Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/c3f995-86ef-4a67-acac-e4391fbcaf14/1/bOP7hnhh2q_XgSeYl_4lqOs3FGg.mft
File: bOP7hnhh2q_XgSeYl_4lqOs3FGg.mft (raw, json)
Hash identifier: gsDCmm202vgQ2/wH+zYjZ3OvHmYzJRvv2NWDIrUISJ4=
Subject key identifier: A4:7B:79:2E:F9:B6:F1:8F:3C:8D:34:21:21:5D:80:BC:49:2A:7C:B8
Authority key identifier: 6C:E3:FB:86:78:61:DA:AF:D7:81:27:98:97:FE:25:A8:EB:37:14:68
Certificate issuer: /CN=6ce3fb867861daafd781279897fe25a8eb371468
Certificate serial: 01977C42B7984E95027FC9B3D27173595883
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bOP7hnhh2q_XgSeYl_4lqOs3FGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/c3f995-86ef-4a67-acac-e4391fbcaf14/1/bOP7hnhh2q_XgSeYl_4lqOs3FGg.mft
Manifest number: 01EA
Signing time: Tue 17 Jun 2025 05:00:36 +0000
Manifest this update: Tue 17 Jun 2025 05:00:36 +0000
Manifest next update: Wed 18 Jun 2025 05:00:36 +0000
Files and hashes: 1: EH31K6AeAlTxuZgsWC0CP6nqgCw.roa (hash: 5F10SKVR7MZweS+vgHdYbBmQMLKWeQTvpJE6zRYHQ8A=)
2: bOP7hnhh2q_XgSeYl_4lqOs3FGg.crl (hash: 3ZmlRx3S6LHZXzY5+rU7e90RN3utU1ulm5YfSu0zIIo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/c3f995-86ef-4a67-acac-e4391fbcaf14/1/bOP7hnhh2q_XgSeYl_4lqOs3FGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/c3f995-86ef-4a67-acac-e4391fbcaf14/1/bOP7hnhh2q_XgSeYl_4lqOs3FGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/bOP7hnhh2q_XgSeYl_4lqOs3FGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7c:42:b7:98:4e:95:02:7f:c9:b3:d2:71:73:59:58:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ce3fb867861daafd781279897fe25a8eb371468
Validity
Not Before: Jun 17 05:00:36 2025 GMT
Not After : Jun 18 05:00:36 2025 GMT
Subject: CN=a47b792ef9b6f18f3c8d3421215d80bc492a7cb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ee:f2:95:4f:59:f4:a8:1a:31:0c:77:b6:70:
c9:f1:25:e2:91:11:30:51:3c:0f:eb:2b:5e:59:77:
b6:72:24:b7:80:57:fc:82:2f:95:62:57:29:8b:2d:
a0:b2:05:bf:ef:ab:69:b4:7b:f1:4d:c9:9a:de:46:
a6:6f:b4:84:a6:8b:c1:42:15:b4:51:35:9b:4b:79:
5a:67:ef:2a:9b:fa:23:26:e4:e8:e9:31:89:a5:b0:
3e:d6:1a:c2:f6:58:a0:8a:1f:12:71:72:6e:6c:63:
e5:c3:07:82:45:95:3b:9f:a9:db:64:05:f5:c2:25:
21:60:12:dd:0d:9a:6d:76:5f:46:2c:8b:f2:8f:1e:
24:5e:81:e6:59:63:14:ec:dc:79:fb:4b:89:e2:8e:
e2:e3:b5:7f:b0:08:12:a1:7e:1f:f2:f6:b6:d7:bb:
21:f5:40:ee:aa:f1:3e:98:d2:ff:6c:80:5d:91:c6:
51:0d:fa:51:f7:36:79:77:8f:92:29:98:81:25:9b:
95:10:4e:38:2a:8b:ec:5b:49:30:8d:90:84:23:74:
b3:b9:89:0a:73:ca:d2:86:b6:c3:76:4b:1c:66:31:
62:62:c9:4a:5c:5e:1f:20:9f:2e:38:63:0e:dc:e6:
1b:50:87:b4:3f:43:2a:0d:10:17:20:d9:32:55:27:
2c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:7B:79:2E:F9:B6:F1:8F:3C:8D:34:21:21:5D:80:BC:49:2A:7C:B8
X509v3 Authority Key Identifier:
keyid:6C:E3:FB:86:78:61:DA:AF:D7:81:27:98:97:FE:25:A8:EB:37:14:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bOP7hnhh2q_XgSeYl_4lqOs3FGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/c3f995-86ef-4a67-acac-e4391fbcaf14/1/bOP7hnhh2q_XgSeYl_4lqOs3FGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/c3f995-86ef-4a67-acac-e4391fbcaf14/1/bOP7hnhh2q_XgSeYl_4lqOs3FGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:8c:26:0c:af:27:b0:e0:7b:16:6b:4c:69:53:51:82:65:0a:
48:f6:0c:ab:f9:da:90:67:1a:c9:4f:00:50:67:ca:95:dc:a9:
5f:0a:d1:4e:b1:18:1e:95:76:d4:18:c9:15:5d:f4:ec:31:d6:
a9:04:f1:30:9a:d6:5c:fc:12:2d:b1:82:8a:8e:f0:28:9b:44:
6a:3b:27:cd:87:62:62:2e:c8:06:a6:d6:22:e2:51:69:e7:84:
3c:9e:cc:13:bb:d8:c9:da:e0:a0:18:77:e2:99:9f:f7:db:69:
be:80:3e:3a:be:06:89:ef:74:e7:45:78:74:93:08:20:0c:45:
74:79:8f:c7:f4:fb:f4:e9:a8:8e:7e:38:b7:2d:53:ad:ad:c4:
d6:6a:04:09:31:a5:27:08:b5:e1:f1:c5:79:26:6a:45:52:00:
02:c7:8f:6a:66:37:89:09:0b:00:f4:d1:d7:89:de:d6:89:42:
ea:b1:7f:27:1c:4a:43:8b:9b:dd:ff:83:2b:cb:a9:70:45:68:
1e:77:5b:f7:b1:09:a9:39:b8:4d:cc:02:9e:92:20:a4:c3:53:
90:9e:87:3a:71:51:9c:29:2b:8c:a1:b4:8e:f1:49:78:30:74:
dd:0e:42:88:25:49:39:36:fe:f4:9d:6f:c3:b0:2c:a6:32:50:
64:b5:1f:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 13:05:39 2025 by rpki-client