Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/9ca58e-9e32-428f-8411-1aeb6a4e45ad/1/bMacPXAwzsGfj7ZuVDveZVlXCKI.mft
File: bMacPXAwzsGfj7ZuVDveZVlXCKI.mft (raw, json)
Hash identifier: mqRIfPdwknfaKiip8FEf/ArLVoDPyWfLFhuAU/FEuUY=
Subject key identifier: 6D:82:23:6C:D6:BF:79:58:DD:CE:59:C3:5E:14:E5:8F:1A:4A:83:06
Authority key identifier: 6C:C6:9C:3D:70:30:CE:C1:9F:8F:B6:6E:54:3B:DE:65:59:57:08:A2
Certificate issuer: /CN=6cc69c3d7030cec19f8fb66e543bde65595708a2
Certificate serial: 019768850A599A53BF3060ABD02A35491CAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bMacPXAwzsGfj7ZuVDveZVlXCKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/9ca58e-9e32-428f-8411-1aeb6a4e45ad/1/bMacPXAwzsGfj7ZuVDveZVlXCKI.mft
Manifest number: 0687
Signing time: Fri 13 Jun 2025 09:00:38 +0000
Manifest this update: Fri 13 Jun 2025 09:00:38 +0000
Manifest next update: Sat 14 Jun 2025 09:00:38 +0000
Files and hashes: 1: LRy1Su2fWLwjRlXSpxKiN2HsmOE.roa (hash: VbIoxvhdv4Kz4zlYMs8a+1GTnDDa2PQSnpokMmTeNJI=)
2: MbTvipFbe-Fro7yGscX94j34OpQ.roa (hash: lGgg0U/FzBropaPivoqmUVqyNKPQ65NR2i0gu4fF2i0=)
3: bMacPXAwzsGfj7ZuVDveZVlXCKI.crl (hash: ANeGkAdCUjxQHyrm1WTd9CAXioS51wdJur/Gd1wNUTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/9ca58e-9e32-428f-8411-1aeb6a4e45ad/1/bMacPXAwzsGfj7ZuVDveZVlXCKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/9ca58e-9e32-428f-8411-1aeb6a4e45ad/1/bMacPXAwzsGfj7ZuVDveZVlXCKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/bMacPXAwzsGfj7ZuVDveZVlXCKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:85:0a:59:9a:53:bf:30:60:ab:d0:2a:35:49:1c:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cc69c3d7030cec19f8fb66e543bde65595708a2
Validity
Not Before: Jun 13 09:00:38 2025 GMT
Not After : Jun 14 09:00:38 2025 GMT
Subject: CN=6d82236cd6bf7958ddce59c35e14e58f1a4a8306
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:45:f2:ad:f3:4f:0a:ac:f3:a7:e2:bb:7e:52:
53:53:54:34:a6:90:35:34:02:da:d1:55:17:e3:2f:
71:98:0f:1f:7c:58:38:f0:94:00:b9:04:16:21:b7:
33:b1:ac:ff:c7:d5:96:1b:3d:04:9e:bd:6c:fc:fa:
e5:b8:7a:9a:aa:cd:b5:e1:ea:36:a8:66:77:32:59:
38:08:fa:e3:fd:06:9b:df:83:ae:2a:03:93:a3:1f:
ad:c5:2f:88:0e:4c:e9:67:b5:70:31:7d:50:5b:8e:
d5:db:d2:a1:06:2a:b7:ed:fb:37:3b:13:79:75:7b:
1f:c6:2a:ac:fc:f0:70:ce:e4:c3:08:97:d6:62:1f:
13:94:1d:6d:09:ac:b3:4b:a8:da:e0:16:53:a4:3a:
03:40:90:a8:50:7e:1f:aa:25:92:43:2d:24:0c:01:
fb:d5:01:c1:b1:94:5f:5b:b9:ae:bc:f5:70:9e:ed:
b8:b3:0f:4b:5c:7c:10:d9:5c:a6:c1:35:68:81:3b:
07:19:c5:b3:bf:f5:0f:af:61:a3:12:1e:df:79:3a:
76:18:ae:85:d1:3d:34:84:84:aa:16:6c:93:cf:39:
6f:ba:62:b1:30:e3:23:bd:8e:66:8f:c4:92:ca:60:
64:ec:bd:f8:d2:1d:13:f9:3d:11:5e:95:e2:91:fb:
d2:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:82:23:6C:D6:BF:79:58:DD:CE:59:C3:5E:14:E5:8F:1A:4A:83:06
X509v3 Authority Key Identifier:
keyid:6C:C6:9C:3D:70:30:CE:C1:9F:8F:B6:6E:54:3B:DE:65:59:57:08:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMacPXAwzsGfj7ZuVDveZVlXCKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9ca58e-9e32-428f-8411-1aeb6a4e45ad/1/bMacPXAwzsGfj7ZuVDveZVlXCKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9ca58e-9e32-428f-8411-1aeb6a4e45ad/1/bMacPXAwzsGfj7ZuVDveZVlXCKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:83:e8:f3:73:a6:50:bb:47:3f:c4:aa:fb:c2:77:67:00:10:
37:93:2a:5b:04:6e:82:78:3e:79:2a:bf:7d:d9:e9:ee:67:34:
4c:1f:dd:0c:13:12:50:54:44:7d:7f:51:f7:31:60:99:86:02:
2f:e9:78:67:8c:3f:9a:18:4a:79:7c:19:5a:d7:09:db:b5:9d:
4a:e9:ce:82:5a:09:11:c8:6b:05:68:ae:6e:1d:0a:58:20:da:
32:04:c4:dc:eb:bb:9a:de:7b:09:96:24:ac:91:e2:e4:04:30:
18:6a:ed:65:ea:c1:47:c8:7a:39:1c:92:5a:c8:7b:48:25:0f:
ba:37:59:d8:33:08:5e:5c:9b:ab:10:a9:a2:36:31:25:3e:32:
10:6e:aa:d9:82:71:bb:e1:77:7f:08:26:33:cf:2e:86:30:49:
2f:9e:40:71:eb:19:ba:99:3d:52:aa:3c:da:b5:6b:ed:62:fd:
7d:5a:2c:ca:e4:13:13:fd:42:ad:7b:f5:e8:d2:2f:b7:a0:e1:
10:c1:69:48:50:eb:91:9d:91:43:59:1a:31:40:6c:22:cb:22:
74:0d:e4:6a:d6:90:b5:e5:db:a7:55:2c:3d:bf:0d:2b:29:cf:
fb:53:0a:1e:7a:0c:29:d1:67:e3:81:82:89:c4:ba:5b:91:1b:
b7:cd:7d:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:32:50 2025 by rpki-client