Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/060e1e-328a-4818-bfd1-4fa3481a47e1/1/bq8W3MVQz4Hs8PgZUheaBIEwh3o.mft
File: bq8W3MVQz4Hs8PgZUheaBIEwh3o.mft (raw, json)
Hash identifier: SWwGa8BxlyB+uZbCQ0l8E52qYGVbjgCABFIY3pIh9Xs=
Subject key identifier: B5:34:5D:D1:C6:1D:3B:F0:92:9D:17:BE:0E:5B:8F:95:80:FA:1D:96
Authority key identifier: 6E:AF:16:DC:C5:50:CF:81:EC:F0:F8:19:52:17:9A:04:81:30:87:7A
Certificate issuer: /CN=6eaf16dcc550cf81ecf0f81952179a048130877a
Certificate serial: 01977376F8245E474BC527BF5E4F1391AD5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bq8W3MVQz4Hs8PgZUheaBIEwh3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/060e1e-328a-4818-bfd1-4fa3481a47e1/1/bq8W3MVQz4Hs8PgZUheaBIEwh3o.mft
Manifest number: 0957
Signing time: Sun 15 Jun 2025 12:01:05 +0000
Manifest this update: Sun 15 Jun 2025 12:01:05 +0000
Manifest next update: Mon 16 Jun 2025 12:01:05 +0000
Files and hashes: 1: bq8W3MVQz4Hs8PgZUheaBIEwh3o.crl (hash: jpXCu32Ub6QXE3Ey5J2igAwvQqy0Iw1YVGvgXKvc4B4=)
2: zFZRDLYL0fz0Tr9KOTbvt5Gi2T8.roa (hash: RoOpJgCK2e2T8+E3U8CF6Ztsr6QUn+lDcl3mIBxfJ0Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/060e1e-328a-4818-bfd1-4fa3481a47e1/1/bq8W3MVQz4Hs8PgZUheaBIEwh3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/060e1e-328a-4818-bfd1-4fa3481a47e1/1/bq8W3MVQz4Hs8PgZUheaBIEwh3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/bq8W3MVQz4Hs8PgZUheaBIEwh3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 12:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:73:76:f8:24:5e:47:4b:c5:27:bf:5e:4f:13:91:ad:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6eaf16dcc550cf81ecf0f81952179a048130877a
Validity
Not Before: Jun 15 12:01:05 2025 GMT
Not After : Jun 16 12:01:05 2025 GMT
Subject: CN=b5345dd1c61d3bf0929d17be0e5b8f9580fa1d96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e9:9e:9f:d5:4a:b4:cc:4c:6d:5b:7f:1e:88:
2d:86:d9:1d:d2:73:fd:4a:db:13:da:d6:90:39:88:
c7:51:0a:40:e8:93:b2:13:e1:56:89:4e:81:1c:58:
55:c9:7d:29:cf:0f:ec:6e:d7:90:a8:bc:5e:39:70:
08:aa:7e:f1:e4:0c:ca:b9:a1:2a:31:dc:02:28:33:
23:de:63:af:ba:af:aa:9d:76:0a:e9:4b:77:6e:d0:
1a:f4:e4:21:b5:c1:7e:f0:33:46:6c:66:2f:3d:e8:
f8:43:e2:6b:0a:e2:fe:01:2a:25:5d:08:d7:7f:f0:
d0:f4:a8:c5:01:8a:14:fc:e7:40:dc:ce:13:bc:ed:
a6:cf:50:eb:e0:b6:a6:bc:02:47:2f:d6:c3:5d:6f:
1c:e0:67:52:0f:09:80:70:e8:7e:31:3c:2c:30:7b:
51:db:f5:20:be:be:b6:29:24:5b:c5:fd:1c:d4:91:
87:29:0f:98:b5:52:44:df:a3:2e:77:7d:47:97:45:
9f:69:1f:c9:59:4e:fb:73:24:1e:5b:4a:10:9a:ba:
e2:6a:c9:27:0b:f7:36:c0:34:d4:de:8a:a1:14:95:
94:d1:08:ff:fd:8f:2d:99:89:f5:f9:ee:35:a3:15:
c8:61:65:aa:ed:de:75:66:d3:f5:1c:6d:18:96:bf:
e0:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:34:5D:D1:C6:1D:3B:F0:92:9D:17:BE:0E:5B:8F:95:80:FA:1D:96
X509v3 Authority Key Identifier:
keyid:6E:AF:16:DC:C5:50:CF:81:EC:F0:F8:19:52:17:9A:04:81:30:87:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bq8W3MVQz4Hs8PgZUheaBIEwh3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/060e1e-328a-4818-bfd1-4fa3481a47e1/1/bq8W3MVQz4Hs8PgZUheaBIEwh3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/060e1e-328a-4818-bfd1-4fa3481a47e1/1/bq8W3MVQz4Hs8PgZUheaBIEwh3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:79:46:75:ea:9a:1d:68:73:b3:1a:73:9d:6d:37:e9:c2:a1:
ec:c8:0c:1c:63:6b:16:68:4b:3c:49:71:c7:39:6b:d9:dd:b0:
bd:00:cf:bc:74:f8:33:a8:aa:31:88:10:04:67:1f:a3:5d:9d:
20:d5:8d:7d:c8:77:e2:a7:3a:32:b1:79:61:9b:73:f3:17:03:
83:a5:55:e6:2e:83:1a:95:ea:cc:a3:3f:f6:d9:d8:8e:b2:f6:
98:6b:99:4c:d0:ec:dd:b4:44:b5:86:2e:73:e4:50:0f:e9:8c:
a3:cd:17:c1:0d:a4:90:44:ac:5c:47:64:40:5c:04:f6:17:37:
31:72:9c:04:e3:24:2b:92:bf:c0:4f:4b:9f:df:07:f6:7b:1f:
a3:e3:9e:a5:01:b6:7a:86:35:b5:12:0d:f8:d5:93:65:7b:29:
bc:f8:d9:f0:26:5c:d0:f5:c5:13:6f:2e:9f:d6:98:d0:de:fb:
bd:88:7d:f1:e5:04:76:8e:48:be:2e:9f:05:b6:af:30:2a:42:
6b:c1:05:57:85:dd:a8:7c:49:6a:f6:32:7a:41:00:e8:3d:76:
76:b9:cf:1f:bc:bf:8b:d0:b8:0c:e2:77:eb:11:3d:dd:78:38:
75:64:de:e4:49:8d:b7:d9:cc:7d:a9:95:6c:cb:cd:5f:ff:e4:
78:41:ad:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 21:58:47 2025 by rpki-client