:0C:75:77:16:55:5B:8C:F5:1A:CB:11:12
X509v3 Authority Key Identifier:
keyid:6E:40:67:D7:7B:FE:A9:9D:F2:5C:E5:E0:8A:92:13:D1:12:80:14:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bkBn13v-qZ3yXOXgipIT0RKAFM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/589eca-3f19-4e23-a3fb-3303f71622f9/1/bkBn13v-qZ3yXOXgipIT0RKAFM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/589eca-3f19-4e23-a3fb-3303f71622f9/1/bkBn13v-qZ3yXOXgipIT0RKAFM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:1c:d4:d1:26:74:7b:d3:e3:49:5b:e3:9d:e8:1e:77:4b:54:
0c:55:b5:a3:d7:3e:84:05:c5:47:4c:9f:76:6f:68:ad:93:cd:
d1:9e:d9:7b:ee:59:21:67:d3:05:1c:a1:77:c4:bd:c9:96:c5:
58:b7:ea:85:42:e7:f3:d2:76:a0:06:8a:a0:96:13:0d:95:06:
d8:cd:d1:7e:f4:45:82:6b:e3:2a:c8:45:fd:c3:fd:5a:fb:4a:
41:24:74:b3:26:75:d7:15:76:65:e6:c9:07:f3:65:d8:6e:21:
92:f6:ea:6d:fb:2e:65:61:10:0f:b5:2e:99:5b:a9:c3:51:54:
ba:12:cc:a8:ca:e4:95:33:d3:df:38:e7:89:b5:c9:63:ca:b4:
f3:db:96:ab:c3:e9:c8:97:20:c5:98:62:e3:e8:fb:e6:3b:f3:
4e:4c:2f:a2:e2:96:f3:ac:4b:b5:ba:39:c5:85:44:a4:f3:66:
92:9f:d9:a1:b9:12:c6:f5:ce:37:42:8f:f7:47:74:83:fd:e7:
de:fd:c8:62:dc:18:1f:15:78:2b:25:7f:e8:32:2a:6f:59:c3:
67:fc:9e:18:a2:1c:2e:db:e8:ff:db:3b:f6:02:de:0e:8e:4b:
b6:0c:38:c6:cc:cf:16:67:ff:b6:27:e7:71:fc:bb:8d:02:6a:
5c:34:4c:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:49:13 2025 by rpki-client