Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/9a5599-d389-4836-8033-43dc2b5eeb5b/1/bCynx_AN7ET0jEnyKldylIaaqbo.mft
File: bCynx_AN7ET0jEnyKldylIaaqbo.mft (raw, json)
Hash identifier: 5hvdUj6X9csHQPS90Xgs5oQrRniJ2Lguu1fWrR6rGLw=
Subject key identifier: 46:2E:92:85:98:C3:B8:A6:FC:78:81:EE:1D:11:28:7A:A5:FF:E5:EF
Authority key identifier: 6C:2C:A7:C7:F0:0D:EC:44:F4:8C:49:F2:2A:57:72:94:86:9A:A9:BA
Certificate issuer: /CN=6c2ca7c7f00dec44f48c49f22a577294869aa9ba
Certificate serial: 01976BF3FF507A20BD02F515AFF399DC4F54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bCynx_AN7ET0jEnyKldylIaaqbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/9a5599-d389-4836-8033-43dc2b5eeb5b/1/bCynx_AN7ET0jEnyKldylIaaqbo.mft
Manifest number: 158D
Signing time: Sat 14 Jun 2025 01:00:42 +0000
Manifest this update: Sat 14 Jun 2025 01:00:42 +0000
Manifest next update: Sun 15 Jun 2025 01:00:42 +0000
Files and hashes: 1: CFjxJzCmd6HUFa7VuE6yI0I0AMQ.roa (hash: MIyflourwhBuhTA+A0FwkrenrfoY9JbHcdU1eop0jPQ=)
2: bCynx_AN7ET0jEnyKldylIaaqbo.crl (hash: KPZELBzz43ruEx3/o5C4FimBqobc66PRsrth8AqJtVc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/9a5599-d389-4836-8033-43dc2b5eeb5b/1/bCynx_AN7ET0jEnyKldylIaaqbo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/9a5599-d389-4836-8033-43dc2b5eeb5b/1/bCynx_AN7ET0jEnyKldylIaaqbo.mft
rsync://rpki.ripe.net/repository/DEFAULT/bCynx_AN7ET0jEnyKldylIaaqbo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:f3:ff:50:7a:20:bd:02:f5:15:af:f3:99:dc:4f:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c2ca7c7f00dec44f48c49f22a577294869aa9ba
Validity
Not Before: Jun 14 01:00:42 2025 GMT
Not After : Jun 15 01:00:42 2025 GMT
Subject: CN=462e928598c3b8a6fc7881ee1d11287aa5ffe5ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:03:40:03:2b:e6:0e:56:89:49:ad:11:d1:ee:
8f:75:c3:d9:44:95:46:fd:30:1a:ae:fb:8e:72:61:
36:88:01:98:9f:55:2d:76:dc:2f:1e:46:ef:c7:b7:
58:a7:5a:4c:8e:8d:56:d2:e8:9c:52:50:e1:a6:80:
30:fc:f0:20:b4:57:09:8d:2a:d2:0c:86:88:dd:a1:
5e:b2:8f:30:c8:f8:de:c8:99:01:f2:21:1f:3d:ff:
b2:2a:76:7e:0e:f7:39:1e:fa:8b:9e:a0:82:df:ee:
be:92:b0:fc:ea:b8:bf:78:aa:e8:8d:22:44:b9:65:
16:60:e1:bb:4e:83:a4:95:b1:cf:03:2d:3c:2d:ba:
fb:c6:e4:6e:e9:5a:c1:16:77:3f:e7:b6:e7:9b:8d:
84:62:4b:ed:51:c3:d9:e5:38:95:9a:8d:23:c2:b2:
59:15:b0:07:24:cd:fc:79:23:09:30:67:66:9a:37:
d7:00:52:d9:f7:ee:df:be:62:56:46:e3:f7:bd:e7:
73:80:4c:aa:54:b7:83:fa:54:e5:ba:d7:02:07:0d:
a1:7b:42:0a:5a:b7:9b:91:38:a2:7e:d6:e7:80:45:
69:0d:09:1d:c8:db:e0:35:ad:32:f2:a0:65:74:d1:
31:f2:4b:da:f6:dd:77:3f:45:68:d0:86:9e:32:b4:
9a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:2E:92:85:98:C3:B8:A6:FC:78:81:EE:1D:11:28:7A:A5:FF:E5:EF
X509v3 Authority Key Identifier:
keyid:6C:2C:A7:C7:F0:0D:EC:44:F4:8C:49:F2:2A:57:72:94:86:9A:A9:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bCynx_AN7ET0jEnyKldylIaaqbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9a5599-d389-4836-8033-43dc2b5eeb5b/1/bCynx_AN7ET0jEnyKldylIaaqbo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9a5599-d389-4836-8033-43dc2b5eeb5b/1/bCynx_AN7ET0jEnyKldylIaaqbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:37:a7:e2:06:aa:10:8d:a2:88:d4:e5:e6:0c:df:6f:3c:9e:
6d:07:e6:23:20:e4:91:a9:6d:a3:bf:79:2b:3c:3f:60:64:f4:
1a:fb:df:12:00:2e:ee:cd:68:b5:e2:4f:1a:23:5d:c4:99:00:
93:f2:c8:1e:89:d1:3f:e6:70:59:b3:bc:d9:b8:55:bb:42:4a:
85:77:52:ab:84:e8:76:06:6f:ff:21:9b:76:42:7c:88:96:e0:
b4:8a:e8:5b:1d:a2:6b:e2:b5:81:77:2b:11:72:d8:f1:74:83:
e8:09:3e:1d:58:cf:35:47:ea:b5:07:81:b2:c7:44:46:c7:c1:
cc:45:8e:94:31:1c:a8:30:76:90:a2:9c:be:b2:28:2f:aa:c4:
7a:67:4f:ac:9c:de:bd:47:44:3c:be:ba:16:eb:58:c8:c7:a2:
31:70:c2:72:cb:72:dc:e0:30:ce:73:b4:7c:dc:f7:1d:01:4f:
78:ee:a4:e3:41:c8:60:c4:50:f7:df:6b:5a:91:4b:81:4a:7f:
26:98:e8:fd:2b:6a:b6:1e:6f:ae:59:5f:ef:96:d3:02:b2:1e:
52:10:53:ab:f0:e9:4d:44:05:71:21:0e:e2:32:41:ab:eb:6f:
f5:31:a9:41:40:c8:14:35:6b:e3:7b:24:3e:de:6e:5c:67:73:
5f:36:6e:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:58:36 2025 by rpki-client