Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/11a9ba-9d0e-4c44-ada4-4be127fa3118/1/bwyaERer1S7IA2tPN4ZE-nekuKc.mft
File: bwyaERer1S7IA2tPN4ZE-nekuKc.mft (raw, json)
Hash identifier: fTSSXtrVCImwsMiUhLAlTSQjPuyOjuSY4FGqrzAZao4=
Subject key identifier: D1:CF:96:96:BB:8B:0E:8B:F2:DA:F9:9E:53:85:AB:A4:87:CF:DF:16
Authority key identifier: 6F:0C:9A:11:17:AB:D5:2E:C8:03:6B:4F:37:86:44:FA:77:A4:B8:A7
Certificate issuer: /CN=6f0c9a1117abd52ec8036b4f378644fa77a4b8a7
Certificate serial: 019848527D512DF07AD145C1B78D17D2F1CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bwyaERer1S7IA2tPN4ZE-nekuKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/11a9ba-9d0e-4c44-ada4-4be127fa3118/1/bwyaERer1S7IA2tPN4ZE-nekuKc.mft
Manifest number: 06E7
Signing time: Sat 26 Jul 2025 20:00:22 +0000
Manifest this update: Sat 26 Jul 2025 20:00:22 +0000
Manifest next update: Sun 27 Jul 2025 20:00:22 +0000
Files and hashes: 1: 5YbQ1lEYRu1FDVmUe9WtFEdIQq8.roa (hash: LLdAnT3T14ZMA8Ruwq6pBGBMT1LXc953lNErRWyZvjE=)
2: bwyaERer1S7IA2tPN4ZE-nekuKc.crl (hash: kt+DuXjYKRFffG07Do4vEkHJVjsd0EJ2+NhwalVhkvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/11a9ba-9d0e-4c44-ada4-4be127fa3118/1/bwyaERer1S7IA2tPN4ZE-nekuKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/11a9ba-9d0e-4c44-ada4-4be127fa3118/1/bwyaERer1S7IA2tPN4ZE-nekuKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/bwyaERer1S7IA2tPN4ZE-nekuKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:52:7d:51:2d:f0:7a:d1:45:c1:b7:8d:17:d2:f1:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f0c9a1117abd52ec8036b4f378644fa77a4b8a7
Validity
Not Before: Jul 26 20:00:22 2025 GMT
Not After : Jul 27 20:00:22 2025 GMT
Subject: CN=d1cf9696bb8b0e8bf2daf99e5385aba487cfdf16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d5:55:c2:4d:91:f8:70:20:01:57:dc:61:2a:
7d:20:d8:d8:e8:41:00:a3:7a:b6:da:64:5b:7e:ff:
22:2f:27:16:96:51:f0:3f:fb:93:6c:69:b6:e9:47:
4d:c2:85:91:95:db:3f:3d:99:53:a0:b5:63:51:b9:
57:f6:2d:dd:0f:55:f5:60:7b:e4:98:ca:36:8a:52:
ec:4a:80:a2:f6:9f:1a:9e:6e:3e:cb:bd:d7:9e:bd:
bd:c0:93:1f:9b:4c:91:5d:6e:a7:63:10:62:99:4d:
f8:00:ac:27:ca:f1:03:75:fa:1c:66:e1:78:c8:0e:
fa:d7:66:39:79:40:eb:4d:5f:c0:16:18:57:77:f1:
ce:c8:56:cf:35:da:3f:1b:18:0c:3a:fc:29:0a:78:
00:c6:cd:be:b6:72:67:ce:17:4d:d6:0c:29:1a:e1:
3b:a2:3e:02:4f:37:b4:e3:3f:41:a8:a8:ca:58:9f:
f9:e9:f0:8d:4d:20:39:91:fc:cc:2f:3a:be:91:88:
da:9d:5d:c0:fc:3f:45:eb:85:15:13:f6:de:eb:7a:
0b:91:b2:03:b7:4a:bb:5d:c6:b5:bb:77:da:d4:81:
cb:bf:e7:8a:ff:70:2b:c7:d1:a3:6a:9c:b0:0d:11:
ab:7a:33:4b:63:2c:55:db:80:dd:ac:58:4d:77:ae:
55:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:CF:96:96:BB:8B:0E:8B:F2:DA:F9:9E:53:85:AB:A4:87:CF:DF:16
X509v3 Authority Key Identifier:
keyid:6F:0C:9A:11:17:AB:D5:2E:C8:03:6B:4F:37:86:44:FA:77:A4:B8:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bwyaERer1S7IA2tPN4ZE-nekuKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/11a9ba-9d0e-4c44-ada4-4be127fa3118/1/bwyaERer1S7IA2tPN4ZE-nekuKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/11a9ba-9d0e-4c44-ada4-4be127fa3118/1/bwyaERer1S7IA2tPN4ZE-nekuKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:5f:7f:4e:69:2d:3d:f0:04:3b:90:b3:38:93:96:c8:c8:8c:
98:2a:31:4d:24:42:cb:96:8e:3e:19:37:06:6f:1b:89:f6:03:
1e:69:18:f1:18:c9:4a:05:85:7e:45:e9:75:db:dd:50:03:00:
d6:f6:26:ef:69:fd:27:e4:f5:f2:61:ff:cf:62:04:de:49:45:
49:cb:b0:3e:8c:03:05:09:5a:8a:b6:89:12:15:18:ce:a8:77:
bc:d4:96:73:1a:23:ab:27:1b:23:b2:9e:80:15:53:00:4c:26:
73:62:46:e1:63:61:86:7a:69:d3:fa:8c:1e:57:7d:d0:e0:8b:
22:e8:60:88:b8:d6:3a:11:97:6b:2d:b2:02:54:37:f9:f9:e5:
01:ad:6d:57:6e:49:30:44:b0:c3:3c:d9:ce:89:11:9c:68:d1:
9d:38:72:16:f3:5c:70:d7:ba:f6:ac:dc:41:95:fa:51:6d:15:
8e:b2:f5:13:7d:0a:57:cb:28:dd:d8:61:a8:7a:55:6a:af:f0:
36:29:2e:3e:13:d4:df:71:a8:bb:ef:1f:e3:ce:33:ca:26:cb:
98:88:7f:e7:f4:46:5f:f2:61:28:3b:b9:01:f7:d5:22:06:68:
2d:31:97:f4:e4:0d:b7:eb:b4:49:da:f4:f6:1c:8d:a8:61:5d:
ad:d8:e5:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 04:38:30 2025 by rpki-client