Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/d74cb2-f0fc-4f2c-be01-536e1f0c4ff9/1/bNxpTwwyVdXVVz8TKOU2VM-yLE0.mft
File: bNxpTwwyVdXVVz8TKOU2VM-yLE0.mft (raw, json)
Hash identifier: 6RS0ke3PTkuDhSvxe3wfBFQmGR341cPP4nxSthxd+Dc=
Subject key identifier: D9:5B:DF:2C:B8:D2:27:96:AE:F8:BA:82:FB:70:7C:EA:A6:19:4F:C7
Authority key identifier: 6C:DC:69:4F:0C:32:55:D5:D5:57:3F:13:28:E5:36:54:CF:B2:2C:4D
Certificate issuer: /CN=6cdc694f0c3255d5d5573f1328e53654cfb22c4d
Certificate serial: 01976E19AE7565CB9E42D26D230F1DA18D28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bNxpTwwyVdXVVz8TKOU2VM-yLE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/d74cb2-f0fc-4f2c-be01-536e1f0c4ff9/1/bNxpTwwyVdXVVz8TKOU2VM-yLE0.mft
Manifest number: 0D04
Signing time: Sat 14 Jun 2025 11:01:06 +0000
Manifest this update: Sat 14 Jun 2025 11:01:06 +0000
Manifest next update: Sun 15 Jun 2025 11:01:06 +0000
Files and hashes: 1: bNxpTwwyVdXVVz8TKOU2VM-yLE0.crl (hash: TVqLoOcbTePFWfevLRB293WBdAuJoWg6K/vvQKW2TL4=)
2: mf0dhA7BgjaM7eDjfmF7DxTSVfY.roa (hash: 1vX40l9RdR1damElfdrSUBtrrLE1iQPxYSNwcaRMl0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/d74cb2-f0fc-4f2c-be01-536e1f0c4ff9/1/bNxpTwwyVdXVVz8TKOU2VM-yLE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/d74cb2-f0fc-4f2c-be01-536e1f0c4ff9/1/bNxpTwwyVdXVVz8TKOU2VM-yLE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bNxpTwwyVdXVVz8TKOU2VM-yLE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:19:ae:75:65:cb:9e:42:d2:6d:23:0f:1d:a1:8d:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cdc694f0c3255d5d5573f1328e53654cfb22c4d
Validity
Not Before: Jun 14 11:01:06 2025 GMT
Not After : Jun 15 11:01:06 2025 GMT
Subject: CN=d95bdf2cb8d22796aef8ba82fb707ceaa6194fc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:06:bd:5d:01:ed:17:6c:7d:e6:cb:23:79:2a:
05:13:43:4c:e8:0c:11:b4:f2:0e:9b:35:2b:29:e2:
af:6f:9b:d3:0e:11:48:72:b0:4c:5c:0b:12:32:83:
6c:7a:30:08:69:31:4c:1a:5a:7a:45:e0:ab:5a:65:
2a:73:9a:10:5a:50:43:3d:b2:63:a1:f1:38:9d:4e:
4e:01:b1:6b:e9:50:49:a7:d1:01:cb:fd:31:00:8d:
2c:10:ea:c0:37:90:a8:a0:81:f7:d2:c3:d7:4c:c4:
c8:92:46:6c:38:06:4a:24:8c:ea:c1:b2:de:8d:0b:
94:89:27:80:84:72:47:e8:fe:c8:d5:d0:5e:92:ab:
ff:32:2d:be:e2:a5:02:5f:50:18:f7:6c:18:5d:5f:
f9:10:29:c9:90:fe:28:f4:8d:26:d1:6d:a9:07:8e:
8c:0f:af:80:99:e9:1b:cd:24:cb:1d:eb:df:25:c3:
9c:09:14:c5:1e:ea:5c:36:b5:74:62:d5:4f:6a:89:
c8:37:d1:c3:6f:f0:6e:6e:14:8e:8b:e9:e0:c8:fa:
96:af:12:52:9b:42:d4:8d:71:b6:d9:77:26:44:d7:
c0:ce:09:03:90:ce:e5:05:96:63:50:c7:48:4d:bf:
63:f5:f5:59:df:90:b4:b0:e4:f8:ac:47:1d:e7:47:
3c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:5B:DF:2C:B8:D2:27:96:AE:F8:BA:82:FB:70:7C:EA:A6:19:4F:C7
X509v3 Authority Key Identifier:
keyid:6C:DC:69:4F:0C:32:55:D5:D5:57:3F:13:28:E5:36:54:CF:B2:2C:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bNxpTwwyVdXVVz8TKOU2VM-yLE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d74cb2-f0fc-4f2c-be01-536e1f0c4ff9/1/bNxpTwwyVdXVVz8TKOU2VM-yLE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d74cb2-f0fc-4f2c-be01-536e1f0c4ff9/1/bNxpTwwyVdXVVz8TKOU2VM-yLE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:bf:cb:ca:c6:d7:14:04:53:69:17:3f:7a:e2:f4:ec:50:fc:
b3:c7:7d:50:8f:f4:48:de:7d:86:f6:57:c2:2c:c8:0d:0c:09:
5f:df:8e:cb:a2:e1:df:75:64:dd:f1:59:80:8c:0f:de:83:16:
de:f2:00:52:54:89:bf:1b:4b:41:87:b4:49:57:c5:9d:ca:16:
11:0b:8f:d2:dd:6a:db:a8:9c:87:28:00:20:97:f4:d9:ff:22:
e5:70:f5:80:d2:9e:24:d6:e9:55:2f:b1:61:db:41:29:38:02:
fb:e8:db:45:b5:f4:05:b0:cf:74:a0:cb:e4:9d:b2:a8:59:fc:
3f:f9:7a:b0:05:a7:60:cc:4e:91:58:4b:21:14:7e:e1:43:02:
b6:e8:78:68:4f:1e:2d:97:33:7b:7f:85:ba:a7:fb:ba:60:89:
0a:16:82:ae:35:0a:78:c1:69:e6:71:a5:52:b9:1a:31:cf:82:
e4:c4:15:49:58:b5:30:aa:b6:82:3e:9a:e3:15:84:8f:92:0f:
ec:09:51:6b:77:7c:b0:1c:0e:c9:3d:0e:da:09:cf:11:0a:69:
3f:e8:43:79:e9:05:b4:d4:97:b3:13:67:27:a8:5d:01:9b:1b:
71:20:66:4c:58:6a:15:78:4c:79:8a:5a:a8:43:b7:d8:ca:93:
73:57:c0:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:50:27 2025 by rpki-client