Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/f1c375-41da-4ea6-acd1-09bc92d4ed96/1/bd1C_9t-gncCPxAZtVT-sZ9cPyM.mft
File: bd1C_9t-gncCPxAZtVT-sZ9cPyM.mft (raw, json)
Hash identifier: sjCuaT89RzPGXqSINohbmZbnF9n10/RjJ8MrtStad6s=
Subject key identifier: 17:F5:DF:E9:1E:D7:FE:D0:8C:71:29:BF:16:50:48:16:B7:6E:A1:76
Authority key identifier: 6D:DD:42:FF:DB:7E:82:77:02:3F:10:19:B5:54:FE:B1:9F:5C:3F:23
Certificate issuer: /CN=6ddd42ffdb7e8277023f1019b554feb19f5c3f23
Certificate serial: 01976960E5D8CBA21C39FE03664F5767D8ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bd1C_9t-gncCPxAZtVT-sZ9cPyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/f1c375-41da-4ea6-acd1-09bc92d4ed96/1/bd1C_9t-gncCPxAZtVT-sZ9cPyM.mft
Manifest number: 0404
Signing time: Fri 13 Jun 2025 13:00:47 +0000
Manifest this update: Fri 13 Jun 2025 13:00:47 +0000
Manifest next update: Sat 14 Jun 2025 13:00:47 +0000
Files and hashes: 1: KNlHZhzvj3c5evx_WYZ3PPymDMg.roa (hash: VIooQbblCXzCvlc89EdzqvODc1G/is8eypm36M8wtX0=)
2: bd1C_9t-gncCPxAZtVT-sZ9cPyM.crl (hash: 9CPbOJOHIGhZKU7vM1ijAWZF0o8L/1wMt8JvNxZ6GR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/f1c375-41da-4ea6-acd1-09bc92d4ed96/1/bd1C_9t-gncCPxAZtVT-sZ9cPyM.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/f1c375-41da-4ea6-acd1-09bc92d4ed96/1/bd1C_9t-gncCPxAZtVT-sZ9cPyM.mft
rsync://rpki.ripe.net/repository/DEFAULT/bd1C_9t-gncCPxAZtVT-sZ9cPyM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:60:e5:d8:cb:a2:1c:39:fe:03:66:4f:57:67:d8:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddd42ffdb7e8277023f1019b554feb19f5c3f23
Validity
Not Before: Jun 13 13:00:47 2025 GMT
Not After : Jun 14 13:00:47 2025 GMT
Subject: CN=17f5dfe91ed7fed08c7129bf16504816b76ea176
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:00:ef:69:43:61:00:31:5c:ff:ca:78:6a:8b:
1a:3a:3f:d5:dc:96:0c:de:4c:99:31:9a:c1:73:e4:
88:02:eb:1b:c3:77:dd:bd:45:4b:b2:5e:9a:6a:8a:
c4:da:e3:a4:69:22:f0:19:f7:e7:a5:64:a8:cb:93:
ef:14:bb:48:20:06:c6:cc:bb:82:a5:13:1c:54:a1:
af:02:7a:bf:60:6d:2f:3f:a6:a6:13:af:36:5d:37:
46:a1:37:c4:30:73:dd:a2:a4:37:52:f6:48:57:c9:
38:c0:46:b0:23:b4:db:08:c4:6f:ce:3c:b7:23:4c:
53:2c:df:a0:e7:89:86:ee:d3:38:54:3c:27:5e:e7:
42:a8:3b:a1:e1:a9:e1:d8:79:36:41:ef:90:b5:8c:
92:e2:f1:b5:60:fc:02:77:d1:81:c1:a1:bb:a4:98:
9e:de:57:51:3c:df:e3:1d:01:28:d4:fa:16:cb:92:
30:d9:e0:94:a6:7a:55:43:5b:6f:d0:cc:4f:d7:9c:
f3:23:e8:81:1b:99:e0:a7:82:d2:b2:0d:17:c5:a7:
d7:90:a3:2b:d2:31:eb:a2:67:cf:7c:58:31:b9:25:
a3:93:ce:20:83:5a:7e:84:6e:ba:f7:ee:78:68:90:
06:3b:f9:d0:9c:8c:47:bd:ba:70:57:f9:b0:11:cd:
84:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:F5:DF:E9:1E:D7:FE:D0:8C:71:29:BF:16:50:48:16:B7:6E:A1:76
X509v3 Authority Key Identifier:
keyid:6D:DD:42:FF:DB:7E:82:77:02:3F:10:19:B5:54:FE:B1:9F:5C:3F:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd1C_9t-gncCPxAZtVT-sZ9cPyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f1c375-41da-4ea6-acd1-09bc92d4ed96/1/bd1C_9t-gncCPxAZtVT-sZ9cPyM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f1c375-41da-4ea6-acd1-09bc92d4ed96/1/bd1C_9t-gncCPxAZtVT-sZ9cPyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:c1:ca:19:85:a8:e3:9c:da:18:30:ee:79:38:22:2b:71:c2:
30:ac:4a:26:3f:33:33:7a:cd:50:bc:b6:ac:df:f9:fa:1a:33:
a2:45:03:90:98:98:e9:50:0c:a8:58:04:fc:63:ee:91:88:7b:
54:45:c4:8b:ec:5c:12:c7:98:80:33:0c:86:83:f9:d1:72:46:
95:9f:a3:26:1a:e8:ca:fc:36:b3:b6:65:63:6a:11:8c:3d:62:
04:c3:fa:97:38:56:27:4e:9b:10:9c:4f:18:de:6e:7e:f8:1a:
0e:75:b1:21:79:3e:bd:7e:ac:4f:67:08:55:0d:d3:4b:69:48:
8e:41:ea:9b:2d:d1:3b:c9:47:61:83:e7:c4:16:0b:99:fd:b5:
74:30:cd:0a:12:c2:3a:98:3a:ee:eb:95:9c:b7:99:9f:43:45:
b9:76:b3:fb:66:22:57:8b:63:83:64:5e:3b:46:6c:ba:ff:ab:
68:da:ec:99:12:b3:0f:df:e0:a5:64:f6:ec:6c:a0:96:2e:18:
b7:5a:2c:94:d8:0f:28:73:57:5d:49:9f:8c:3b:0b:5f:84:92:
61:e8:b8:ca:ae:13:e2:c9:7d:53:31:39:e8:f7:d6:3c:9c:0c:
f1:0f:7b:db:c7:2b:ed:fb:2f:e3:a0:ce:43:9d:47:eb:84:4f:
ce:09:e5:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:12:23 2025 by rpki-client