Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/46c7e6-4006-40f0-adaa-b4192ac638c9/1/CkKubpYYDwO3ym2XQnUW5MB_bis.mft
File: CkKubpYYDwO3ym2XQnUW5MB_bis.mft (raw, json)
Hash identifier: 5bQcWMtPys6vAVfPSgQmw6kcAvoPQCqOX3l5D/dzmSA=
Subject key identifier: 37:3F:62:72:7C:1E:B8:8A:B0:66:A5:C5:FA:30:D1:6C:2C:F7:37:E9
Authority key identifier: 0A:42:AE:6E:96:18:0F:03:B7:CA:6D:97:42:75:16:E4:C0:7F:6E:2B
Certificate issuer: /CN=0a42ae6e96180f03b7ca6d97427516e4c07f6e2b
Certificate serial: 01976A057A9B2B30CB80AC6BD23C7C91FA41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkKubpYYDwO3ym2XQnUW5MB_bis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/46c7e6-4006-40f0-adaa-b4192ac638c9/1/CkKubpYYDwO3ym2XQnUW5MB_bis.mft
Manifest number: 142C
Signing time: Fri 13 Jun 2025 16:00:33 +0000
Manifest this update: Fri 13 Jun 2025 16:00:33 +0000
Manifest next update: Sat 14 Jun 2025 16:00:33 +0000
Files and hashes: 1: CkKubpYYDwO3ym2XQnUW5MB_bis.crl (hash: /Z5fImfeh1pIL89WTIiHhUvYmXT8IUQPFEOdanvOvss=)
2: OH2h9N_hyzRLLEO1xxz2pS01OI8.roa (hash: KX0d4zyKelEiSPA5pJcqywoIBRSpP8vuqYcvjW39t40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/46c7e6-4006-40f0-adaa-b4192ac638c9/1/CkKubpYYDwO3ym2XQnUW5MB_bis.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/46c7e6-4006-40f0-adaa-b4192ac638c9/1/CkKubpYYDwO3ym2XQnUW5MB_bis.mft
rsync://rpki.ripe.net/repository/DEFAULT/CkKubpYYDwO3ym2XQnUW5MB_bis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:05:7a:9b:2b:30:cb:80:ac:6b:d2:3c:7c:91:fa:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a42ae6e96180f03b7ca6d97427516e4c07f6e2b
Validity
Not Before: Jun 13 16:00:33 2025 GMT
Not After : Jun 14 16:00:33 2025 GMT
Subject: CN=373f62727c1eb88ab066a5c5fa30d16c2cf737e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:cd:eb:12:9d:82:22:53:d9:70:70:c3:f7:5d:
00:81:4a:08:8c:46:ca:41:4d:6d:a8:4d:e4:34:75:
bb:eb:9c:b8:eb:20:85:d3:c7:f1:08:7c:d0:0d:3e:
75:5d:29:c8:a1:a9:37:79:0b:2e:85:74:7e:6b:c8:
49:72:08:95:87:2c:4a:94:6d:c3:5f:e1:ab:0a:a1:
53:24:95:78:58:9e:74:55:32:4e:71:a1:24:c8:87:
ad:26:47:9c:27:a1:00:5f:a3:66:04:09:52:5d:26:
b6:fb:9b:84:ee:f3:0c:7c:21:03:10:12:92:7e:6d:
1d:c1:26:a4:ae:16:c9:cb:9e:41:b4:ec:07:af:9c:
ce:3b:9c:ea:23:ef:d4:b5:82:91:5b:42:4f:c6:e2:
64:86:ce:23:2e:2b:8b:ab:2e:38:ba:a6:11:21:54:
ae:83:9f:67:5f:c3:fd:3e:13:d0:66:99:3b:08:9e:
88:e3:82:06:b0:a0:3d:c6:9e:83:71:01:c5:72:ab:
a3:ca:34:c3:90:d0:d4:6f:9c:35:74:13:f4:b5:b4:
b1:de:f7:aa:2e:4d:23:f5:3c:c5:cd:a3:2b:b1:22:
44:c5:f5:89:e5:62:3c:dd:bc:d9:a2:ed:66:65:ce:
8d:88:1b:70:9e:5a:0c:aa:d3:5d:e5:f3:a1:85:b4:
3e:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:3F:62:72:7C:1E:B8:8A:B0:66:A5:C5:FA:30:D1:6C:2C:F7:37:E9
X509v3 Authority Key Identifier:
keyid:0A:42:AE:6E:96:18:0F:03:B7:CA:6D:97:42:75:16:E4:C0:7F:6E:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkKubpYYDwO3ym2XQnUW5MB_bis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/46c7e6-4006-40f0-adaa-b4192ac638c9/1/CkKubpYYDwO3ym2XQnUW5MB_bis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/46c7e6-4006-40f0-adaa-b4192ac638c9/1/CkKubpYYDwO3ym2XQnUW5MB_bis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:7a:27:cc:d5:5a:5f:e7:49:f8:a0:2f:c8:3c:f6:67:76:c4:
d9:30:0f:39:b8:23:2d:bb:59:c0:32:c1:de:25:03:51:9c:93:
e8:b9:ba:c9:2e:17:21:bd:51:d7:e8:05:62:9d:bd:25:20:75:
23:95:f2:e9:6c:a9:08:a4:85:6b:5e:79:e7:b2:fa:c7:6e:4e:
fe:2c:43:27:64:5f:b1:aa:1f:fc:b3:aa:ee:9f:12:9a:20:c2:
6b:75:8e:51:96:38:fe:0f:53:4e:cb:e2:9e:b0:cc:05:26:c2:
fd:0c:11:22:91:40:2f:8f:37:b5:d6:30:15:ce:f1:98:32:3a:
63:e0:9e:a9:4a:25:67:b4:c9:ef:9d:8c:11:4f:31:69:8a:6a:
f2:71:f6:c9:c0:5c:ed:c1:e6:7d:43:0b:3d:69:ec:7a:ef:ea:
8d:77:28:13:67:d5:f2:01:bc:e0:b4:de:87:16:25:64:75:3b:
7e:4f:c3:16:ea:88:b8:fa:57:c8:ab:6c:ed:26:7f:99:36:27:
9a:01:6c:5a:0a:a0:8d:85:5c:d1:85:77:63:dc:68:81:27:35:
dd:06:06:78:ac:70:7c:a8:b6:72:8d:8b:3b:11:3e:b9:60:e3:
1a:31:8f:4b:34:66:ac:c4:04:ef:97:6c:66:2a:13:94:95:ed:
bf:0d:65:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:05:02 2025 by rpki-client