Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
File: bwsVGTgW_RXc_QR9tO7KZykSu2A.mft (raw, json)
Hash identifier: Us7DZLsfc87bj5ZQvwMCG67vs0Bsrjy58zxVBJhQzAg=
Subject key identifier: 10:29:0A:FA:01:3F:4D:52:E0:FB:81:82:7A:AC:51:0D:6E:7C:98:D9
Authority key identifier: 6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60
Certificate issuer: /CN=6f0b15193816fd15dcfd047db4eeca672912bb60
Certificate serial: 0197782F58AA5D478633A20C6523C553E55A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
Manifest number: 0DC3
Signing time: Mon 16 Jun 2025 10:00:58 +0000
Manifest this update: Mon 16 Jun 2025 10:00:58 +0000
Manifest next update: Tue 17 Jun 2025 10:00:58 +0000
Files and hashes: 1: CJ2ClG_JdfjMlY4Z6z_RGPwGBQA.roa (hash: hDhd3vstthEFV1qbikUvxMAn4J2gEu+fzCJOKi1wsv4=)
2: Q2-iT_0Zjzv9GH02ya8YtILj8aY.roa (hash: w4dI7huh81K1h/L8FZLaE05OH1acBhhl3bfSdimUZDw=)
3: bwsVGTgW_RXc_QR9tO7KZykSu2A.crl (hash: A2fNVGnrLkgETiakRrp4lGfcfp4ukBfaka3ptzGbdmA=)
4: k1igTi7iZQMlav5Y7S_wTES9NGE.roa (hash: reAmBAdhL4k6jWeenp5pL/cImyoZKtn+193ineXgFP4=)
5: oUFbfosRerYL4FfAZ6uYtohyzp4.roa (hash: JUInv/aznsbzYjMy5pV4S9vPkxKeoCUa9vUJpVjQ3KU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 10:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:78:2f:58:aa:5d:47:86:33:a2:0c:65:23:c5:53:e5:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f0b15193816fd15dcfd047db4eeca672912bb60
Validity
Not Before: Jun 16 10:00:58 2025 GMT
Not After : Jun 17 10:00:58 2025 GMT
Subject: CN=10290afa013f4d52e0fb81827aac510d6e7c98d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:6c:b0:8b:b4:15:4b:e2:47:11:64:40:e5:98:
91:10:8e:cb:cd:d4:a1:2f:20:54:d0:23:2b:11:da:
54:e2:90:b9:37:6a:ec:4d:b8:da:b5:0b:0f:12:66:
aa:1b:6b:11:eb:24:b6:89:29:8a:59:f3:2f:c6:2c:
df:5d:3f:62:05:4b:53:0e:f0:b5:e4:7b:db:bc:1d:
1d:8d:53:ed:b5:ae:aa:cc:4a:40:84:1d:b7:68:08:
b4:b1:0c:71:21:82:bb:15:10:37:4d:1d:21:58:11:
55:19:b9:68:bd:55:71:64:26:08:6e:98:d7:1c:ce:
c0:8c:51:49:30:5f:c1:49:f5:50:8f:b8:a5:86:c4:
7d:67:99:9a:e8:d6:e9:8a:4e:7d:6e:23:86:9f:49:
f1:b8:b9:08:8f:00:ef:98:d6:4f:8e:d6:ce:66:8e:
5b:83:49:34:d7:70:1e:14:9d:ad:02:15:7e:63:16:
c3:3c:bd:35:cb:29:76:65:79:58:6a:82:84:74:42:
df:bc:4b:07:2a:3b:8a:6d:85:a7:e4:0b:2b:6e:06:
82:25:d6:63:1a:96:77:22:36:2f:f6:79:78:f2:30:
76:fc:b4:05:6c:f4:60:f9:87:f2:87:f1:99:80:7d:
9e:e9:da:2a:24:45:50:e9:db:be:b5:8a:90:d5:7b:
53:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:29:0A:FA:01:3F:4D:52:E0:FB:81:82:7A:AC:51:0D:6E:7C:98:D9
X509v3 Authority Key Identifier:
keyid:6F:0B:15:19:38:16:FD:15:DC:FD:04:7D:B4:EE:CA:67:29:12:BB:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bwsVGTgW_RXc_QR9tO7KZykSu2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/958841-f6b0-4249-8046-9cf843f05670/1/bwsVGTgW_RXc_QR9tO7KZykSu2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:82:b0:60:2e:ed:ac:17:7b:2a:92:af:34:e0:52:77:81:4a:
39:25:b7:45:e8:c9:10:b0:4e:83:fe:35:b1:15:64:33:32:35:
a8:43:2a:c8:e0:76:c3:4a:ef:06:90:8e:93:42:e5:20:b6:19:
e6:2c:99:1d:ff:96:05:c2:da:8c:eb:f4:6b:65:8a:bc:05:1b:
4a:b2:c1:d3:f5:9d:9f:12:34:cf:42:23:2e:e4:45:76:2e:51:
0e:28:f0:22:70:a2:6f:9a:9d:53:36:04:e9:e7:6a:cf:d5:99:
04:d7:4c:11:01:92:7e:3d:1b:48:55:2d:20:a1:6c:a3:28:ba:
78:8e:66:69:c9:1b:b9:18:ab:96:94:06:f1:4b:9a:e9:54:b7:
d6:3d:2e:f8:56:6d:8e:2f:bc:75:a1:80:de:94:d5:0b:8e:70:
89:d7:c8:56:c7:04:e2:44:b0:b4:be:fe:61:e8:6a:cd:b1:41:
04:96:aa:a2:f9:19:fd:1c:be:91:f0:6b:3a:80:46:c8:67:08:
ed:f5:25:84:d9:8e:91:5d:69:f9:cc:bd:3a:fc:39:ea:fc:9b:
99:c8:e6:3b:44:24:d9:9a:28:b0:71:c8:5b:6a:80:c9:39:43:
13:79:31:43:38:87:31:1b:8f:e8:ba:a1:e6:3b:70:6c:4a:50:
72:12:51:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 16:19:04 2025 by rpki-client