Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/125959-746b-4a0f-96d3-c3e8eadd00ba/1/bYQL-PLqRGpH22xjOQZmfGPtiG4.mft
File: bYQL-PLqRGpH22xjOQZmfGPtiG4.mft (raw, json)
Hash identifier: IUWJxWG7wTWsdWOI2TlrEDBnWZX99nNyFPpepyvftK4=
Subject key identifier: 29:C9:E3:10:D0:2B:8F:F7:F9:D2:39:B7:FD:CE:B4:3B:6C:28:10:F7
Authority key identifier: 6D:84:0B:F8:F2:EA:44:6A:47:DB:6C:63:39:06:66:7C:63:ED:88:6E
Certificate issuer: /CN=6d840bf8f2ea446a47db6c633906667c63ed886e
Certificate serial: 019768BBBB4A8B7CD0D6BD348CAF468D8248
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bYQL-PLqRGpH22xjOQZmfGPtiG4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/125959-746b-4a0f-96d3-c3e8eadd00ba/1/bYQL-PLqRGpH22xjOQZmfGPtiG4.mft
Manifest number: 0FE2
Signing time: Fri 13 Jun 2025 10:00:22 +0000
Manifest this update: Fri 13 Jun 2025 10:00:22 +0000
Manifest next update: Sat 14 Jun 2025 10:00:22 +0000
Files and hashes: 1: 9fXYfiecb8LKHLBc5hFULaPgfkc.roa (hash: 4n+9kukj7OWGzO7qg1Ocfcd3L1gAsSFqFZg+KnIOuRA=)
2: bYQL-PLqRGpH22xjOQZmfGPtiG4.crl (hash: GS4M+OFVhk6U7ttCp+DkbuEzytMOaJuybRAvv5q2WcA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/125959-746b-4a0f-96d3-c3e8eadd00ba/1/bYQL-PLqRGpH22xjOQZmfGPtiG4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/125959-746b-4a0f-96d3-c3e8eadd00ba/1/bYQL-PLqRGpH22xjOQZmfGPtiG4.mft
rsync://rpki.ripe.net/repository/DEFAULT/bYQL-PLqRGpH22xjOQZmfGPtiG4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 10:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bb:bb:4a:8b:7c:d0:d6:bd:34:8c:af:46:8d:82:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d840bf8f2ea446a47db6c633906667c63ed886e
Validity
Not Before: Jun 13 10:00:22 2025 GMT
Not After : Jun 14 10:00:22 2025 GMT
Subject: CN=29c9e310d02b8ff7f9d239b7fdceb43b6c2810f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:91:c6:ac:f9:61:1a:32:d8:ad:a3:42:21:4c:
bc:87:3d:bf:d9:16:7e:84:e8:6a:0b:2b:17:e9:2e:
b0:92:3e:6d:49:0b:6a:7c:3a:d2:55:cd:32:f4:5f:
c5:43:0b:3e:82:6c:9f:cc:37:06:e4:2f:72:54:b9:
75:77:53:95:57:25:83:04:fa:22:1f:90:ea:33:20:
07:4f:22:9a:12:d4:ea:3f:77:57:53:18:03:81:04:
94:46:0a:2f:28:d5:5e:0f:52:30:1e:d2:75:b4:14:
84:0c:26:cd:f9:52:1c:e9:bc:92:41:ac:a1:70:18:
a9:81:d5:33:4c:22:a4:5a:b0:ce:0c:8a:40:70:6f:
87:f1:2f:56:59:56:4f:85:cf:49:86:de:6f:ff:08:
ca:0c:5d:4c:84:e0:da:a9:56:17:65:ee:27:d0:bc:
f1:01:6a:87:d3:ce:2e:ca:f0:f1:48:31:74:58:9e:
88:a1:fc:7d:e4:48:c4:71:50:e3:f7:82:7e:42:f1:
08:ef:1d:d2:9c:97:bb:c1:ef:79:52:8b:ac:bf:ac:
10:1d:34:33:b6:3d:98:49:58:17:be:54:80:1e:7d:
ac:ae:39:72:08:42:b9:6c:29:c6:8a:dc:ca:72:18:
b5:41:a6:a8:9f:44:cf:36:bc:d8:aa:11:72:fb:4e:
a7:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:C9:E3:10:D0:2B:8F:F7:F9:D2:39:B7:FD:CE:B4:3B:6C:28:10:F7
X509v3 Authority Key Identifier:
keyid:6D:84:0B:F8:F2:EA:44:6A:47:DB:6C:63:39:06:66:7C:63:ED:88:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bYQL-PLqRGpH22xjOQZmfGPtiG4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/125959-746b-4a0f-96d3-c3e8eadd00ba/1/bYQL-PLqRGpH22xjOQZmfGPtiG4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/125959-746b-4a0f-96d3-c3e8eadd00ba/1/bYQL-PLqRGpH22xjOQZmfGPtiG4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:91:ae:f8:9b:69:c8:8a:cc:ab:74:22:9c:c5:96:96:a3:e0:
f9:0e:06:d7:93:e8:b5:ef:b0:64:d1:09:ef:86:7c:18:c2:1c:
bb:06:a5:c2:35:e0:54:82:00:9a:05:10:54:58:53:b6:cc:df:
e6:fa:38:16:db:25:bd:59:cc:17:5c:58:39:fd:cd:27:93:04:
df:a5:2e:0a:6f:24:8f:d4:77:63:fb:a6:9a:46:74:a1:81:f7:
8d:41:06:ef:49:bf:8f:e2:a1:e6:41:40:f8:65:db:14:83:9d:
fe:dc:43:f2:98:91:13:84:13:34:05:3f:d5:87:fe:f0:7f:3c:
39:9c:85:4a:89:0b:9c:a0:09:9c:42:41:8e:38:33:e5:9e:65:
3a:0a:0b:66:b4:f9:c5:9c:0e:2a:09:34:56:a5:10:ea:2c:77:
36:1f:56:5c:bd:a1:40:ba:bf:99:bc:ed:41:46:d4:97:82:36:
af:a2:fa:25:b6:e2:8c:ab:d8:ac:40:dd:29:cb:f3:68:8a:9e:
aa:f1:07:ba:8e:92:ad:3a:ca:24:f5:66:9c:22:be:1c:3d:23:
32:68:6a:38:9b:e9:6c:ba:66:f2:f0:0b:91:8d:ab:30:2a:ef:
98:e1:0e:a3:61:be:2f:3a:b7:4a:ae:61:f3:2c:1b:be:f5:60:
c4:8d:64:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:13:09 2025 by rpki-client