Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/dd7764-1a58-45e6-ad83-32a60912ef40/1/bG3bcucmgpjBcUWDExu-SuTvCRY.mft
File: bG3bcucmgpjBcUWDExu-SuTvCRY.mft (raw, json)
Hash identifier: WHeXF8Ub7kK5dk8d5bkDzAmOGyTw+qyyRST0sm4D/x0=
Subject key identifier: 14:74:67:6A:31:C1:6C:5C:65:96:56:81:92:DF:31:47:BD:AD:AA:A2
Authority key identifier: 6C:6D:DB:72:E7:26:82:98:C1:71:45:83:13:1B:BE:4A:E4:EF:09:16
Certificate issuer: /CN=6c6ddb72e7268298c1714583131bbe4ae4ef0916
Certificate serial: 019769CEA063B8395C4E5F758DFE3797C5AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bG3bcucmgpjBcUWDExu-SuTvCRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/dd7764-1a58-45e6-ad83-32a60912ef40/1/bG3bcucmgpjBcUWDExu-SuTvCRY.mft
Manifest number: 09F1
Signing time: Fri 13 Jun 2025 15:00:38 +0000
Manifest this update: Fri 13 Jun 2025 15:00:38 +0000
Manifest next update: Sat 14 Jun 2025 15:00:38 +0000
Files and hashes: 1: 29nd_dOa0jOSjO-BSVNW7WFQmeU.roa (hash: PQzBa+M3c2965MBEIUlCwMA/PPxb1gOFyUG0cf3P01E=)
2: bG3bcucmgpjBcUWDExu-SuTvCRY.crl (hash: 441eZNQVtoWLPZ25ZkzjX1AiXOTzS/2erHi5w6OfHJA=)
3: zSoruqrv0RMRlvtEdSofVrHKUNM.roa (hash: zchVE5WsD0we5YnngEjVpAF61yVGUwwg3Aq8gS0jfiI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/dd7764-1a58-45e6-ad83-32a60912ef40/1/bG3bcucmgpjBcUWDExu-SuTvCRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/dd7764-1a58-45e6-ad83-32a60912ef40/1/bG3bcucmgpjBcUWDExu-SuTvCRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bG3bcucmgpjBcUWDExu-SuTvCRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:ce:a0:63:b8:39:5c:4e:5f:75:8d:fe:37:97:c5:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c6ddb72e7268298c1714583131bbe4ae4ef0916
Validity
Not Before: Jun 13 15:00:38 2025 GMT
Not After : Jun 14 15:00:38 2025 GMT
Subject: CN=1474676a31c16c5c6596568192df3147bdadaaa2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b8:84:53:9b:15:22:cc:2b:cf:2c:40:59:70:
50:6e:6f:0c:c4:17:93:e3:dd:3d:9f:30:b1:c7:20:
11:cc:ba:c8:2e:d4:40:c4:0a:2a:cf:9b:1f:de:78:
89:e9:6c:d3:d0:f0:e7:28:c7:a7:fc:9a:c9:06:c9:
ca:40:d7:21:45:2c:6c:e5:30:da:e0:e2:67:b4:c9:
35:20:ff:ee:81:97:f7:ad:0c:a4:71:61:8c:66:80:
68:48:a3:6b:19:e1:8e:b9:78:7a:20:2f:ab:4a:3a:
27:58:14:93:f7:15:d3:1a:bc:bf:9c:da:60:dc:fa:
47:c2:a0:81:d6:c4:21:3e:f1:2d:aa:3b:ee:25:4e:
e6:be:76:d6:5d:77:5a:30:61:e8:8b:01:b4:0f:97:
6d:3f:3e:b0:29:8b:fc:62:03:8e:67:bb:cd:e1:d0:
20:0c:8c:d0:05:0f:bc:43:72:7a:d6:40:3f:d9:9d:
93:34:56:d5:36:64:23:07:9a:b6:7e:f4:b8:09:ff:
9e:c7:31:2b:dd:09:3b:cb:51:ba:c5:22:ef:b8:fd:
56:9d:bb:79:30:6c:8e:97:cd:f4:0a:89:0a:47:cd:
72:16:44:21:c6:bb:d0:f1:e7:ab:e2:ab:b1:aa:1a:
b7:3a:7c:19:bf:77:96:51:a1:eb:c4:ab:d0:e6:ab:
d1:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:74:67:6A:31:C1:6C:5C:65:96:56:81:92:DF:31:47:BD:AD:AA:A2
X509v3 Authority Key Identifier:
keyid:6C:6D:DB:72:E7:26:82:98:C1:71:45:83:13:1B:BE:4A:E4:EF:09:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bG3bcucmgpjBcUWDExu-SuTvCRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/dd7764-1a58-45e6-ad83-32a60912ef40/1/bG3bcucmgpjBcUWDExu-SuTvCRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/dd7764-1a58-45e6-ad83-32a60912ef40/1/bG3bcucmgpjBcUWDExu-SuTvCRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:34:87:ed:76:b4:75:07:7d:21:9c:f4:9d:e3:4f:90:17:96:
b3:0a:f1:e6:9c:32:c8:d1:e3:2e:4c:76:f3:46:48:16:3a:45:
62:63:e2:64:5b:64:f2:af:00:e4:dd:5b:53:4d:9d:b9:19:fb:
51:01:32:f5:c5:34:07:3c:54:df:a2:b6:26:ae:57:57:cb:14:
cd:3c:f3:35:f4:ff:75:e1:16:b0:36:01:39:07:16:db:f3:be:
98:7f:26:3e:af:d3:6a:e6:09:bd:9c:9b:25:8a:65:65:d8:41:
1b:01:67:10:b1:cd:3c:85:47:7b:26:5a:2e:fa:8f:67:c4:7d:
25:38:8d:b4:6d:7e:4d:8d:2f:91:4c:47:5e:c7:c8:26:b2:0f:
62:82:da:ef:71:83:23:30:33:cb:3f:48:29:c7:02:fe:3d:dd:
37:1e:4c:e9:b0:ab:36:d5:f6:04:32:f1:49:c9:9e:ed:10:11:
74:b7:6c:67:28:c6:fb:8c:ec:e2:0f:a3:93:13:03:e4:0c:9a:
43:41:2d:a2:2a:92:bd:ec:dc:1c:a7:5c:4e:32:0e:05:49:69:
c4:01:4b:6d:cc:aa:53:d6:2d:06:65:62:98:93:54:9b:e4:fd:
ae:06:8f:26:19:28:7d:ea:2b:ca:93:3b:c5:2d:09:0c:ef:af:
7f:98:e3:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:30:19 2025 by rpki-client