Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/ae5e6c-c70f-40f2-890d-575cf5d335e4/1/bgC7pk9Ra41jNaAc8wS4It7hrtA.mft
File: bgC7pk9Ra41jNaAc8wS4It7hrtA.mft (raw, json)
Hash identifier: 7dr4Qsy+VlF5Wcbz9NoHCGuqMs5UBFFFBy3l2nYQb6c=
Subject key identifier: 64:AA:B9:01:98:B8:9A:62:8D:0D:EA:77:13:6C:4A:CA:62:15:C6:A0
Authority key identifier: 6E:00:BB:A6:4F:51:6B:8D:63:35:A0:1C:F3:04:B8:22:DE:E1:AE:D0
Certificate issuer: /CN=6e00bba64f516b8d6335a01cf304b822dee1aed0
Certificate serial: 01974D448CDAE5C1835CDAB870AC104895F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bgC7pk9Ra41jNaAc8wS4It7hrtA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/ae5e6c-c70f-40f2-890d-575cf5d335e4/1/bgC7pk9Ra41jNaAc8wS4It7hrtA.mft
Manifest number: 157C
Signing time: Sun 08 Jun 2025 02:00:27 +0000
Manifest this update: Sun 08 Jun 2025 02:00:27 +0000
Manifest next update: Mon 09 Jun 2025 02:00:27 +0000
Files and hashes: 1: bgC7pk9Ra41jNaAc8wS4It7hrtA.crl (hash: jikMtLJtAi7bWDbPbKVZM/9WikJU3j+pNchyNsVwhMc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/ae5e6c-c70f-40f2-890d-575cf5d335e4/1/bgC7pk9Ra41jNaAc8wS4It7hrtA.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/ae5e6c-c70f-40f2-890d-575cf5d335e4/1/bgC7pk9Ra41jNaAc8wS4It7hrtA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bgC7pk9Ra41jNaAc8wS4It7hrtA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 02:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:44:8c:da:e5:c1:83:5c:da:b8:70:ac:10:48:95:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e00bba64f516b8d6335a01cf304b822dee1aed0
Validity
Not Before: Jun 8 02:00:27 2025 GMT
Not After : Jun 9 02:00:27 2025 GMT
Subject: CN=64aab90198b89a628d0dea77136c4aca6215c6a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b3:0d:08:9f:8f:12:f9:42:b2:d7:fd:c3:38:
df:49:7c:76:4e:10:e8:b5:b1:0c:19:d3:86:ff:45:
19:5a:af:b3:c3:33:9b:a2:4b:4f:c1:e2:8d:bc:98:
14:67:6f:63:26:05:f4:22:ef:90:09:dc:99:8c:3c:
e7:11:11:66:9a:40:d1:78:61:ba:04:c0:b5:9e:aa:
bf:c9:6a:43:85:17:87:ec:3f:73:ad:ff:3c:f2:04:
b6:6b:f8:f8:17:e1:77:84:a9:16:10:20:32:91:22:
6a:48:33:dd:1e:a4:8e:d7:a7:ff:3b:6d:2b:f8:61:
45:5b:7d:0d:f7:32:f0:bf:d5:51:5e:1e:e9:df:b5:
ac:e1:b7:ed:0b:41:c2:74:89:5b:08:c9:8a:2e:4a:
b8:76:b5:7a:b6:2e:11:c8:30:c2:a7:0f:5a:ff:2c:
89:5f:de:89:5c:ce:33:b5:58:03:df:cc:31:98:b0:
13:8e:c1:6d:df:1d:30:e0:fe:b8:5f:df:2a:8a:01:
bc:7a:44:45:fc:64:ad:55:42:3a:79:de:81:1e:ef:
a1:fc:35:b5:63:8b:bb:d2:7e:3c:b3:e5:26:43:64:
65:20:08:62:c2:76:75:67:88:1c:63:22:8f:06:21:
2f:26:c8:9a:c0:1a:af:10:6e:28:69:51:10:39:a7:
7b:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:AA:B9:01:98:B8:9A:62:8D:0D:EA:77:13:6C:4A:CA:62:15:C6:A0
X509v3 Authority Key Identifier:
keyid:6E:00:BB:A6:4F:51:6B:8D:63:35:A0:1C:F3:04:B8:22:DE:E1:AE:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bgC7pk9Ra41jNaAc8wS4It7hrtA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ae5e6c-c70f-40f2-890d-575cf5d335e4/1/bgC7pk9Ra41jNaAc8wS4It7hrtA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ae5e6c-c70f-40f2-890d-575cf5d335e4/1/bgC7pk9Ra41jNaAc8wS4It7hrtA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:d3:35:70:3d:85:63:fd:d3:bc:87:bd:d1:34:22:4e:d6:a6:
67:3b:3e:7d:2a:3a:71:12:34:ca:0e:bb:2d:e5:2e:30:78:2c:
6c:a6:2a:20:7c:2d:a5:3b:59:31:bc:ba:4f:d0:e4:7c:e1:4e:
57:16:88:15:c5:cf:16:45:a5:94:aa:0f:f3:9a:70:8a:38:80:
b6:fe:a3:74:6d:5e:9b:22:bf:37:b9:dd:00:b3:f4:97:8f:29:
2a:58:0a:e0:15:18:e8:fa:a5:38:90:8f:cd:0a:dc:7f:3d:f7:
1b:dc:d0:3c:da:79:1d:83:49:90:b9:a5:54:ce:9a:e3:3e:e9:
1e:f6:e3:a6:6c:e9:90:22:a1:be:2a:14:f7:e3:71:4f:f6:6a:
09:d5:e7:64:40:d8:1c:f2:0e:6f:5b:fd:80:1e:b9:64:c0:e4:
75:c2:e4:a2:d5:f4:d2:62:9b:87:e6:19:7e:30:17:55:8e:af:
39:52:51:46:4f:89:56:97:8d:4b:19:91:e3:22:fd:98:7d:f1:
c8:a7:d4:ae:94:01:ee:77:e2:6b:a6:f0:07:df:73:43:44:6d:
85:32:f8:2a:71:80:15:b4:a0:ce:74:6c:62:97:1e:b4:3c:9e:
9f:d9:fb:61:65:5b:68:a8:82:96:fe:5b:57:84:c6:3b:1a:09:
b6:17:86:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:22:13 2025 by rpki-client