Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/6a11f4-e57f-4117-93ab-0a2ec5a23b98/1/bFklNs4G_apawu5IEXz1eqO0yNA.mft
File: bFklNs4G_apawu5IEXz1eqO0yNA.mft (raw, json)
Hash identifier: ZvAlyqhy1gk316JMcfKfTp4NcNxISo47FeAvAZeK/Io=
Subject key identifier: CD:07:54:60:C5:57:AC:EF:AF:7E:99:2C:E7:30:46:FF:5F:5F:88:7F
Authority key identifier: 6C:59:25:36:CE:06:FD:AA:5A:C2:EE:48:11:7C:F5:7A:A3:B4:C8:D0
Certificate issuer: /CN=6c592536ce06fdaa5ac2ee48117cf57aa3b4c8d0
Certificate serial: 01976884C57D34DC29C1C29FF939B54FD0E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bFklNs4G_apawu5IEXz1eqO0yNA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/6a11f4-e57f-4117-93ab-0a2ec5a23b98/1/bFklNs4G_apawu5IEXz1eqO0yNA.mft
Manifest number: 067D
Signing time: Fri 13 Jun 2025 09:00:21 +0000
Manifest this update: Fri 13 Jun 2025 09:00:21 +0000
Manifest next update: Sat 14 Jun 2025 09:00:21 +0000
Files and hashes: 1: RRRoI352tPME83y_RWi6YuXJIxo.roa (hash: k7Cx4JuzSdpqE84E3rc6FTyI73B5CT48LupLWUTqrZc=)
2: bFklNs4G_apawu5IEXz1eqO0yNA.crl (hash: NQk8W25M99B3zgFV0UZ9qVxgMs7Kjj5hvYY7TAZyCqI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/6a11f4-e57f-4117-93ab-0a2ec5a23b98/1/bFklNs4G_apawu5IEXz1eqO0yNA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/6a11f4-e57f-4117-93ab-0a2ec5a23b98/1/bFklNs4G_apawu5IEXz1eqO0yNA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bFklNs4G_apawu5IEXz1eqO0yNA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 09:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:84:c5:7d:34:dc:29:c1:c2:9f:f9:39:b5:4f:d0:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c592536ce06fdaa5ac2ee48117cf57aa3b4c8d0
Validity
Not Before: Jun 13 09:00:21 2025 GMT
Not After : Jun 14 09:00:21 2025 GMT
Subject: CN=cd075460c557acefaf7e992ce73046ff5f5f887f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:70:bf:2c:34:c3:e0:65:64:42:e6:12:30:7f:
d7:0d:29:3c:83:94:68:c0:24:89:be:3e:f8:da:f7:
72:ec:b6:eb:a3:b0:f5:41:b5:ce:c3:78:ec:bb:f3:
ca:6f:b4:77:ee:ed:6f:d9:a0:cb:54:b7:a5:c7:1d:
46:37:77:85:2b:51:42:b3:4b:87:49:4f:b6:48:bb:
c8:8d:16:7c:f3:e9:62:94:17:c8:ae:b6:68:0b:62:
01:f2:aa:b9:95:e1:b4:fe:d3:49:a4:1f:09:e9:8d:
dd:dc:77:28:92:6e:13:17:91:6a:7c:bc:54:16:25:
1d:24:f2:2a:16:e4:a4:b5:c6:10:ff:4c:52:7c:b6:
69:c7:ba:18:58:cb:39:48:57:ef:4e:89:d0:41:ce:
13:69:e8:b9:26:94:f8:e4:fc:0b:2b:ed:b4:f7:cc:
1c:8a:07:b8:b5:97:ee:8b:7f:97:99:1c:27:5c:59:
db:0d:70:99:39:94:6b:fa:fa:7b:9d:1c:92:fa:30:
ff:fa:87:d7:39:52:43:ec:33:d2:4f:d4:54:e0:0d:
74:ae:4e:42:8f:86:a3:44:a1:9e:91:2a:ec:03:47:
36:bd:dc:a6:e9:14:46:95:c9:f2:71:88:da:f4:5e:
12:f3:1f:78:07:15:2b:d7:7b:94:5f:13:ff:ff:bd:
f2:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:07:54:60:C5:57:AC:EF:AF:7E:99:2C:E7:30:46:FF:5F:5F:88:7F
X509v3 Authority Key Identifier:
keyid:6C:59:25:36:CE:06:FD:AA:5A:C2:EE:48:11:7C:F5:7A:A3:B4:C8:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bFklNs4G_apawu5IEXz1eqO0yNA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6a11f4-e57f-4117-93ab-0a2ec5a23b98/1/bFklNs4G_apawu5IEXz1eqO0yNA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6a11f4-e57f-4117-93ab-0a2ec5a23b98/1/bFklNs4G_apawu5IEXz1eqO0yNA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e5:87:df:06:ab:e9:47:44:ff:98:e9:c5:7a:89:7e:69:a1:50:
ed:94:ab:92:be:fe:12:9f:76:c9:55:07:15:ac:c3:cd:74:03:
8e:92:05:31:59:58:62:b6:2c:c2:44:ab:b4:17:e5:7a:ef:70:
02:14:55:be:83:fa:31:d2:af:59:0c:8f:a2:d7:8c:55:67:ec:
4b:60:f8:06:11:11:e0:90:9c:c5:5b:63:b0:80:28:4e:51:2e:
98:ac:20:4a:15:c9:07:6c:76:17:ae:e9:ec:d1:67:75:d0:92:
cf:e9:96:49:34:47:c3:89:76:c1:c9:91:60:ad:7a:3a:7f:89:
55:2c:85:7d:86:e8:0b:94:5d:60:39:8f:9f:67:1a:e4:b9:e8:
3e:fb:90:86:41:b0:53:23:90:99:7e:97:d8:49:0a:af:6d:30:
48:a7:9d:17:34:ce:96:2a:43:3c:4b:c1:07:8b:9f:d8:81:8a:
96:18:47:9a:e5:72:30:76:02:5f:ff:66:fd:e6:73:ba:5f:31:
60:b1:45:ed:7f:5a:8c:db:42:2d:39:f5:f4:ec:ae:0b:99:db:
0a:88:ba:0d:d1:00:64:82:90:64:05:fa:36:d1:af:7b:5e:6d:
ca:7e:85:1f:6c:12:fd:d8:ae:7a:75:1c:38:63:23:54:4c:c3:
4d:64:9c:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:11:35 2025 by rpki-client