Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/635a0d-921f-4711-b7d4-77dee2d79ae4/1/I06fdccyb3ZciWbC7cAKmCpep_A.mft
File: I06fdccyb3ZciWbC7cAKmCpep_A.mft (raw, json)
Hash identifier: hPWxbsn/jfvX/6RE4f0XKhBcjf4nWxHf5g8TLs6Ggtg=
Subject key identifier: BD:D2:68:83:40:46:2C:D1:9B:F2:AD:EB:63:93:52:53:8E:44:CB:CF
Authority key identifier: 23:4E:9F:75:C7:32:6F:76:5C:89:66:C2:ED:C0:0A:98:2A:5E:A7:F0
Certificate issuer: /CN=234e9f75c7326f765c8966c2edc00a982a5ea7f0
Certificate serial: 01976929A10F921A75CE1D7A7D2551021D75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I06fdccyb3ZciWbC7cAKmCpep_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/635a0d-921f-4711-b7d4-77dee2d79ae4/1/I06fdccyb3ZciWbC7cAKmCpep_A.mft
Manifest number: 12FB
Signing time: Fri 13 Jun 2025 12:00:25 +0000
Manifest this update: Fri 13 Jun 2025 12:00:25 +0000
Manifest next update: Sat 14 Jun 2025 12:00:25 +0000
Files and hashes: 1: I06fdccyb3ZciWbC7cAKmCpep_A.crl (hash: gZvI62AmX3Lb51IIS35C0lkVMMd+9ckf9lKobXASORA=)
2: _abtUqDmMxDQ2RmQqkGL8N8DjTE.roa (hash: CRHU3YWrzulAziPCk+beyoXQoDHAl8oOT3cyglDGbAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/635a0d-921f-4711-b7d4-77dee2d79ae4/1/I06fdccyb3ZciWbC7cAKmCpep_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/635a0d-921f-4711-b7d4-77dee2d79ae4/1/I06fdccyb3ZciWbC7cAKmCpep_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/I06fdccyb3ZciWbC7cAKmCpep_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 12:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:29:a1:0f:92:1a:75:ce:1d:7a:7d:25:51:02:1d:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=234e9f75c7326f765c8966c2edc00a982a5ea7f0
Validity
Not Before: Jun 13 12:00:25 2025 GMT
Not After : Jun 14 12:00:25 2025 GMT
Subject: CN=bdd2688340462cd19bf2adeb639352538e44cbcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:fd:29:a4:0f:ff:c3:bc:64:4c:2e:c7:87:31:
b6:f0:2e:42:c1:53:86:c1:8f:2c:63:a7:4d:31:ac:
c9:df:5a:02:6e:4e:0f:e8:38:1a:71:3d:9f:a5:32:
34:b0:30:37:e3:62:a1:1c:56:9f:7e:a9:53:f8:46:
a2:9a:79:6e:f3:a6:e6:88:f1:37:2a:27:1e:3a:af:
ec:97:d9:d0:d7:de:7b:b1:55:13:7f:b2:90:a2:92:
4d:d6:86:76:47:84:ac:77:85:d3:52:e4:26:aa:c8:
df:98:42:17:ea:e6:9e:b7:31:ed:23:03:c6:b7:cb:
3b:41:b1:b6:f4:bb:d2:17:cb:5f:b1:0f:36:a3:0b:
09:85:22:46:ff:e0:5c:ce:47:af:49:6b:59:1d:f0:
0a:bc:64:5f:45:ae:e8:37:15:f5:e3:d4:38:e5:ca:
1f:83:d9:fa:d6:f3:48:26:03:fe:b1:1b:37:5a:f5:
03:03:3e:ee:88:b0:ad:d3:4a:02:04:dd:4d:5e:b4:
0d:14:6f:92:eb:54:9a:a6:e2:b4:f7:31:0d:8b:3e:
dd:18:a2:00:0b:86:60:5a:a4:fb:d6:b6:6c:3d:44:
69:f1:13:d6:b5:cb:38:7d:02:af:e0:3d:88:54:a8:
1f:2e:04:8e:06:9b:80:55:c4:ab:72:f5:0a:5a:a2:
96:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:D2:68:83:40:46:2C:D1:9B:F2:AD:EB:63:93:52:53:8E:44:CB:CF
X509v3 Authority Key Identifier:
keyid:23:4E:9F:75:C7:32:6F:76:5C:89:66:C2:ED:C0:0A:98:2A:5E:A7:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I06fdccyb3ZciWbC7cAKmCpep_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/635a0d-921f-4711-b7d4-77dee2d79ae4/1/I06fdccyb3ZciWbC7cAKmCpep_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/635a0d-921f-4711-b7d4-77dee2d79ae4/1/I06fdccyb3ZciWbC7cAKmCpep_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:ca:53:84:9e:da:d3:bc:c4:75:b1:77:d5:fb:1c:3c:c1:51:
08:cb:67:f9:55:3b:ec:1c:34:a5:ab:99:f9:45:9b:90:32:4c:
3b:38:4a:fb:10:04:a0:c5:9f:62:c7:20:cf:96:9e:43:aa:26:
bd:32:25:92:fa:14:e8:8b:3e:87:6b:d0:b4:eb:da:96:fe:e1:
de:01:51:41:95:9c:35:06:26:0d:b4:aa:b7:4d:a8:61:86:52:
cb:bd:0b:89:24:33:f6:4b:9c:2d:61:08:30:dc:ec:f8:3e:5f:
66:f0:ce:25:2f:36:f1:e0:31:e9:e8:a0:9e:bd:21:7f:dc:d5:
f1:2d:13:05:cb:2d:e5:b2:60:45:de:6b:4a:86:cb:92:82:18:
ac:5c:46:25:5e:94:e3:e7:e3:52:ab:61:01:1c:ff:60:4c:3f:
2f:36:87:17:97:44:02:d7:6c:de:6b:83:c5:95:8d:f4:37:61:
2d:11:23:b8:1e:e1:11:7c:f4:25:26:99:af:c4:21:1b:ce:4c:
ab:8e:89:39:eb:2d:61:49:d2:31:cf:10:fb:80:eb:5d:e1:a4:
15:ce:ac:f3:7f:5a:a5:44:ae:56:87:fe:9e:1e:c5:f7:23:8a:
69:69:fa:2e:56:ed:e2:05:08:bb:34:5b:83:1a:da:65:35:55:
ea:0e:31:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 18:59:36 2025 by rpki-client