Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/BC2fTWr_ODxZ6d54AtvuAk7oh9w.mft
File: BC2fTWr_ODxZ6d54AtvuAk7oh9w.mft (raw, json)
Hash identifier: NnHfAdHDb5RW18qEzCpzbwAekRIMgr7jzGTbCa+OyS8=
Subject key identifier: 39:F4:81:56:FF:D9:87:D6:61:F1:A5:CC:7D:98:D1:5E:77:B2:31:8F
Authority key identifier: 04:2D:9F:4D:6A:FF:38:3C:59:E9:DE:78:02:DB:EE:02:4E:E8:87:DC
Certificate issuer: /CN=042d9f4d6aff383c59e9de7802dbee024ee887dc
Certificate serial: 01976C61F807BF2EBB2317E7CA173D4D377A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BC2fTWr_ODxZ6d54AtvuAk7oh9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/BC2fTWr_ODxZ6d54AtvuAk7oh9w.mft
Manifest number: 0471
Signing time: Sat 14 Jun 2025 03:00:49 +0000
Manifest this update: Sat 14 Jun 2025 03:00:49 +0000
Manifest next update: Sun 15 Jun 2025 03:00:49 +0000
Files and hashes: 1: 8NoTu3q8IjcyFeSIedZ4Ihj-NDU.roa (hash: /wW2Zq1BGMLL48zxl/CKfKIe0NCGNYrdHYCS8/4pGYw=)
2: BC2fTWr_ODxZ6d54AtvuAk7oh9w.crl (hash: uOEl+jNGQBAJPFlN2goIUo5DyST6yPdWi6xO1TPQdRk=)
3: BXaZelrYFdJvNqOdLiZPisxY7Uk.roa (hash: 67k1me2SgwY24GHhzeZvCPBUVpU7Aig03bpTpS4se2U=)
4: BvrFfgaOvktjClmF1Y8fP67Mecs.roa (hash: PbuxkncSrl/Kd/73WRwH/QoM5pPO6VdbbF0JBm0KcQM=)
5: c4e4vqwgZd2ZJ6wIw-pjuHwTcAg.roa (hash: oVdR7HS3XKDpou60JLgnb0pDBzK522Os/r6Pbt/GzeA=)
6: ckrq-xWy9dmxHUCFMOdOt359xMc.roa (hash: Rrj1A3kTGmZ6GPx6N9soo7FlfXOroReQlh35Wi3wkRU=)
7: xHsH2-pcu2rRd9FcSrlqvXUZKdc.roa (hash: gqOwGQ8lbsGxh3Vbcwpg5cnF6uUZY0zyhOiB5pUPkiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/BC2fTWr_ODxZ6d54AtvuAk7oh9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/BC2fTWr_ODxZ6d54AtvuAk7oh9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/BC2fTWr_ODxZ6d54AtvuAk7oh9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:61:f8:07:bf:2e:bb:23:17:e7:ca:17:3d:4d:37:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=042d9f4d6aff383c59e9de7802dbee024ee887dc
Validity
Not Before: Jun 14 03:00:49 2025 GMT
Not After : Jun 15 03:00:49 2025 GMT
Subject: CN=39f48156ffd987d661f1a5cc7d98d15e77b2318f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:01:49:64:86:3b:17:12:ef:a9:7d:24:17:0f:
41:22:be:e8:e9:7f:6c:c7:27:16:9d:08:17:04:d8:
18:62:e2:4d:5e:58:02:2a:58:9a:e7:ac:65:5d:7a:
60:86:72:f2:68:34:4b:37:da:0c:92:90:22:81:62:
ff:45:72:20:71:e6:f7:f9:42:32:34:6a:d4:c3:66:
3b:92:05:61:d3:be:98:71:76:b2:c1:a1:90:ef:f8:
24:a4:1d:fb:ec:ae:07:4a:50:ea:34:a5:0c:fe:45:
bb:28:dd:6d:a6:b8:fa:7c:9e:0c:28:06:9d:31:91:
94:48:54:03:46:ed:d8:86:91:15:5b:26:af:bb:09:
3b:a5:c8:15:31:e5:47:55:80:10:ef:7b:c4:b1:60:
3c:dd:a4:45:c5:42:7f:1d:42:93:47:f0:88:c9:59:
6d:10:52:91:49:74:17:25:3f:07:aa:27:1f:33:e3:
d7:c5:68:ab:62:80:b0:50:fd:cd:28:0c:7c:38:40:
8e:66:98:9a:92:26:80:c7:08:08:7d:98:84:a4:e2:
05:fe:a0:12:89:f1:d0:6c:8d:c9:bb:65:65:ca:64:
ab:86:65:6b:9c:26:98:ce:81:b9:81:4e:a1:33:b9:
cb:9e:13:5e:6b:42:e1:f0:dd:67:e1:20:f9:15:33:
1e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:F4:81:56:FF:D9:87:D6:61:F1:A5:CC:7D:98:D1:5E:77:B2:31:8F
X509v3 Authority Key Identifier:
keyid:04:2D:9F:4D:6A:FF:38:3C:59:E9:DE:78:02:DB:EE:02:4E:E8:87:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BC2fTWr_ODxZ6d54AtvuAk7oh9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/BC2fTWr_ODxZ6d54AtvuAk7oh9w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c1364a-0501-4faf-bcfa-aae1447603c0/1/BC2fTWr_ODxZ6d54AtvuAk7oh9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:3a:13:fd:46:ad:44:b2:77:1b:95:df:30:4c:6a:c7:2a:1f:
2e:46:10:6f:18:34:c7:df:a2:e8:bb:bb:2d:87:38:53:72:8b:
0b:12:b3:8f:91:db:13:6e:78:aa:38:b9:c7:b7:42:63:a0:fa:
91:18:e1:8c:91:2a:14:77:af:dd:c8:c8:d5:54:6a:95:9b:b1:
0e:d2:86:28:76:0c:be:a5:00:ed:4b:6d:d5:f0:39:94:ac:6c:
12:c2:2d:5e:07:dc:bd:d3:06:d4:7b:59:77:cd:f4:4a:6f:4e:
f1:8a:0b:9b:6a:1e:01:24:7f:c5:ef:3d:95:d0:ec:bb:df:43:
53:0d:65:10:70:29:94:f7:7e:92:fc:98:53:ba:5b:d7:03:46:
7d:cf:b5:7c:80:0c:86:c9:22:80:3b:54:c5:1a:bb:4f:94:bc:
30:ed:90:ca:8c:0a:69:7e:ae:14:4d:0b:8a:7d:d7:95:fa:35:
6e:03:25:e2:ef:fb:8b:4d:80:6c:4e:74:55:0b:f9:e2:73:71:
4d:44:38:21:ef:3a:03:f4:a2:ff:87:86:c0:8e:ff:99:c4:0a:
ba:8d:60:c6:58:e1:fd:20:ea:70:ea:67:52:5a:4b:7d:14:22:
c6:54:b7:5a:9d:78:4e:23:84:f0:ef:3b:63:1b:35:f8:47:ba:
2f:d7:6d:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:28:43 2025 by rpki-client