Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/b55ef1-ca63-4ca1-a659-f9720285e797/1/bwdNLvtfPh01wpH4oRwLwL5-wbg.mft
File: bwdNLvtfPh01wpH4oRwLwL5-wbg.mft (raw, json)
Hash identifier: nVJLSHPOX3eWj0r13K9OVBlBF6aelZ54pknyvh+AGjA=
Subject key identifier: 66:ED:34:D8:FF:ED:F4:86:55:28:D5:38:9B:E2:66:5D:B0:3A:D3:0B
Authority key identifier: 6F:07:4D:2E:FB:5F:3E:1D:35:C2:91:F8:A1:1C:0B:C0:BE:7E:C1:B8
Certificate issuer: /CN=6f074d2efb5f3e1d35c291f8a11c0bc0be7ec1b8
Certificate serial: 0197684E9CF7193ACE0B2D30D60EA166826F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bwdNLvtfPh01wpH4oRwLwL5-wbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/b55ef1-ca63-4ca1-a659-f9720285e797/1/bwdNLvtfPh01wpH4oRwLwL5-wbg.mft
Manifest number: 0AAE
Signing time: Fri 13 Jun 2025 08:01:11 +0000
Manifest this update: Fri 13 Jun 2025 08:01:11 +0000
Manifest next update: Sat 14 Jun 2025 08:01:11 +0000
Files and hashes: 1: Xm-ngS_MnUdhXjLf6p90jOWUmEw.roa (hash: 9Gf1m1xe/g6A5DBxtP2ns4dstk3fjoEba5kQQxWmoRM=)
2: bwdNLvtfPh01wpH4oRwLwL5-wbg.crl (hash: SlFJrk1LfteoYU5n+2WcKmFKnELZRZpeMPu5dCJaQfs=)
3: q7HJcy0sw4LMamMsrbQZ9rl4cVI.roa (hash: F/OMkAbTzMuRC01PoKqTK5BDI1LCPjMGC3GeJkdGUbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/b55ef1-ca63-4ca1-a659-f9720285e797/1/bwdNLvtfPh01wpH4oRwLwL5-wbg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/b55ef1-ca63-4ca1-a659-f9720285e797/1/bwdNLvtfPh01wpH4oRwLwL5-wbg.mft
rsync://rpki.ripe.net/repository/DEFAULT/bwdNLvtfPh01wpH4oRwLwL5-wbg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 08:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:4e:9c:f7:19:3a:ce:0b:2d:30:d6:0e:a1:66:82:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f074d2efb5f3e1d35c291f8a11c0bc0be7ec1b8
Validity
Not Before: Jun 13 08:01:11 2025 GMT
Not After : Jun 14 08:01:11 2025 GMT
Subject: CN=66ed34d8ffedf4865528d5389be2665db03ad30b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a3:1c:da:30:08:ce:6b:3c:75:f8:25:88:31:
25:32:47:f2:c9:55:54:1f:0c:b4:84:d5:dd:4d:d4:
02:56:1a:6a:95:e5:57:8c:71:91:44:f4:e2:0d:49:
1a:c6:f0:f0:b8:d2:b8:08:d6:6c:8e:4a:15:09:7d:
78:e4:b7:32:ec:a3:64:ca:26:0e:7d:fd:5e:ed:ca:
87:9b:13:ce:22:f2:f8:ea:5b:fe:2b:05:eb:cf:9a:
48:36:53:7f:0b:c9:52:dc:d1:14:7b:b9:f2:20:81:
99:7f:2f:0d:60:2a:83:5a:a3:c2:9f:8f:ba:6f:e9:
5f:0d:4a:a7:a9:1d:4d:4b:f4:7a:c1:0f:fa:09:ed:
d2:e3:02:9a:70:c0:2b:55:34:9b:1d:d6:0b:a1:95:
bd:0b:11:fe:98:55:f0:22:5c:11:a9:66:06:41:b0:
ef:c1:a3:66:cf:d2:9e:10:f6:6e:37:1d:e4:38:3e:
c1:13:d7:9f:f9:f8:58:5f:df:03:36:f7:2f:1a:08:
48:bf:7c:40:30:0d:22:da:8b:02:3d:cf:bf:3d:9c:
ff:07:de:14:8d:1a:44:36:2f:40:21:4d:e1:62:21:
55:ff:da:ed:1e:bb:a9:9a:3a:64:2c:c6:13:6b:49:
e9:33:66:23:20:89:c3:c1:32:82:b1:8a:3b:96:2d:
79:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:ED:34:D8:FF:ED:F4:86:55:28:D5:38:9B:E2:66:5D:B0:3A:D3:0B
X509v3 Authority Key Identifier:
keyid:6F:07:4D:2E:FB:5F:3E:1D:35:C2:91:F8:A1:1C:0B:C0:BE:7E:C1:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bwdNLvtfPh01wpH4oRwLwL5-wbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/b55ef1-ca63-4ca1-a659-f9720285e797/1/bwdNLvtfPh01wpH4oRwLwL5-wbg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/b55ef1-ca63-4ca1-a659-f9720285e797/1/bwdNLvtfPh01wpH4oRwLwL5-wbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:79:cc:39:be:99:54:92:9f:7a:5c:b1:de:ac:5e:46:49:79:
cc:bb:05:c0:26:0f:62:35:69:c1:b3:15:d8:32:13:51:98:a8:
a4:4e:93:40:11:50:9d:34:a8:95:7b:d6:2a:94:dd:a7:1d:f2:
55:61:16:5e:69:4a:6f:cf:ff:bf:cd:7e:b6:ab:e9:27:6c:54:
08:e6:33:77:91:b7:1d:bc:b6:dc:ef:61:cc:90:ee:2c:a0:64:
45:b2:8c:5f:6e:fe:75:76:93:9d:fd:5d:3c:32:0d:66:43:e1:
d3:0d:04:fe:52:f7:a1:15:d7:aa:9a:09:99:a3:9f:1c:8a:48:
2e:e9:01:23:11:28:28:91:50:cb:56:7e:dc:74:09:dc:bf:67:
32:d7:97:72:4e:21:8f:18:fe:a1:62:1e:48:8e:0b:ed:3a:77:
89:78:7a:cb:f5:3d:74:7b:58:be:33:2c:5b:dc:56:f5:03:1c:
29:3e:99:6d:3e:25:61:2b:71:dc:f6:f3:34:d2:b7:74:59:4a:
73:80:6d:dc:a6:62:9a:02:88:46:8b:98:92:c8:9f:ea:f2:7e:
a0:a6:ad:94:fa:cd:ae:b9:8d:bf:b2:23:70:b0:c9:7d:ae:84:
64:4e:33:d3:18:1e:75:ad:6e:c4:53:a9:93:6a:5d:36:99:6e:
30:9d:84:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:24:00 2025 by rpki-client