Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/06803f-dd2e-4fd1-9a7f-bbf826aa67c0/1/bnED-oWs7FfEZIWRzD5Bzff-45c.mft
File: bnED-oWs7FfEZIWRzD5Bzff-45c.mft (raw, json)
Hash identifier: jDbr6P0XuRhjT5jXnufr75wfHq9igabKI6t0bCQL2yQ=
Subject key identifier: 9B:21:2D:32:FC:12:4B:7D:4B:FA:97:CF:26:C1:B3:FD:EA:47:85:C4
Authority key identifier: 6E:71:03:FA:85:AC:EC:57:C4:64:85:91:CC:3E:41:CD:F7:FE:E3:97
Certificate issuer: /CN=6e7103fa85acec57c4648591cc3e41cdf7fee397
Certificate serial: 01976EBE1344ED62A886C1E7591078955590
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bnED-oWs7FfEZIWRzD5Bzff-45c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/06803f-dd2e-4fd1-9a7f-bbf826aa67c0/1/bnED-oWs7FfEZIWRzD5Bzff-45c.mft
Manifest number: 0D44
Signing time: Sat 14 Jun 2025 14:00:39 +0000
Manifest this update: Sat 14 Jun 2025 14:00:39 +0000
Manifest next update: Sun 15 Jun 2025 14:00:39 +0000
Files and hashes: 1: Q75VcKpJN1_xp-QM_NM8W4Tp-04.roa (hash: Wt2+g51E+wWSkSdRcanf7BFfmX/qewZOJ77oXxIMQTM=)
2: bnED-oWs7FfEZIWRzD5Bzff-45c.crl (hash: buYjyTmnKvFOGXM8HL4Zwai493ur0VTXijZ2kktGKfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/06803f-dd2e-4fd1-9a7f-bbf826aa67c0/1/bnED-oWs7FfEZIWRzD5Bzff-45c.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/06803f-dd2e-4fd1-9a7f-bbf826aa67c0/1/bnED-oWs7FfEZIWRzD5Bzff-45c.mft
rsync://rpki.ripe.net/repository/DEFAULT/bnED-oWs7FfEZIWRzD5Bzff-45c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 14:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:be:13:44:ed:62:a8:86:c1:e7:59:10:78:95:55:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e7103fa85acec57c4648591cc3e41cdf7fee397
Validity
Not Before: Jun 14 14:00:39 2025 GMT
Not After : Jun 15 14:00:39 2025 GMT
Subject: CN=9b212d32fc124b7d4bfa97cf26c1b3fdea4785c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ff:70:1a:31:c7:2c:d6:79:ae:0c:dd:94:eb:
06:50:33:7f:f5:c2:70:51:ef:40:18:be:b2:55:9d:
d6:65:28:b2:18:a2:92:3b:90:9f:f6:f9:d6:01:99:
c1:84:07:67:1e:8f:d1:db:76:9c:80:3e:1d:06:6d:
dd:f6:c8:e2:6d:b9:e4:9d:8d:c6:dc:f5:f2:16:a7:
f4:c6:2e:2c:a2:f3:c5:ea:ad:1e:05:a4:e9:48:84:
86:a3:b5:e4:5f:39:d0:96:e7:1e:96:30:29:34:c4:
d8:9d:40:0b:56:aa:8e:b4:f2:2d:56:1d:2c:33:7e:
75:e6:a2:2e:2e:a2:51:68:66:7b:29:13:b5:05:09:
4a:c3:6f:5d:a3:a5:de:ca:0b:52:0b:78:03:a1:e4:
31:35:d9:e5:32:16:18:5b:24:27:58:0a:b4:48:b8:
d8:78:c7:84:bf:ce:61:b8:1e:27:3c:77:58:d8:a1:
70:07:98:98:cd:96:49:89:5c:b1:ce:58:d9:1a:00:
f9:7d:53:3a:94:e4:f7:d5:7a:90:95:98:4d:1f:e7:
cd:94:c4:3a:81:90:33:01:74:9c:aa:68:88:ef:50:
59:ed:27:ba:53:bd:13:9b:b0:98:f9:91:a1:33:00:
0a:42:93:bb:14:24:61:03:56:c3:0f:e4:f0:e6:49:
5b:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:21:2D:32:FC:12:4B:7D:4B:FA:97:CF:26:C1:B3:FD:EA:47:85:C4
X509v3 Authority Key Identifier:
keyid:6E:71:03:FA:85:AC:EC:57:C4:64:85:91:CC:3E:41:CD:F7:FE:E3:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bnED-oWs7FfEZIWRzD5Bzff-45c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/06803f-dd2e-4fd1-9a7f-bbf826aa67c0/1/bnED-oWs7FfEZIWRzD5Bzff-45c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/06803f-dd2e-4fd1-9a7f-bbf826aa67c0/1/bnED-oWs7FfEZIWRzD5Bzff-45c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:88:da:cd:3e:71:40:8f:81:ae:1b:1a:53:55:a8:17:64:0e:
24:5d:e7:35:d0:c2:71:fd:ae:aa:bf:43:83:8e:4e:1d:78:38:
12:ae:6d:77:d1:48:69:1c:23:40:32:d0:a3:7d:d4:bd:b6:68:
fb:06:ba:c0:52:c2:2a:1f:07:06:b3:86:21:ed:f0:b9:aa:bf:
cf:a0:35:ba:cb:af:fa:72:73:1b:ae:fd:2f:24:9b:1a:71:2f:
4d:6f:cf:ca:0e:16:f5:9e:4b:fc:7d:e6:77:db:a0:22:83:e4:
b0:aa:6e:c2:98:36:f9:98:d2:75:ad:97:94:7c:61:b5:28:d4:
2d:8e:bc:31:ce:c4:d2:b9:88:1e:5d:11:23:c5:46:c9:05:aa:
a9:10:7d:f7:24:42:15:e6:29:e2:74:a2:3e:fd:87:1d:ec:12:
52:b5:5f:76:8e:e9:96:c5:22:00:79:58:97:2e:e5:59:97:04:
6c:ce:39:53:ff:68:4f:3b:db:dc:54:1a:4b:d7:59:b1:85:73:
12:ce:91:49:32:4f:10:35:5a:15:56:66:98:a0:42:3d:8a:d8:
d9:1a:9a:0a:a0:66:a7:37:72:0b:96:0a:53:9f:12:08:65:b4:
20:db:9c:24:67:7e:a6:15:4b:36:40:c2:d4:89:22:63:f7:50:
29:28:34:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:44:35 2025 by rpki-client