Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/896a48-dca4-4d23-8f07-8754a1c9060b/1/b-4n1ZTdsvCcjLWSRYAcmvWjTCI.mft
File: b-4n1ZTdsvCcjLWSRYAcmvWjTCI.mft (raw, json)
Hash identifier: AG+NAT5W6mn3YGCiJ9dBzCnqW6jC6giw8/1rNo3ug6M=
Subject key identifier: 0A:10:A7:53:15:BB:00:61:47:73:77:E0:65:05:38:AB:F7:CB:32:EB
Authority key identifier: 6F:EE:27:D5:94:DD:B2:F0:9C:8C:B5:92:45:80:1C:9A:F5:A3:4C:22
Certificate issuer: /CN=6fee27d594ddb2f09c8cb59245801c9af5a34c22
Certificate serial: 01976D3DDEBEEA617953044B41C62F79D408
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b-4n1ZTdsvCcjLWSRYAcmvWjTCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/896a48-dca4-4d23-8f07-8754a1c9060b/1/b-4n1ZTdsvCcjLWSRYAcmvWjTCI.mft
Manifest number: 1590
Signing time: Sat 14 Jun 2025 07:01:00 +0000
Manifest this update: Sat 14 Jun 2025 07:01:00 +0000
Manifest next update: Sun 15 Jun 2025 07:01:00 +0000
Files and hashes: 1: b-4n1ZTdsvCcjLWSRYAcmvWjTCI.crl (hash: ENwi+WC3C8Kuxt9vX/3j+X+nCIXDRYmRi7gRLrjzXZQ=)
2: pBaxgCqTyeze3hcIp2M83HQrP4U.roa (hash: MsncevRB1zh5gU5+B31LnCwg/AwVLsxlHu2XQLm34Hs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/896a48-dca4-4d23-8f07-8754a1c9060b/1/b-4n1ZTdsvCcjLWSRYAcmvWjTCI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/896a48-dca4-4d23-8f07-8754a1c9060b/1/b-4n1ZTdsvCcjLWSRYAcmvWjTCI.mft
rsync://rpki.ripe.net/repository/DEFAULT/b-4n1ZTdsvCcjLWSRYAcmvWjTCI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3d:de:be:ea:61:79:53:04:4b:41:c6:2f:79:d4:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fee27d594ddb2f09c8cb59245801c9af5a34c22
Validity
Not Before: Jun 14 07:01:00 2025 GMT
Not After : Jun 15 07:01:00 2025 GMT
Subject: CN=0a10a75315bb0061477377e0650538abf7cb32eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:44:26:60:66:ef:b4:05:33:0c:6d:56:89:9a:
c9:dc:38:38:5f:56:b1:ed:00:5a:61:5a:4d:ff:fb:
4e:6e:6f:b2:43:17:8c:34:ee:08:c5:3a:02:b5:e2:
e6:d1:86:bd:48:1f:94:91:71:de:e0:17:8c:95:72:
1a:6a:ec:7f:3c:15:c8:20:08:d3:f2:af:8f:fe:c5:
71:71:8d:b3:a9:b8:83:ac:a5:5c:4d:bc:dd:5c:26:
90:f2:83:d0:0a:94:48:80:28:13:c4:da:8e:37:b2:
00:1b:f2:50:d0:2a:3b:59:ff:72:eb:0d:1c:3b:eb:
7a:1a:88:1a:a1:1a:84:6a:d4:e5:bf:26:15:b3:f9:
6f:05:df:dc:e6:f1:36:12:26:36:f7:18:64:39:0f:
08:0d:62:03:c5:95:f5:9b:9d:f0:52:a4:52:22:a0:
ae:5a:db:5b:18:21:cd:3f:9d:12:e2:93:fb:eb:22:
27:77:d3:1c:56:c1:de:a7:57:9c:a2:ac:72:4a:7b:
4e:5b:8f:a7:84:b9:94:0c:1c:26:dc:c3:20:f4:43:
46:f9:8d:eb:c4:cc:ba:76:f2:24:77:3f:e9:9b:c2:
cb:3f:3a:f1:0e:3e:40:6f:bd:cc:ae:3b:f4:0b:78:
72:fe:d7:85:48:f4:37:71:54:e4:4d:99:60:6c:d9:
f1:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:10:A7:53:15:BB:00:61:47:73:77:E0:65:05:38:AB:F7:CB:32:EB
X509v3 Authority Key Identifier:
keyid:6F:EE:27:D5:94:DD:B2:F0:9C:8C:B5:92:45:80:1C:9A:F5:A3:4C:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b-4n1ZTdsvCcjLWSRYAcmvWjTCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/896a48-dca4-4d23-8f07-8754a1c9060b/1/b-4n1ZTdsvCcjLWSRYAcmvWjTCI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/896a48-dca4-4d23-8f07-8754a1c9060b/1/b-4n1ZTdsvCcjLWSRYAcmvWjTCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:16:ec:51:6d:d4:6a:a1:b5:b1:68:0b:01:52:27:81:0e:46:
26:16:3a:a0:02:e1:53:6a:b2:9b:8c:9d:fe:a1:ac:bf:be:66:
c9:60:bf:f1:63:2d:57:8a:e5:de:d3:20:4e:bc:f7:4d:69:db:
df:1d:6f:e4:31:6e:66:30:41:34:31:19:f8:dd:c8:7a:48:01:
73:a5:14:2f:73:c4:9c:a6:26:83:03:12:a3:a9:8a:3d:91:16:
f3:7e:5b:70:36:2c:6e:b9:15:48:ae:17:bc:9f:88:2b:b6:01:
e7:90:8f:9c:1f:63:e3:68:2d:0b:16:3e:1d:4e:72:ed:53:fc:
1b:61:32:cf:5d:1e:ec:ac:99:a8:7f:08:64:16:1e:cf:21:04:
fc:fc:90:25:bb:d9:ad:69:d7:f8:90:db:64:ea:6e:af:9e:59:
d4:b8:34:a7:cf:2a:c0:0f:d8:ef:52:fc:53:03:a7:6d:93:f7:
5f:1e:aa:b7:94:12:a2:bf:fe:04:01:f9:a7:11:33:a9:cf:af:
a1:3f:3e:ce:0b:14:80:90:5e:75:62:2a:80:ae:46:60:84:93:
5f:32:34:0e:a3:36:25:d1:95:e5:33:86:54:5e:22:e5:c4:51:
64:b2:07:2b:70:86:c9:88:30:4b:45:ef:e6:7d:97:51:41:d8:
23:a1:01:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:05:18 2025 by rpki-client