Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.mft
File: bFN3u52kHKoRdvQyJi3KqZxHb5o.mft (raw, json)
Hash identifier: m3E16G5ihL2plm9TFG84FplSfaPNCowed0k1WyP5h6U=
Subject key identifier: 72:54:6C:4C:7E:65:BA:D8:42:78:A5:98:12:A5:18:D7:8C:C4:0F:DB
Authority key identifier: 6C:53:77:BB:9D:A4:1C:AA:11:76:F4:32:26:2D:CA:A9:9C:47:6F:9A
Certificate issuer: /CN=6c5377bb9da41caa1176f432262dcaa99c476f9a
Certificate serial: 01977188DCDD8EAAAB5275FEA348EFEB2FA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bFN3u52kHKoRdvQyJi3KqZxHb5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.mft
Manifest number: 06FF
Signing time: Sun 15 Jun 2025 03:01:24 +0000
Manifest this update: Sun 15 Jun 2025 03:01:24 +0000
Manifest next update: Mon 16 Jun 2025 03:01:24 +0000
Files and hashes: 1: 02ZPMrkxrv9TSRNG7JSudAlDYd8.roa (hash: 1pjHbb+bmeJiA9CJ5xGCBjxXea42uVA7wH4sLUyonyA=)
2: 3L6JAHHrLKqNS5i1HV40c9xyyEM.roa (hash: qyyZT9D9IGcDrviVnxZxLdBd6LOM1Me+aqwZJ6D1tPM=)
3: bFN3u52kHKoRdvQyJi3KqZxHb5o.crl (hash: rZ/jVdDapKGKAI0IW4RGs4CuGdW7LlKH8ouVdoYnf6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/bFN3u52kHKoRdvQyJi3KqZxHb5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:88:dc:dd:8e:aa:ab:52:75:fe:a3:48:ef:eb:2f:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c5377bb9da41caa1176f432262dcaa99c476f9a
Validity
Not Before: Jun 15 03:01:24 2025 GMT
Not After : Jun 16 03:01:24 2025 GMT
Subject: CN=72546c4c7e65bad84278a59812a518d78cc40fdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:52:91:f0:6a:a8:37:ff:f6:e1:36:a4:d2:76:
93:20:a1:7c:5c:bc:88:ec:94:b0:44:b2:ea:61:76:
9a:b3:a5:62:4c:54:28:b0:0a:8d:7a:4d:d4:df:a5:
76:b0:c3:b9:d4:91:f4:27:3f:f1:25:aa:0a:d1:63:
63:cd:b5:82:e7:38:d1:e2:ff:e3:60:63:fd:98:46:
d0:ba:86:64:b0:ff:ba:c1:ac:27:18:28:99:71:74:
5b:97:5d:dd:08:02:58:ad:8c:7b:79:45:00:72:ca:
f4:5b:c8:e9:2a:a0:39:12:e6:04:30:f5:de:5e:60:
a5:6d:a4:bc:63:30:17:94:36:b3:a3:b0:55:a5:43:
2b:72:5c:c3:2b:3b:f8:57:52:91:52:67:7f:b9:28:
a2:b8:ba:e4:11:f1:8b:ce:f4:94:c6:eb:d3:ed:e7:
71:fc:4c:2d:e4:15:73:92:b0:92:f4:b4:a6:e3:2e:
71:83:8c:28:58:d3:9e:2a:98:02:30:f2:9f:7d:08:
be:94:a5:91:2f:1b:58:84:20:32:48:c7:fe:72:5c:
bc:b1:a0:18:75:cf:af:b2:bc:18:d2:1a:c9:b5:48:
92:25:7d:ca:44:01:09:25:14:47:49:8a:49:ae:36:
49:fb:48:4e:0d:66:dd:36:36:b4:ec:c9:5a:26:41:
9a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:54:6C:4C:7E:65:BA:D8:42:78:A5:98:12:A5:18:D7:8C:C4:0F:DB
X509v3 Authority Key Identifier:
keyid:6C:53:77:BB:9D:A4:1C:AA:11:76:F4:32:26:2D:CA:A9:9C:47:6F:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bFN3u52kHKoRdvQyJi3KqZxHb5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:90:57:26:fc:a0:af:d4:98:a9:a2:11:17:87:1d:c9:e6:c7:
8f:b6:a7:70:cb:53:31:ff:0d:1a:ff:d5:96:c9:b5:39:71:5f:
60:d0:42:e6:0f:23:b8:85:67:87:25:b3:dc:1c:f6:ba:eb:9b:
20:cd:4b:f2:42:fe:2b:29:8f:f1:79:cb:eb:9e:22:c2:78:69:
53:9a:5b:8c:89:2f:6d:8b:3f:2d:3e:4c:d8:00:8f:25:cd:6a:
30:52:53:5a:c4:b1:01:be:55:e3:e3:6c:3f:ed:05:8d:8a:ff:
d4:94:c1:c7:bd:e7:11:e0:c3:54:b8:48:5a:9f:b3:9b:f9:40:
4d:1b:88:af:d4:03:a7:d1:66:40:9c:3b:46:38:43:32:16:0a:
4c:bf:75:91:44:4a:c6:e5:ba:ac:34:29:b1:b0:2b:a1:0b:21:
23:92:1d:4f:9b:53:c6:5b:89:f2:f0:2d:7e:d8:3a:c3:40:7a:
f9:f5:d1:5d:c2:57:a1:1b:c5:d7:84:bd:e0:8b:3b:0d:9b:6f:
b0:da:4b:43:c8:17:d6:93:34:21:e8:c2:2e:15:8e:46:7e:48:
81:bf:3c:1e:da:f2:ad:aa:9f:e2:55:cb:61:7d:c2:d5:f8:32:
ad:88:d6:1b:79:69:e6:95:82:2f:fe:10:c8:7b:c3:f0:5a:be:
3f:f2:bd:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:07:34 2025 by rpki-client