Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/11a9ba-9d0e-4c44-ada4-4be127fa3118/1/bwyaERer1S7IA2tPN4ZE-nekuKc.mft
File: bwyaERer1S7IA2tPN4ZE-nekuKc.mft (raw, json)
Hash identifier: /iSeecuwM7iAB4CEg3pcbuuPBxMuk++ZbuEYDwQTwtw=
Subject key identifier: 4C:F7:24:84:5C:B6:10:BA:D6:75:36:D7:F9:E7:31:7F:23:43:15:3B
Authority key identifier: 6F:0C:9A:11:17:AB:D5:2E:C8:03:6B:4F:37:86:44:FA:77:A4:B8:A7
Certificate issuer: /CN=6f0c9a1117abd52ec8036b4f378644fa77a4b8a7
Certificate serial: 01976C2AAA3EB45AAAC8ED3C988AF56794E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bwyaERer1S7IA2tPN4ZE-nekuKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/11a9ba-9d0e-4c44-ada4-4be127fa3118/1/bwyaERer1S7IA2tPN4ZE-nekuKc.mft
Manifest number: 0675
Signing time: Sat 14 Jun 2025 02:00:24 +0000
Manifest this update: Sat 14 Jun 2025 02:00:24 +0000
Manifest next update: Sun 15 Jun 2025 02:00:24 +0000
Files and hashes: 1: 5YbQ1lEYRu1FDVmUe9WtFEdIQq8.roa (hash: LLdAnT3T14ZMA8Ruwq6pBGBMT1LXc953lNErRWyZvjE=)
2: bwyaERer1S7IA2tPN4ZE-nekuKc.crl (hash: sYjO9bLNyeI92HwERMP7yPOpih97OFgqCOUW45pNa7Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/11a9ba-9d0e-4c44-ada4-4be127fa3118/1/bwyaERer1S7IA2tPN4ZE-nekuKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/11a9ba-9d0e-4c44-ada4-4be127fa3118/1/bwyaERer1S7IA2tPN4ZE-nekuKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/bwyaERer1S7IA2tPN4ZE-nekuKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2a:aa:3e:b4:5a:aa:c8:ed:3c:98:8a:f5:67:94:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f0c9a1117abd52ec8036b4f378644fa77a4b8a7
Validity
Not Before: Jun 14 02:00:24 2025 GMT
Not After : Jun 15 02:00:24 2025 GMT
Subject: CN=4cf724845cb610bad67536d7f9e7317f2343153b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:02:b1:db:c0:99:3a:df:d1:33:11:54:2e:c5:
10:c9:2e:f7:46:7e:c2:bc:d8:24:0e:db:53:9a:bb:
d8:09:c3:64:e1:c4:ad:b9:58:ac:d7:ea:53:a6:30:
25:f4:9c:29:2b:07:d7:ff:5f:7a:6e:fa:56:55:23:
7e:f9:29:53:09:a6:e3:55:b0:52:b2:c7:af:da:40:
3a:1b:28:23:68:ce:27:d1:0e:a8:3c:71:b0:97:cb:
b1:7c:71:8b:28:da:ba:19:ed:12:52:34:d8:cc:45:
88:b1:d7:c7:0a:ff:4c:d7:70:4b:3f:da:72:42:ec:
78:45:fd:7d:bd:a2:e4:60:0d:93:ba:99:65:d3:77:
11:61:c1:6e:9e:79:f9:38:9b:a9:ff:3a:c8:fa:e6:
eb:3c:33:49:0f:17:06:9c:db:16:22:a3:db:8c:57:
79:20:82:1b:81:27:be:67:95:9b:6d:e6:ac:d8:e0:
ca:fb:51:9f:25:9d:df:4d:df:42:e0:e7:8d:b6:fa:
79:22:b0:36:fd:b3:1d:f1:1f:36:99:8c:b8:0e:0c:
36:20:2e:fb:44:ab:c9:e7:f1:74:85:b7:69:df:2e:
a8:9a:f7:9e:4d:a3:c8:c9:b7:54:ba:f8:53:7c:7f:
5f:84:72:95:be:32:55:7c:66:93:34:cb:ed:78:44:
0f:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:F7:24:84:5C:B6:10:BA:D6:75:36:D7:F9:E7:31:7F:23:43:15:3B
X509v3 Authority Key Identifier:
keyid:6F:0C:9A:11:17:AB:D5:2E:C8:03:6B:4F:37:86:44:FA:77:A4:B8:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bwyaERer1S7IA2tPN4ZE-nekuKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/11a9ba-9d0e-4c44-ada4-4be127fa3118/1/bwyaERer1S7IA2tPN4ZE-nekuKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/11a9ba-9d0e-4c44-ada4-4be127fa3118/1/bwyaERer1S7IA2tPN4ZE-nekuKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:c2:cb:52:fd:34:6b:8f:59:19:d6:9f:95:2d:b2:01:98:40:
87:97:e1:77:d3:25:3a:92:c4:31:ab:5e:1c:3f:81:9d:4b:2c:
81:ac:d7:ae:21:9b:f9:a4:83:86:bc:7c:0a:93:64:97:7d:54:
46:30:ee:3c:3d:7c:94:fa:fc:9c:fa:0c:99:35:06:9e:61:f8:
41:1d:4a:04:1a:cb:3f:07:8a:6e:df:5a:6f:45:a9:f4:ff:64:
2b:20:b4:69:3b:cc:ba:f2:e0:d8:66:f9:4d:b2:fc:30:1a:cd:
94:d2:17:5e:55:c9:5a:cf:ef:aa:5e:7f:76:e7:b1:de:21:40:
6b:74:97:49:24:6c:bf:35:90:05:7d:98:7a:91:ac:6a:99:9e:
bb:16:88:ec:98:7c:e1:db:7b:bd:03:02:96:ee:e2:bc:65:fa:
a3:e2:b7:51:75:31:69:c1:f7:34:ea:7d:0b:ef:4f:83:33:ce:
da:d8:1e:a5:48:9c:76:8f:7f:0e:7f:c8:99:39:89:37:d9:58:
5a:1b:db:63:ea:6c:db:1a:ce:4f:4d:fb:32:dd:7a:7b:d5:75:
62:33:9d:35:73:49:c1:5d:c5:82:3b:bc:28:ad:91:b5:09:4b:
e6:f3:38:b2:a9:9b:96:d7:04:e0:a4:3b:86:24:26:b0:9c:a2:
3a:a6:0d:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:17:20 2025 by rpki-client