Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.mft
File: bYAjo4F9UCFR-9BIRKfDw17pm0M.mft (raw, json)
Hash identifier: s2sZA32+2k5x7raBo+20NLMIX9/JmHAB4/ejBz4qTKk=
Subject key identifier: 08:DE:8D:FF:CC:5D:6D:2E:54:67:7C:39:1E:A7:83:F7:35:57:F1:C2
Authority key identifier: 6D:80:23:A3:81:7D:50:21:51:FB:D0:48:44:A7:C3:C3:5E:E9:9B:43
Certificate issuer: /CN=6d8023a3817d502151fbd04844a7c3c35ee99b43
Certificate serial: 01976D74A5C10EBF699FD6FEB3CE7AF3490C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bYAjo4F9UCFR-9BIRKfDw17pm0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.mft
Manifest number: 10EE
Signing time: Sat 14 Jun 2025 08:00:50 +0000
Manifest this update: Sat 14 Jun 2025 08:00:50 +0000
Manifest next update: Sun 15 Jun 2025 08:00:50 +0000
Files and hashes: 1: B2A3BpQa6eyFwAFfUgOMe5Hgczc.roa (hash: AKXMLNeE6uazxzvUS4fTVViZNPYvrBWGv5qRJTtd/Lc=)
2: bYAjo4F9UCFR-9BIRKfDw17pm0M.crl (hash: +WkF8dvsnWzuO3HMrljHgtD9HoRKW0HqiPIOlrfZUko=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/bYAjo4F9UCFR-9BIRKfDw17pm0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:74:a5:c1:0e:bf:69:9f:d6:fe:b3:ce:7a:f3:49:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d8023a3817d502151fbd04844a7c3c35ee99b43
Validity
Not Before: Jun 14 08:00:50 2025 GMT
Not After : Jun 15 08:00:50 2025 GMT
Subject: CN=08de8dffcc5d6d2e54677c391ea783f73557f1c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:bd:5b:c0:f6:0e:89:8d:02:6e:b8:d5:3d:28:
a1:45:3f:ed:86:88:6d:af:48:d7:7d:52:eb:d0:02:
57:75:21:7f:cb:e1:e8:14:ee:24:19:00:c0:ea:68:
84:4f:9d:ba:70:2d:ce:38:28:f8:d3:19:4f:24:1e:
c2:63:73:4a:19:6a:c8:bb:8e:c5:94:19:73:45:92:
71:91:56:ca:79:55:0c:fb:af:49:84:a8:e4:95:eb:
ed:a5:cc:09:1e:d1:53:98:eb:c9:23:be:24:8e:b8:
92:3d:a3:f5:9e:e4:77:13:e0:ec:c1:8d:f6:65:08:
33:30:b7:5e:eb:d5:bb:6e:98:99:5d:b9:03:10:a2:
43:2a:f5:91:d7:5f:73:e6:42:02:25:10:08:4d:60:
df:96:e3:ce:20:13:c8:9e:7b:37:88:52:81:69:08:
ce:85:98:2d:1b:a2:2e:0d:d0:c8:75:67:e5:4a:6a:
52:07:2b:1a:77:57:9b:9a:23:71:d4:a6:98:d9:7a:
7c:00:eb:e3:a1:47:39:ad:11:3b:79:27:9f:ad:d5:
cb:ba:e4:39:70:cb:d1:52:00:25:e0:84:55:25:c8:
72:36:e0:74:7d:29:01:66:52:85:f9:c5:b0:93:91:
bc:d5:7e:2d:01:36:dc:80:28:92:0c:d4:3b:66:8a:
93:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:DE:8D:FF:CC:5D:6D:2E:54:67:7C:39:1E:A7:83:F7:35:57:F1:C2
X509v3 Authority Key Identifier:
keyid:6D:80:23:A3:81:7D:50:21:51:FB:D0:48:44:A7:C3:C3:5E:E9:9B:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bYAjo4F9UCFR-9BIRKfDw17pm0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/4d9424-06e8-4bc6-b5ea-b50944913abf/1/bYAjo4F9UCFR-9BIRKfDw17pm0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:86:05:12:4e:ba:5a:c3:55:fb:36:37:07:9b:6f:86:74:1e:
45:57:94:af:6d:57:42:ad:56:00:cb:56:48:0e:03:c6:dc:28:
8b:c6:59:c2:bc:b8:8d:72:08:22:7d:04:da:38:8e:4f:26:bd:
d3:66:50:5e:ca:e5:eb:a2:43:37:44:40:27:23:ee:94:a7:98:
c0:db:61:a8:6c:72:e0:7a:2b:63:d7:35:83:b3:f3:b9:6c:4c:
f7:c7:d2:e6:0f:f5:db:58:49:26:e9:b4:44:64:97:75:20:4d:
7b:7d:16:62:21:81:ed:9a:d9:23:27:9e:2d:d1:15:24:2e:1a:
f6:25:14:e0:25:76:4c:ba:23:67:07:54:22:b6:0c:70:11:88:
1b:60:85:20:89:b0:f9:a0:9f:ed:e4:3f:4f:ba:1c:d0:3e:c2:
52:67:8e:18:c8:ef:21:ba:f1:3a:4b:2f:1c:6a:29:1c:02:05:
c5:37:97:20:d6:51:7d:5b:da:ed:28:4d:39:ce:9f:15:cd:b8:
71:11:c4:0c:ac:6f:a7:fa:49:47:84:ad:32:3a:f9:fa:7f:19:
8c:44:70:00:de:55:a6:75:17:02:d9:8d:b3:60:05:1d:7d:e1:
74:09:5a:57:bb:16:28:f4:f9:a7:01:fd:2a:de:db:73:a7:39:
0f:9e:7e:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:07:33 2025 by rpki-client