Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/f8651b-c12b-42d4-afda-232f4703491f/1/bJSdK9ZO4X711H-WPj1depgrEq8.mft
File: bJSdK9ZO4X711H-WPj1depgrEq8.mft (raw, json)
Hash identifier: joUy62ayUCh8B5AQE4OB1ItBSGtgGS1Xq3a3dYM0hvw=
Subject key identifier: 04:6E:8F:66:81:6C:18:24:8C:76:EC:A3:06:9E:8C:97:0F:75:C2:77
Authority key identifier: 6C:94:9D:2B:D6:4E:E1:7E:F5:D4:7F:96:3E:3D:5D:7A:98:2B:12:AF
Certificate issuer: /CN=6c949d2bd64ee17ef5d47f963e3d5d7a982b12af
Certificate serial: 01976F99F42B68FB00B0D8E8043F7F5D10F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bJSdK9ZO4X711H-WPj1depgrEq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/f8651b-c12b-42d4-afda-232f4703491f/1/bJSdK9ZO4X711H-WPj1depgrEq8.mft
Manifest number: 09FC
Signing time: Sat 14 Jun 2025 18:00:49 +0000
Manifest this update: Sat 14 Jun 2025 18:00:49 +0000
Manifest next update: Sun 15 Jun 2025 18:00:49 +0000
Files and hashes: 1: OyVcB1brzSxuoeEjBo4fT0W9OFc.roa (hash: sut6tQHQTuBMJAc0/1shERZEk1RWFKSSDeDy5cd5Klo=)
2: bJSdK9ZO4X711H-WPj1depgrEq8.crl (hash: 1Otz77GKqZkLUAgXaoIF617Cdm5pRDG6Ap5s0UlGoTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/f8651b-c12b-42d4-afda-232f4703491f/1/bJSdK9ZO4X711H-WPj1depgrEq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/f8651b-c12b-42d4-afda-232f4703491f/1/bJSdK9ZO4X711H-WPj1depgrEq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bJSdK9ZO4X711H-WPj1depgrEq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 18:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:99:f4:2b:68:fb:00:b0:d8:e8:04:3f:7f:5d:10:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c949d2bd64ee17ef5d47f963e3d5d7a982b12af
Validity
Not Before: Jun 14 18:00:49 2025 GMT
Not After : Jun 15 18:00:49 2025 GMT
Subject: CN=046e8f66816c18248c76eca3069e8c970f75c277
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:bb:37:0d:c0:02:ec:82:b8:18:9e:ae:fa:a6:
bb:d2:b4:b8:c7:32:e2:31:66:e0:5c:76:28:e0:7b:
3e:a9:75:81:5e:d1:9a:99:7e:ef:3a:06:44:a5:e6:
07:97:a8:4a:90:81:20:fb:ba:75:60:34:84:a1:83:
af:cd:77:93:0f:d6:f6:01:83:df:c7:0a:8f:78:b7:
55:d5:ac:95:c3:d3:e1:77:b8:27:04:ec:76:97:83:
f8:b7:44:ee:50:d8:50:3f:b5:b1:45:98:42:06:5f:
c5:3b:d1:3f:99:64:75:47:c5:6a:ad:e9:f7:95:9a:
cd:a7:e0:82:c3:da:a6:4f:1b:9d:ea:e7:3c:f6:38:
23:7a:d6:b5:6a:cb:e3:93:dc:ea:fa:06:fb:70:68:
80:dc:d7:9d:ca:96:51:07:d8:cd:bf:1b:a4:a6:94:
f3:b6:d7:61:ba:5a:3c:12:46:9f:83:c7:e4:c4:12:
aa:68:7e:e4:c9:b7:0e:43:b6:74:72:f9:21:c5:3e:
fa:da:05:ea:06:76:17:ad:72:c6:48:b3:09:1b:ca:
d4:7a:01:17:80:51:ef:e5:00:1f:19:61:d2:76:83:
69:b4:93:be:34:e3:37:10:ba:94:2a:a2:1b:e4:e2:
2e:56:2a:39:d3:74:cb:b1:71:67:e3:d9:5b:69:8d:
85:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:6E:8F:66:81:6C:18:24:8C:76:EC:A3:06:9E:8C:97:0F:75:C2:77
X509v3 Authority Key Identifier:
keyid:6C:94:9D:2B:D6:4E:E1:7E:F5:D4:7F:96:3E:3D:5D:7A:98:2B:12:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bJSdK9ZO4X711H-WPj1depgrEq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f8651b-c12b-42d4-afda-232f4703491f/1/bJSdK9ZO4X711H-WPj1depgrEq8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/f8651b-c12b-42d4-afda-232f4703491f/1/bJSdK9ZO4X711H-WPj1depgrEq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:9a:b1:37:7d:de:38:e1:17:59:37:b7:a4:39:39:96:97:1d:
94:a9:f0:ab:63:d3:5c:ff:18:a2:4c:d9:75:a4:79:8a:21:28:
80:04:0d:b5:f5:d4:73:c3:e8:7a:09:20:e1:d5:26:7d:92:ed:
20:bf:29:27:20:c1:10:9d:6f:b1:db:c4:cc:e3:5f:f7:98:7a:
10:23:03:6a:10:52:3e:49:37:55:3c:9b:31:a8:41:e1:d6:13:
bf:8d:81:69:d8:81:4c:9a:3a:b2:82:69:a4:e6:eb:fb:1e:8b:
36:de:f3:11:51:78:96:1b:a9:6e:81:9f:57:29:18:4e:a9:59:
67:e0:fb:5f:4d:e9:9d:53:c7:83:7c:15:8e:94:15:5b:d9:d6:
e2:dd:c9:d6:bc:e2:f2:bd:f5:fe:b2:d7:7e:4d:36:b7:1f:91:
ab:89:67:ff:50:32:2f:d2:6e:01:16:ae:77:9a:74:35:4d:4c:
25:37:e2:af:ec:40:97:a5:70:b9:5f:98:c1:28:f0:53:98:0e:
4c:66:66:74:74:b6:8a:16:b3:b7:9c:af:42:60:b2:f5:74:79:
4f:72:2f:79:19:fc:b9:fb:73:83:5f:fb:4c:4f:24:3e:3c:f3:
28:a4:b3:2f:12:43:ac:72:31:68:ac:9e:c0:69:c2:46:7d:d8:
d6:f5:e0:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 00:00:54 2025 by rpki-client