Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f7308a-4108-4acc-b600-3630543b521b/1/bTi1QIMcnNXfSAhRpygGZ-181kc.mft
File: bTi1QIMcnNXfSAhRpygGZ-181kc.mft (raw, json)
Hash identifier: X416u7k15jCSUIEwyjARjnQGmptoxu+lbHJ/L0HeLVI=
Subject key identifier: FA:0B:F1:D6:5E:60:43:21:F2:8F:F7:9C:9E:E6:85:D9:E9:97:83:83
Authority key identifier: 6D:38:B5:40:83:1C:9C:D5:DF:48:08:51:A7:28:06:67:ED:7C:D6:47
Certificate issuer: /CN=6d38b540831c9cd5df480851a7280667ed7cd647
Certificate serial: 019770076BFBE255FE4441B50AA6B42484A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bTi1QIMcnNXfSAhRpygGZ-181kc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f7308a-4108-4acc-b600-3630543b521b/1/bTi1QIMcnNXfSAhRpygGZ-181kc.mft
Manifest number: 09B0
Signing time: Sat 14 Jun 2025 20:00:23 +0000
Manifest this update: Sat 14 Jun 2025 20:00:23 +0000
Manifest next update: Sun 15 Jun 2025 20:00:23 +0000
Files and hashes: 1: bTi1QIMcnNXfSAhRpygGZ-181kc.crl (hash: 6RzpaRxQ3Uw4XyiM02HNnliSK7ireHju7G3dfwv2KYQ=)
2: okBQ3HYZQrL6ORKAHfJHyIzTOqU.roa (hash: 8hx35QaymOBGYmgY5QQuJWW8cF+INO74gqLHBnenUT8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/f7308a-4108-4acc-b600-3630543b521b/1/bTi1QIMcnNXfSAhRpygGZ-181kc.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/f7308a-4108-4acc-b600-3630543b521b/1/bTi1QIMcnNXfSAhRpygGZ-181kc.mft
rsync://rpki.ripe.net/repository/DEFAULT/bTi1QIMcnNXfSAhRpygGZ-181kc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:07:6b:fb:e2:55:fe:44:41:b5:0a:a6:b4:24:84:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d38b540831c9cd5df480851a7280667ed7cd647
Validity
Not Before: Jun 14 20:00:23 2025 GMT
Not After : Jun 15 20:00:23 2025 GMT
Subject: CN=fa0bf1d65e604321f28ff79c9ee685d9e9978383
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:49:1a:ab:e7:12:8e:27:4e:1f:68:78:ed:a4:
97:3f:bc:cf:e5:65:4b:e4:6c:c1:85:7e:2c:1b:e2:
32:fb:e0:91:74:8e:1f:46:71:ed:d9:88:41:03:fc:
d1:d3:46:1c:80:1c:ad:5d:3c:a3:40:d2:c3:66:38:
94:d8:8b:c3:5b:7e:8f:0b:78:09:df:ad:2c:54:5f:
a0:af:0f:11:e9:ce:24:31:4a:f6:81:40:8a:b7:12:
f4:a8:78:cd:53:b4:5e:ee:8b:9c:a1:2b:61:49:14:
e1:53:e5:4c:29:5b:82:36:33:7b:09:e6:4a:3d:f6:
73:b4:69:d8:77:35:01:63:9a:f3:2b:8b:37:93:b4:
bc:0e:2e:2d:11:f5:0c:f1:f6:4e:93:66:8a:48:87:
4e:0a:eb:41:83:45:fb:10:34:51:90:73:8a:3d:35:
d7:5c:99:41:bd:b3:30:cf:a3:03:4d:d4:77:d4:f5:
0d:00:cd:d9:6c:45:67:27:25:a9:fb:6e:d1:51:3c:
90:0d:45:c1:4e:ce:40:ef:26:0f:a4:7f:ea:36:6a:
15:c3:3b:44:e9:73:8e:f4:b7:e7:85:96:cd:ec:30:
7b:cb:b6:28:33:3e:b0:cd:99:b9:78:95:3e:4a:6e:
0a:85:4e:39:2a:d8:e9:ce:d0:4b:b5:4a:49:e4:9f:
fa:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:0B:F1:D6:5E:60:43:21:F2:8F:F7:9C:9E:E6:85:D9:E9:97:83:83
X509v3 Authority Key Identifier:
keyid:6D:38:B5:40:83:1C:9C:D5:DF:48:08:51:A7:28:06:67:ED:7C:D6:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bTi1QIMcnNXfSAhRpygGZ-181kc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f7308a-4108-4acc-b600-3630543b521b/1/bTi1QIMcnNXfSAhRpygGZ-181kc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f7308a-4108-4acc-b600-3630543b521b/1/bTi1QIMcnNXfSAhRpygGZ-181kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:99:e8:36:9f:9b:27:d2:61:01:12:d8:d3:da:af:63:76:b3:
a9:8e:57:a6:7e:80:75:53:b4:ee:79:00:6a:73:0f:27:13:d5:
c3:d8:00:97:cf:27:4c:3f:0e:4b:cd:15:d1:65:76:68:5f:2e:
3d:84:d3:5d:47:f1:05:ea:49:c2:49:a6:3f:1f:f9:0a:08:ed:
32:f9:4c:82:5d:cc:eb:c0:76:04:48:8a:ca:bb:81:1e:ca:17:
35:47:e4:db:00:a9:48:81:3e:7f:dd:a7:23:18:4c:3c:b3:82:
c6:4b:b6:ad:65:48:8c:0f:ac:d9:e1:30:0d:f5:e9:3d:5b:79:
56:d7:1a:d1:ca:8f:a2:3a:f9:20:d9:f5:81:40:b9:23:d9:2c:
c5:92:e4:63:18:69:66:70:bb:c6:30:cd:da:50:7f:03:ea:ef:
ee:72:af:7f:8c:c1:7d:d6:c4:77:11:a5:75:4a:47:54:0a:41:
b1:65:bb:1f:68:ac:78:08:08:25:19:bf:b8:e1:fe:18:1a:1e:
c5:24:ac:f2:75:53:3e:3b:c0:ad:d8:42:35:eb:6e:30:aa:20:
37:3b:38:34:6f:7e:4f:7b:62:41:bb:91:09:a6:ec:70:a1:f6:
7c:e8:8e:c3:9f:61:a8:00:8c:1f:eb:7f:fa:74:cc:9e:a7:76:
9a:34:50:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:09:47 2025 by rpki-client