Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/bdHcTS63vyo_CNVFdVR3BVFD8XQ.mft
File: bdHcTS63vyo_CNVFdVR3BVFD8XQ.mft (raw, json)
Hash identifier: GR5RId9sYdt9T+wXV013RWgbFqfuf2EZNDc8pHHxP1U=
Subject key identifier: 65:96:F7:F7:93:A4:6C:72:C2:4A:6E:06:52:32:83:FF:63:F2:CF:48
Authority key identifier: 6D:D1:DC:4D:2E:B7:BF:2A:3F:08:D5:45:75:54:77:05:51:43:F1:74
Certificate issuer: /CN=6dd1dc4d2eb7bf2a3f08d545755477055143f174
Certificate serial: 01976E50B424B447C1C7189A304056A5D9D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bdHcTS63vyo_CNVFdVR3BVFD8XQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/bdHcTS63vyo_CNVFdVR3BVFD8XQ.mft
Manifest number: 1592
Signing time: Sat 14 Jun 2025 12:01:12 +0000
Manifest this update: Sat 14 Jun 2025 12:01:12 +0000
Manifest next update: Sun 15 Jun 2025 12:01:12 +0000
Files and hashes: 1: 49pxkgi7itIv6ImUGF743Hog5ps.roa (hash: hT65WPD3rxjKAyyXgkyC1Te/5QcBwu6G6s4Re/Tw2UE=)
2: Jyvq7rcCs6Qlew8Ff4iEMvVHpXo.roa (hash: cAmAOJsrcg5h/lolypAUDsWdoBjnFRvupRZVbDEj0XI=)
3: bdHcTS63vyo_CNVFdVR3BVFD8XQ.crl (hash: xfnXAyj05dDTOiUzaAQhKJ3/f+iB9zsD4DhCMU6DugQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/bdHcTS63vyo_CNVFdVR3BVFD8XQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/bdHcTS63vyo_CNVFdVR3BVFD8XQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/bdHcTS63vyo_CNVFdVR3BVFD8XQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:50:b4:24:b4:47:c1:c7:18:9a:30:40:56:a5:d9:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dd1dc4d2eb7bf2a3f08d545755477055143f174
Validity
Not Before: Jun 14 12:01:12 2025 GMT
Not After : Jun 15 12:01:12 2025 GMT
Subject: CN=6596f7f793a46c72c24a6e06523283ff63f2cf48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:58:41:89:b5:13:b0:d1:de:4b:38:dc:84:b1:
d2:85:29:a1:9a:05:cb:25:32:bb:21:f1:5d:23:98:
2f:46:9c:16:33:55:7c:65:fd:1d:f3:b3:60:6b:76:
7a:d0:f3:bd:94:9a:8a:be:1b:db:f3:f4:aa:99:ab:
51:33:d8:45:60:94:16:86:7e:55:a0:8c:ee:fd:0c:
73:cf:7b:b6:07:da:96:93:b8:a7:da:c3:7d:38:fa:
56:1b:9e:9d:57:74:97:d0:01:09:77:01:13:2d:4b:
e5:98:1e:1d:87:fc:0f:1d:03:64:a1:ce:14:ec:d4:
37:77:ad:1b:72:0f:1c:c2:00:4c:95:02:2d:72:86:
77:4a:cd:93:53:34:95:3e:73:71:49:8c:cd:a8:4f:
da:ad:67:b2:bc:ac:e5:3e:ad:eb:a4:58:97:78:52:
6a:bc:e8:fa:13:1c:48:27:5f:8e:ba:35:fa:aa:e6:
42:10:2d:97:27:ab:96:f7:b9:95:9a:cb:06:13:49:
f7:3d:43:a5:93:a2:f7:60:48:37:f6:46:00:61:ba:
a4:04:d2:24:72:29:0f:16:f5:87:d8:2b:78:85:8a:
20:86:84:0e:37:83:bc:a0:60:69:92:82:2e:f5:9f:
cb:89:69:d7:b1:9d:eb:e5:13:18:a0:0b:87:42:89:
ea:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:96:F7:F7:93:A4:6C:72:C2:4A:6E:06:52:32:83:FF:63:F2:CF:48
X509v3 Authority Key Identifier:
keyid:6D:D1:DC:4D:2E:B7:BF:2A:3F:08:D5:45:75:54:77:05:51:43:F1:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bdHcTS63vyo_CNVFdVR3BVFD8XQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/bdHcTS63vyo_CNVFdVR3BVFD8XQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/bdHcTS63vyo_CNVFdVR3BVFD8XQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:88:12:b7:30:12:64:24:de:64:cd:e9:9f:a7:78:aa:f9:3a:
02:9a:4f:e7:d1:a1:17:03:2c:e5:29:c5:1a:72:90:bd:32:85:
57:a0:f1:d3:32:7a:18:ff:cd:62:4e:a9:59:d8:99:51:de:bc:
0a:7f:bd:3d:ab:d7:3c:fb:26:02:61:f3:fe:51:55:3a:80:b3:
c4:9b:74:64:7a:74:f4:79:cb:11:af:b3:1f:b4:dd:9a:fd:1d:
83:b1:26:ec:dc:aa:f2:fa:86:94:70:2e:60:26:66:1c:80:01:
27:47:3b:f9:f3:33:7a:83:a6:23:87:bb:10:55:b8:a1:c2:20:
22:a1:27:6f:9f:b2:8c:d4:5e:d3:39:c8:64:a1:3b:e5:a0:14:
cc:2c:d9:8c:55:80:83:17:13:77:80:26:7a:3f:cd:d6:97:28:
31:e1:e9:08:64:4f:46:1c:79:90:08:e6:ca:f9:75:16:36:69:
ca:23:fb:67:ea:14:2e:c8:c6:71:08:81:41:68:e3:e6:c4:8d:
a1:73:01:89:70:69:bf:75:8c:e0:f8:e1:43:5b:5e:2f:b3:5e:
d6:d7:db:f9:15:b2:d4:5a:a4:7d:57:89:60:47:d7:97:7b:39:
52:28:80:16:38:d8:bd:1f:d8:f2:81:86:4b:12:db:57:05:b1:
05:ff:b0:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:22:33 2025 by rpki-client