Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/bDgMi05V5ZCBr3OqGTXhCgEgV_o.mft
File: bDgMi05V5ZCBr3OqGTXhCgEgV_o.mft (raw, json)
Hash identifier: HSNccL/VkxPDqZT9mab19AgkZkAMqzqlkm5j29rieWk=
Subject key identifier: 2A:46:65:24:60:02:F0:4D:03:A3:6D:2A:69:53:FE:F7:EF:7E:72:3D
Authority key identifier: 6C:38:0C:8B:4E:55:E5:90:81:AF:73:AA:19:35:E1:0A:01:20:57:FA
Certificate issuer: /CN=6c380c8b4e55e59081af73aa1935e10a012057fa
Certificate serial: 01976D3DFEC5443D20FAC23703488B2451F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bDgMi05V5ZCBr3OqGTXhCgEgV_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/bDgMi05V5ZCBr3OqGTXhCgEgV_o.mft
Manifest number: 158F
Signing time: Sat 14 Jun 2025 07:01:08 +0000
Manifest this update: Sat 14 Jun 2025 07:01:08 +0000
Manifest next update: Sun 15 Jun 2025 07:01:08 +0000
Files and hashes: 1: G8ZxZv3rAsdyjkZIWbmu2tXV_Og.roa (hash: lGe21WZY7KMyNN8ysWzw0Q97lgbjrid4+uoj3fQOhEo=)
2: bDgMi05V5ZCBr3OqGTXhCgEgV_o.crl (hash: Ge3wwXghCCEIVuJ6IFj2p0vDC1X0t+Pvzf6uFC9YWN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/bDgMi05V5ZCBr3OqGTXhCgEgV_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/bDgMi05V5ZCBr3OqGTXhCgEgV_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/bDgMi05V5ZCBr3OqGTXhCgEgV_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3d:fe:c5:44:3d:20:fa:c2:37:03:48:8b:24:51:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c380c8b4e55e59081af73aa1935e10a012057fa
Validity
Not Before: Jun 14 07:01:08 2025 GMT
Not After : Jun 15 07:01:08 2025 GMT
Subject: CN=2a4665246002f04d03a36d2a6953fef7ef7e723d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d6:72:48:6d:db:f7:ef:8e:bb:c9:94:80:21:
bb:6f:df:42:0c:db:cc:9d:d1:a0:fc:36:7e:3e:73:
3b:9f:d1:44:59:cf:fd:b1:9a:4d:6c:2b:f1:67:fb:
e4:eb:8f:59:e2:b0:2f:91:9b:42:05:10:4a:ae:0b:
1e:e4:eb:b2:82:eb:45:09:66:01:84:52:41:5e:0d:
30:2b:34:c6:90:e9:01:00:51:18:20:e3:42:64:de:
36:ad:79:a7:aa:7b:3f:ac:d2:a0:f0:9f:6b:18:5c:
e9:ad:f1:6f:9b:c8:43:91:37:cc:f8:12:c7:e8:e6:
95:64:45:70:d6:6e:e5:34:55:ab:17:79:87:2e:3f:
82:cc:22:15:13:56:0a:9c:4b:83:9d:6e:46:c2:5f:
49:2b:c5:11:3e:56:4c:d9:60:c4:cd:36:a2:8d:26:
06:b7:c0:90:ce:72:7c:13:1b:76:fc:d1:62:16:fc:
9e:9a:21:71:0e:63:65:22:cb:8e:11:bc:23:26:a1:
78:56:07:19:1e:2d:be:8a:4a:63:ea:f8:18:95:58:
58:73:be:38:67:9b:32:c5:50:cd:16:8f:52:ab:8f:
ea:ec:ab:82:93:18:69:ca:97:dd:2c:22:95:ba:24:
28:39:60:62:11:60:25:87:4a:64:19:3d:61:29:c3:
4e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:46:65:24:60:02:F0:4D:03:A3:6D:2A:69:53:FE:F7:EF:7E:72:3D
X509v3 Authority Key Identifier:
keyid:6C:38:0C:8B:4E:55:E5:90:81:AF:73:AA:19:35:E1:0A:01:20:57:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bDgMi05V5ZCBr3OqGTXhCgEgV_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/bDgMi05V5ZCBr3OqGTXhCgEgV_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/bDgMi05V5ZCBr3OqGTXhCgEgV_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:0f:0d:77:90:cf:db:ac:76:c4:ed:75:d9:5a:46:c8:53:8c:
c2:81:a2:e8:b8:5b:b3:05:b6:22:c4:f9:2f:bc:eb:6c:2b:2b:
41:aa:48:fd:91:d6:e1:b3:9d:d3:ed:9c:31:c2:9f:e4:d9:32:
97:05:d0:9e:ab:db:ef:56:c6:2d:49:f0:9a:3b:6e:2e:8d:4f:
6e:cb:92:f4:bc:18:84:92:82:6f:76:ff:2d:c9:2c:37:56:a0:
00:6b:e8:fc:06:79:e0:ba:9d:bd:ce:e6:be:3a:b9:89:ec:de:
78:39:a2:b2:b5:01:17:fd:8a:45:e7:12:4a:82:57:73:6f:79:
54:95:81:38:e6:0b:c0:33:22:9f:2d:d3:82:0d:63:df:62:fd:
5b:49:ee:1b:13:ca:50:80:13:15:b4:5f:73:cd:df:d8:34:5d:
3b:98:9f:96:a8:a8:6a:b1:73:66:05:31:33:45:d2:d5:30:6a:
99:e9:8a:79:ee:ab:53:02:b1:ee:db:ce:25:af:c6:80:24:cc:
b6:ec:bb:17:95:7a:09:53:61:c9:dc:bb:db:f7:32:02:81:4a:
6e:c8:d9:28:52:8a:40:74:02:45:2b:67:c3:99:58:bc:14:a0:
db:c6:87:b6:87:31:9f:93:ee:a7:30:03:26:85:0e:4d:10:e4:
38:f6:30:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:53:13 2025 by rpki-client