Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/bM82Dfmh9h4jMn2g0sCREuCpvWk.mft
File: bM82Dfmh9h4jMn2g0sCREuCpvWk.mft (raw, json)
Hash identifier: SkO0aSonWvzCzLlUeeAVY4ol0MNjO9zBdQaHZP5foXk=
Subject key identifier: 4D:74:96:81:5E:BC:36:02:60:C6:49:89:CC:9F:09:21:E6:71:FB:1C
Authority key identifier: 6C:CF:36:0D:F9:A1:F6:1E:23:32:7D:A0:D2:C0:91:12:E0:A9:BD:69
Certificate issuer: /CN=6ccf360df9a1f61e23327da0d2c09112e0a9bd69
Certificate serial: 0197469DEE853D7DA8E49B99FB5B2BF2C14E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bM82Dfmh9h4jMn2g0sCREuCpvWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/bM82Dfmh9h4jMn2g0sCREuCpvWk.mft
Manifest number: 14E1
Signing time: Fri 06 Jun 2025 19:00:44 +0000
Manifest this update: Fri 06 Jun 2025 19:00:44 +0000
Manifest next update: Sat 07 Jun 2025 19:00:44 +0000
Files and hashes: 1: 3Q1VmGfeCFKvj2X0IlJ_cfpSuFg.roa (hash: JjwgsPIb16RE+EQ2ebpqagyCholGk7446OO7mOE3TPE=)
2: TiOnGSVAxjnW1xfYOuanwRUmLJM.roa (hash: 3xvtqoDbtk/9ZQerINt7CnIoQUKYTDb5i/O7RCY86lE=)
3: UZv1ymCovb-i08X3fkZv3jT2Y3I.roa (hash: Ngck0j9G5utiQaFVWOCDxHnx1F9yWaCjfOLfVg8Hhxk=)
4: bM82Dfmh9h4jMn2g0sCREuCpvWk.crl (hash: u14LWxMXgQDxjLcgFlYaugzkeCioFyU9eqRGZgKXMyo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/bM82Dfmh9h4jMn2g0sCREuCpvWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/bM82Dfmh9h4jMn2g0sCREuCpvWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/bM82Dfmh9h4jMn2g0sCREuCpvWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:9d:ee:85:3d:7d:a8:e4:9b:99:fb:5b:2b:f2:c1:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ccf360df9a1f61e23327da0d2c09112e0a9bd69
Validity
Not Before: Jun 6 19:00:44 2025 GMT
Not After : Jun 7 19:00:44 2025 GMT
Subject: CN=4d7496815ebc360260c64989cc9f0921e671fb1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:9c:f4:e7:1c:4b:3c:71:8d:99:73:e6:6a:27:
4e:65:e6:a2:9d:3b:3c:eb:f2:78:14:2a:42:bf:52:
b7:4e:90:4e:d8:65:0f:e6:86:18:1c:9c:27:d8:b5:
12:c7:96:55:3e:05:99:89:bb:36:ab:14:a0:7b:bd:
38:82:e0:86:ec:5e:39:d1:21:06:90:1d:9d:21:46:
b7:92:41:80:b8:87:8d:bb:57:af:44:7d:61:66:b5:
ab:9f:58:cc:73:ce:7b:b6:10:c4:23:f3:dd:df:50:
82:15:5b:aa:c4:c6:27:b7:27:65:e4:4d:3d:57:32:
cc:88:70:1d:fa:b2:87:3d:99:89:ee:7d:e0:66:da:
87:23:36:a2:6f:04:7f:e8:ec:a1:a1:87:7b:65:05:
e1:f8:ac:31:c1:54:1c:9e:69:0e:56:c8:44:6a:a5:
51:ce:f5:61:59:37:55:ae:8a:c5:df:cb:2c:8f:8c:
3b:c2:40:d1:d6:52:6b:5b:0c:a3:26:06:ac:e8:7c:
9e:79:e8:21:78:be:4d:d7:d6:99:0e:3c:42:d9:eb:
54:cf:ca:10:4d:78:94:02:4b:6d:51:87:a2:de:4d:
cc:83:ff:39:85:24:37:98:97:70:98:0e:1a:f0:4a:
2a:1e:18:84:a5:15:2b:49:37:3a:63:16:6c:96:b5:
f8:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:74:96:81:5E:BC:36:02:60:C6:49:89:CC:9F:09:21:E6:71:FB:1C
X509v3 Authority Key Identifier:
keyid:6C:CF:36:0D:F9:A1:F6:1E:23:32:7D:A0:D2:C0:91:12:E0:A9:BD:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bM82Dfmh9h4jMn2g0sCREuCpvWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/bM82Dfmh9h4jMn2g0sCREuCpvWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/06ac4f-9833-4e8d-b352-77140d09783c/1/bM82Dfmh9h4jMn2g0sCREuCpvWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:58:e8:3a:9c:81:da:f7:bc:d8:66:cf:ba:28:22:c8:c9:fb:
25:f7:dc:10:6b:d7:82:f6:4a:34:e7:06:6b:73:24:5d:41:a1:
e5:af:9c:4f:c6:8d:31:07:b1:a9:19:9f:7d:24:f9:ad:d3:4a:
d1:dd:3e:56:ca:51:2b:a2:c8:84:e2:b2:ca:1d:de:ea:ce:8d:
16:8d:54:88:d8:84:ca:a2:dc:5f:75:e7:22:0e:54:57:a2:46:
96:81:63:13:c3:b0:c5:3b:65:01:76:14:f6:b6:34:c6:03:e7:
bf:9c:e0:ba:65:20:0f:a4:4b:e2:7a:1d:a9:81:9e:00:ff:24:
c0:ac:7d:5e:0e:fd:7f:e6:b8:bd:07:45:18:9e:8d:5f:ea:28:
a4:3d:b6:97:26:ea:ae:a4:00:97:04:23:b0:2f:85:4a:38:8d:
8c:3c:51:64:d6:ac:24:85:25:d8:ba:2b:bd:19:37:0b:6f:b6:
5b:e8:21:93:fa:65:0d:03:86:e1:5e:64:c0:55:2f:92:18:c2:
50:62:da:cd:f9:d9:e7:37:95:fb:07:d5:1e:e7:78:da:96:39:
39:31:57:44:61:62:0f:67:d8:bd:5d:17:2c:d6:a1:64:0f:d0:
b0:8d:c4:f0:af:a1:03:14:e0:ae:5a:80:db:7f:26:8f:1f:62:
79:6c:c2:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 00:59:05 2025 by rpki-client