Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.mft
File: bS1XQJK6k5ov_3GqH46O2WFTCzA.mft (raw, json)
Hash identifier: y9PcJPCFYoSMSy0ktnQ/9pwF1P7l2Wo9hPqoOycvxz8=
Subject key identifier: 86:7E:29:7A:84:1B:A5:F0:44:C2:C8:57:C2:C9:85:34:3A:A5:8C:8F
Authority key identifier: 6D:2D:57:40:92:BA:93:9A:2F:FF:71:AA:1F:8E:8E:D9:61:53:0B:30
Certificate issuer: /CN=6d2d574092ba939a2fff71aa1f8e8ed961530b30
Certificate serial: 01976BBD726949407BAEC5BACB63D331D581
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bS1XQJK6k5ov_3GqH46O2WFTCzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.mft
Manifest number: 0A0E
Signing time: Sat 14 Jun 2025 00:01:06 +0000
Manifest this update: Sat 14 Jun 2025 00:01:06 +0000
Manifest next update: Sun 15 Jun 2025 00:01:06 +0000
Files and hashes: 1: LMR5H8XxQ22Qwh4Rqkz4ubSlo54.roa (hash: ZUDk4H2waEP/HdlHdhHpF+TAjFZSo3z48LNa4UDsM8c=)
2: bS1XQJK6k5ov_3GqH46O2WFTCzA.crl (hash: QB8HEJSb0NBq3eHComQJZ/MBRvwF4Y2S2F5m1+8NgDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bS1XQJK6k5ov_3GqH46O2WFTCzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 00:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:bd:72:69:49:40:7b:ae:c5:ba:cb:63:d3:31:d5:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d2d574092ba939a2fff71aa1f8e8ed961530b30
Validity
Not Before: Jun 14 00:01:06 2025 GMT
Not After : Jun 15 00:01:06 2025 GMT
Subject: CN=867e297a841ba5f044c2c857c2c985343aa58c8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:da:ac:a2:a0:a9:fa:8a:b9:be:b9:1f:9d:16:
38:d4:8b:b4:90:63:1b:fc:a6:b8:29:eb:99:ab:19:
86:77:59:1a:b1:7d:4d:4f:c5:ed:f2:96:80:f2:33:
27:bf:c6:e4:34:94:2a:1d:9c:98:f4:a8:ee:10:a6:
ce:bd:75:7d:c2:4f:3a:2a:b5:36:87:57:34:16:fe:
d9:d3:14:62:be:58:85:01:c9:56:54:cc:49:0a:db:
09:41:7e:70:33:3f:b5:55:8c:87:36:dd:34:7c:81:
48:79:8c:43:d3:59:9f:cb:d5:b5:4a:d4:02:db:d4:
f9:7c:8f:20:05:5f:03:cf:1c:54:82:cb:e8:85:cd:
53:01:a7:35:ae:4b:e0:c0:ea:ae:fd:82:4f:a1:4c:
05:5c:3d:84:75:31:c7:33:85:02:24:3c:2d:e7:e9:
61:66:3a:8b:81:f2:ce:91:97:91:f8:64:77:a4:05:
f2:0d:c3:69:d9:03:84:52:8b:52:76:d4:fb:ad:3f:
6e:4d:89:97:40:c5:43:76:ec:25:c7:81:a9:b4:ae:
3e:c7:0d:80:74:f3:68:16:c1:36:c4:70:46:06:f4:
6a:a5:c9:15:e3:42:38:df:0c:e9:63:c9:42:99:e9:
a7:d0:3a:be:65:18:e4:92:52:fd:f1:57:c0:f3:c2:
a6:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:7E:29:7A:84:1B:A5:F0:44:C2:C8:57:C2:C9:85:34:3A:A5:8C:8F
X509v3 Authority Key Identifier:
keyid:6D:2D:57:40:92:BA:93:9A:2F:FF:71:AA:1F:8E:8E:D9:61:53:0B:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bS1XQJK6k5ov_3GqH46O2WFTCzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:c5:d3:5d:f0:0d:ca:5a:6d:45:53:84:e1:b1:37:84:1a:7c:
ac:4a:ed:19:d5:28:66:a4:c5:80:08:ce:b4:6a:6f:6d:78:8a:
cd:ee:9b:03:c1:df:fb:99:51:0d:92:1a:82:a4:37:65:aa:57:
9b:e6:52:8b:38:17:6b:36:df:36:ac:c6:a4:66:dc:c2:3d:d5:
ef:d0:ce:b7:f1:79:43:15:c3:a9:00:27:f9:71:f8:a3:6b:94:
b4:33:8b:35:8d:1d:ab:cd:20:f2:71:32:cd:c9:d9:9c:6d:52:
18:57:1e:16:74:00:96:a8:4b:db:c6:b3:ae:90:bb:6e:5e:4e:
df:d0:99:19:ed:cf:15:27:35:a4:fe:b4:27:1c:44:23:ca:e4:
67:cd:ec:a2:8f:00:6e:84:f9:64:2b:3d:e3:ff:0a:41:42:44:
77:32:aa:70:5b:7f:b9:3b:e8:30:60:cc:d2:c5:33:cb:8c:61:
1b:85:5e:37:09:d6:95:e0:ad:ea:53:37:0a:ad:b6:08:33:a4:
21:07:18:0e:f3:27:21:06:62:f3:80:29:f2:ca:2d:70:a8:34:
3e:dd:52:8e:01:64:e8:fb:58:fc:05:44:d2:f0:8f:1c:2f:25:
8d:fd:a1:b9:c1:af:88:96:61:f6:fc:57:e9:b5:18:eb:cf:85:
b6:84:32:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:06:44 2025 by rpki-client