Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a2c386-d5e9-4ad9-938a-0d1d174c4351/1/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.mft
File: bBp2F5Xw9mv_JHi0aM3g2FHtGIc.mft (raw, json)
Hash identifier: hVfMRuZ9A/IuQXU/cjgc6OiCpf2MkYY51XlcvVVnctA=
Subject key identifier: 97:16:B2:8E:A3:83:B4:18:D8:B5:82:F7:25:F7:76:CA:8E:2E:00:92
Authority key identifier: 6C:1A:76:17:95:F0:F6:6B:FF:24:78:B4:68:CD:E0:D8:51:ED:18:87
Certificate issuer: /CN=6c1a761795f0f66bff2478b468cde0d851ed1887
Certificate serial: 0197488BF67C77F597FD53F6BE6D485DF301
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a2c386-d5e9-4ad9-938a-0d1d174c4351/1/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.mft
Manifest number: 0B84
Signing time: Sat 07 Jun 2025 04:00:21 +0000
Manifest this update: Sat 07 Jun 2025 04:00:21 +0000
Manifest next update: Sun 08 Jun 2025 04:00:21 +0000
Files and hashes: 1: 2yP7wLJMuWi-DdvVYt0iPnrDkx4.roa (hash: tlC/Cdti9DOTrW2vJ3/LMhMeuxhFOtOxFl2p6304PGs=)
2: bBp2F5Xw9mv_JHi0aM3g2FHtGIc.crl (hash: zqFmY07FLVuR2KN3coJTszX9XitrEbht3S/Iry7sM8E=)
3: yizlH9bVBZ4r4iRvvbJ2VP3ozzg.roa (hash: r5Y34WQoYI5TwsCESbJ739CvzI3jr7yM4zMajr00BD4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/a2c386-d5e9-4ad9-938a-0d1d174c4351/1/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/a2c386-d5e9-4ad9-938a-0d1d174c4351/1/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8b:f6:7c:77:f5:97:fd:53:f6:be:6d:48:5d:f3:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c1a761795f0f66bff2478b468cde0d851ed1887
Validity
Not Before: Jun 7 04:00:21 2025 GMT
Not After : Jun 8 04:00:21 2025 GMT
Subject: CN=9716b28ea383b418d8b582f725f776ca8e2e0092
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e0:08:ed:fd:e1:bf:ab:69:77:cf:a7:c4:0a:
35:68:7b:e4:d4:80:56:49:6f:9d:9d:30:de:8a:7b:
3e:db:17:ce:07:fe:20:0d:df:c2:f1:43:c8:d5:4b:
96:4b:a2:2b:b6:bf:8e:b8:ae:9f:91:a4:c9:bf:92:
88:4f:6b:c2:d3:12:c1:e4:f9:5e:5d:c4:c2:9a:ad:
f0:04:e3:a4:6a:de:63:c8:0c:43:16:c4:e2:76:e7:
d5:a9:bf:23:13:38:88:ee:3b:7f:29:9b:bc:a4:51:
e6:65:38:01:47:32:fb:0e:21:96:e2:9a:8a:da:41:
cf:0a:49:75:6f:33:ce:7d:8f:c4:3c:43:03:5c:36:
a2:0a:d1:87:6e:7d:a1:b9:34:a8:f5:21:4a:0a:14:
10:53:97:a6:f7:ee:f5:97:0e:b3:56:91:4d:56:f8:
dc:e3:ad:99:7e:ea:aa:d7:f4:14:61:ee:37:28:5b:
22:bf:cd:52:48:4d:25:2c:df:bc:2a:2e:70:bb:db:
44:fa:c8:5e:26:d2:3d:fe:eb:c0:ac:57:22:77:78:
a3:55:e4:96:4d:65:5e:fa:04:ca:08:d3:48:28:a8:
aa:0a:ef:6a:0e:f5:e8:32:64:a1:da:45:2f:ce:69:
c7:6b:77:29:ad:10:b7:55:2b:cc:3f:87:4a:09:f5:
fd:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:16:B2:8E:A3:83:B4:18:D8:B5:82:F7:25:F7:76:CA:8E:2E:00:92
X509v3 Authority Key Identifier:
keyid:6C:1A:76:17:95:F0:F6:6B:FF:24:78:B4:68:CD:E0:D8:51:ED:18:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a2c386-d5e9-4ad9-938a-0d1d174c4351/1/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a2c386-d5e9-4ad9-938a-0d1d174c4351/1/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:b0:0f:5c:ba:c0:30:be:d0:a2:6b:f5:1f:1a:3c:d8:91:47:
2c:ec:85:8e:ad:9b:d9:42:84:d8:96:c6:01:bb:4c:a5:09:bd:
d9:04:b5:1f:26:49:89:ec:3b:5a:dc:ee:f3:63:23:92:23:32:
d8:1a:21:cc:cb:f5:f4:cb:81:d4:fe:7e:ba:55:ea:e4:85:69:
76:49:0c:b6:26:60:65:86:69:61:b1:1c:9a:1a:a4:a1:5f:1b:
45:d1:70:43:78:42:4e:4e:bc:23:a1:22:1f:79:b8:6b:b3:b7:
28:72:22:89:9f:0c:9a:56:f6:06:b1:f0:1c:f5:f2:b6:0f:10:
0f:5c:32:13:bb:67:06:ed:9f:a9:21:e1:ae:3c:47:52:1e:7a:
ae:25:09:90:74:23:b4:de:f7:31:85:7d:8c:c0:d3:f2:6b:60:
fb:26:53:6d:69:e0:dd:b8:a4:c3:35:31:98:32:1c:27:cf:e2:
61:ba:86:c0:9c:d5:c0:9f:46:5c:3b:62:39:9b:46:eb:4c:20:
67:b5:a0:56:8a:2a:22:8e:05:fb:38:67:1b:e3:c7:f2:61:78:
de:f2:7e:28:3a:08:2b:7d:bc:10:3d:70:ce:98:03:a4:fd:dc:
84:e2:11:10:c2:63:78:0b:49:52:10:61:ec:77:d6:b3:c5:67:
d9:e6:77:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 10:47:10 2025 by rpki-client