Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/119c70-3950-4636-8395-2fc486015564/1/bHDW7sK1YF-LG-bOhDlfJGxC3xw.mft
File: bHDW7sK1YF-LG-bOhDlfJGxC3xw.mft (raw, json)
Hash identifier: HnCVpeLV5UhXm8mgw+Cgu34Wq7BhKtsiQpScgeLUxy8=
Subject key identifier: 90:F9:EB:CB:CB:6F:95:4F:1B:16:AF:35:B1:F9:42:F1:59:C0:14:78
Authority key identifier: 6C:70:D6:EE:C2:B5:60:5F:8B:1B:E6:CE:84:39:5F:24:6C:42:DF:1C
Certificate issuer: /CN=6c70d6eec2b5605f8b1be6ce84395f246c42df1c
Certificate serial: 01978E12774B5689E60C2B98A901C9C2A8CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bHDW7sK1YF-LG-bOhDlfJGxC3xw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/119c70-3950-4636-8395-2fc486015564/1/bHDW7sK1YF-LG-bOhDlfJGxC3xw.mft
Manifest number: 03BF
Signing time: Fri 20 Jun 2025 16:01:04 +0000
Manifest this update: Fri 20 Jun 2025 16:01:04 +0000
Manifest next update: Sat 21 Jun 2025 16:01:04 +0000
Files and hashes: 1: bHDW7sK1YF-LG-bOhDlfJGxC3xw.crl (hash: G4LUBgJnb76VxtU3XPP7t+O1ogSJkn5ljsCw4qEOtq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/119c70-3950-4636-8395-2fc486015564/1/bHDW7sK1YF-LG-bOhDlfJGxC3xw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/119c70-3950-4636-8395-2fc486015564/1/bHDW7sK1YF-LG-bOhDlfJGxC3xw.mft
rsync://rpki.ripe.net/repository/DEFAULT/bHDW7sK1YF-LG-bOhDlfJGxC3xw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Jun 2025 13:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:8e:12:77:4b:56:89:e6:0c:2b:98:a9:01:c9:c2:a8:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c70d6eec2b5605f8b1be6ce84395f246c42df1c
Validity
Not Before: Jun 20 16:01:04 2025 GMT
Not After : Jun 21 16:01:04 2025 GMT
Subject: CN=90f9ebcbcb6f954f1b16af35b1f942f159c01478
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fe:7d:18:21:cd:33:56:fa:fd:94:8a:be:7b:d0:
03:ec:cf:e6:6a:47:cc:7c:aa:92:89:fc:18:6b:20:
c1:8b:58:77:e0:c2:62:04:e6:9c:b1:74:72:ba:0e:
09:67:0f:91:7e:61:21:c8:e3:1f:cd:2b:5e:a0:ef:
46:93:95:7e:bf:24:d2:d6:48:6a:b8:39:0e:bf:d9:
9f:72:c8:f8:49:03:d3:98:9a:42:c0:13:c2:3f:7d:
8f:18:3d:f4:28:fc:76:e8:43:38:0a:a3:ee:db:ef:
83:9b:5c:4e:b8:2e:8d:1c:72:de:32:48:fa:b2:cc:
ff:45:95:56:a9:61:c8:17:d7:58:af:5f:18:9b:82:
df:d3:76:99:ff:0d:37:e7:e9:1b:20:fa:39:86:a0:
b7:b0:9c:6e:8d:c9:e4:af:91:0e:b0:93:ad:dc:f8:
05:84:b0:4b:fa:fb:37:ea:5b:f5:e3:4e:09:b4:0d:
c3:3b:d3:eb:a9:a5:bf:09:a5:45:fe:6f:23:23:22:
59:b4:76:87:d3:4b:05:51:d4:20:94:7f:3b:40:55:
ba:3e:75:ed:51:61:1e:75:e7:7e:aa:cd:96:39:de:
98:ac:73:ad:fb:6d:9f:a8:87:6c:91:67:7e:e9:59:
72:5f:34:09:30:04:fb:f4:1b:f6:78:9f:41:77:a4:
6f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:F9:EB:CB:CB:6F:95:4F:1B:16:AF:35:B1:F9:42:F1:59:C0:14:78
X509v3 Authority Key Identifier:
keyid:6C:70:D6:EE:C2:B5:60:5F:8B:1B:E6:CE:84:39:5F:24:6C:42:DF:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bHDW7sK1YF-LG-bOhDlfJGxC3xw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/119c70-3950-4636-8395-2fc486015564/1/bHDW7sK1YF-LG-bOhDlfJGxC3xw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/119c70-3950-4636-8395-2fc486015564/1/bHDW7sK1YF-LG-bOhDlfJGxC3xw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:be:98:a3:3f:4e:3e:21:38:61:27:15:ed:62:77:bc:e7:69:
0d:53:f0:b0:41:6e:4f:fa:61:f9:3b:6b:19:b1:4d:2b:c2:ce:
0c:98:24:dd:5d:f7:05:cf:d6:21:27:20:0e:e0:b5:bf:25:7d:
68:3b:cc:e0:c0:83:7b:51:18:af:8c:ca:39:06:13:3d:9a:88:
ae:74:67:c3:78:96:97:fd:60:eb:4c:c9:7c:17:44:1c:95:1f:
80:33:c5:fd:38:ee:e6:68:4e:93:90:b6:8d:72:82:5c:91:4e:
78:4a:3c:24:05:ed:89:73:47:7f:f6:52:73:58:ae:93:a4:a9:
4c:67:67:8e:73:cf:c1:e1:a9:c3:f6:26:43:03:d9:a4:4f:dd:
9e:81:cf:8c:5f:e8:34:ce:3f:01:ff:94:da:fc:ae:d9:8b:5a:
c4:bf:29:34:38:0a:5c:77:7d:3b:14:04:4d:3a:70:19:ab:6f:
5e:1d:b8:08:f6:54:19:04:5e:c1:f1:80:c7:94:a5:06:d8:b5:
21:8f:93:63:7d:d1:ad:be:f5:68:9c:e1:c3:4d:e4:80:bc:ec:
15:a0:0f:ff:d2:10:49:97:15:b9:36:cd:cb:1a:00:68:5e:8a:
4d:f2:f8:c2:33:af:e3:02:29:34:e1:97:29:6a:38:91:7b:be:
f6:52:57:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 18:08:42 2025 by rpki-client