Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/245e1a-0612-4596-a95a-9df72530b669/1/bdLO01LwH3613HYZ7XFMa2pceR4.mft
File: bdLO01LwH3613HYZ7XFMa2pceR4.mft (raw, json)
Hash identifier: xWAE9CPh6SOLiX2+rmT1URpEeTWwWQuOzi2y9mZnteA=
Subject key identifier: F4:A2:1E:06:6F:71:8C:79:53:F9:75:59:4E:0D:9D:55:46:2A:69:59
Authority key identifier: 6D:D2:CE:D3:52:F0:1F:7E:B5:DC:76:19:ED:71:4C:6B:6A:5C:79:1E
Certificate issuer: /CN=6dd2ced352f01f7eb5dc7619ed714c6b6a5c791e
Certificate serial: 0197485520944BB4E9B9C82CE8958836E775
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bdLO01LwH3613HYZ7XFMa2pceR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/245e1a-0612-4596-a95a-9df72530b669/1/bdLO01LwH3613HYZ7XFMa2pceR4.mft
Manifest number: 0179
Signing time: Sat 07 Jun 2025 03:00:27 +0000
Manifest this update: Sat 07 Jun 2025 03:00:27 +0000
Manifest next update: Sun 08 Jun 2025 03:00:27 +0000
Files and hashes: 1: bdLO01LwH3613HYZ7XFMa2pceR4.crl (hash: RokTx7UDQWBrWnULW2sF6enKnw6vfOCw3uFLur2zY8g=)
2: ldaG2ZtwFXa0D8MT2zJfF9j3gsg.roa (hash: Iho31engw2p2ICkoCri0OTvpMAFdFfQ9ZJ+brUIBG2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/245e1a-0612-4596-a95a-9df72530b669/1/bdLO01LwH3613HYZ7XFMa2pceR4.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/245e1a-0612-4596-a95a-9df72530b669/1/bdLO01LwH3613HYZ7XFMa2pceR4.mft
rsync://rpki.ripe.net/repository/DEFAULT/bdLO01LwH3613HYZ7XFMa2pceR4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:55:20:94:4b:b4:e9:b9:c8:2c:e8:95:88:36:e7:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dd2ced352f01f7eb5dc7619ed714c6b6a5c791e
Validity
Not Before: Jun 7 03:00:27 2025 GMT
Not After : Jun 8 03:00:27 2025 GMT
Subject: CN=f4a21e066f718c7953f975594e0d9d55462a6959
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:14:d9:9d:5c:bd:75:80:59:c9:ae:1f:77:ae:
ec:90:81:05:3c:e1:46:e4:06:78:b5:c2:97:76:b1:
2b:74:20:29:c7:07:2c:da:4c:d4:b0:89:d9:12:40:
7e:72:b1:31:b3:ad:a7:53:50:e8:8f:dc:48:23:34:
71:21:e3:fa:48:89:01:bc:89:13:ba:34:f0:67:ef:
df:95:67:5c:36:57:37:e1:a4:d2:ff:01:0b:6e:81:
c2:64:2e:be:82:32:d0:61:27:4c:cb:ce:53:cf:4a:
9f:fd:d8:9a:4f:6e:42:45:fc:2d:e7:36:a1:79:57:
b6:55:14:0b:de:dd:8c:18:ce:02:f3:74:83:3a:ea:
df:a3:89:4a:ce:f2:1c:09:01:0f:09:84:74:6e:39:
2f:6c:78:80:4d:1c:57:7b:f0:75:8e:93:d5:d3:4c:
71:ca:c7:63:02:7b:ba:12:e3:0f:41:f0:5b:ad:ce:
32:b8:de:21:bc:93:ef:25:be:0f:4f:bf:58:1a:bc:
18:31:4e:e2:d1:56:2b:e0:15:5f:b4:c5:5c:28:2a:
7c:ab:db:03:5d:72:89:e1:8d:57:8a:7c:9d:7d:e0:
81:0c:b5:96:23:38:b4:dc:54:9b:b1:3c:97:50:d6:
fc:94:87:57:7e:25:eb:2b:00:cb:f0:00:5b:43:b8:
f5:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:A2:1E:06:6F:71:8C:79:53:F9:75:59:4E:0D:9D:55:46:2A:69:59
X509v3 Authority Key Identifier:
keyid:6D:D2:CE:D3:52:F0:1F:7E:B5:DC:76:19:ED:71:4C:6B:6A:5C:79:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bdLO01LwH3613HYZ7XFMa2pceR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/245e1a-0612-4596-a95a-9df72530b669/1/bdLO01LwH3613HYZ7XFMa2pceR4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/245e1a-0612-4596-a95a-9df72530b669/1/bdLO01LwH3613HYZ7XFMa2pceR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:d6:17:1e:c8:67:d9:8a:57:f3:e1:1b:bc:58:ca:09:3f:e8:
0a:f8:52:e7:8c:34:62:54:7d:1c:b4:5e:ff:e1:44:fe:c9:a2:
d9:b7:75:d6:28:68:d3:00:9a:69:e1:5e:84:64:55:a1:b5:09:
81:8f:b6:39:90:5d:92:58:86:dc:02:ba:af:7c:68:79:4e:3f:
96:ba:92:2e:83:3b:03:1d:cb:9f:b6:61:e6:ef:c7:9b:f0:8e:
f5:70:e1:f8:8b:82:3d:ca:ca:0d:9d:5a:dd:42:b4:f7:2c:58:
8a:44:29:19:7b:60:25:6d:29:27:0c:3b:d7:df:f9:f0:3e:45:
eb:ec:90:3c:c6:37:78:bb:5e:0d:38:11:a0:95:99:69:c0:2e:
46:54:f5:33:e8:49:ed:15:2c:87:45:e2:64:d3:9a:25:69:84:
eb:1d:7b:3f:8f:b7:7a:a7:ef:e9:d2:6c:3d:30:67:56:75:6d:
41:54:6b:96:ca:68:94:b2:76:98:ca:da:37:44:64:b6:20:0e:
4b:b2:a1:df:2e:9b:b7:02:42:5b:bc:43:2f:25:db:15:bc:f7:
4b:1c:43:3a:b4:7e:12:d6:77:74:c9:3e:c7:34:77:3c:dd:c2:
3b:85:14:fc:52:c6:f6:40:a8:c2:89:0f:c3:a5:ff:5d:06:69:
b5:5a:b1:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:40:11 2025 by rpki-client