Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/589eca-3f19-4e23-a3fb-3303f71622f9/1/bkBn13v-qZ3yXOXgipIT0RKAFM8.mft
File: bkBn13v-qZ3yXOXgipIT0RKAFM8.mft (raw, json)
Hash identifier: jdRQbllSnfpf6j3MNWI5SrF5URVY99rSwYoZoRIFzpE=
Subject key identifier: AF:C2:12:16:7B:38:46:1B:3C:93:F2:6C:0E:50:5D:F4:54:94:66:BB
Authority key identifier: 6E:40:67:D7:7B:FE:A9:9D:F2:5C:E5:E0:8A:92:13:D1:12:80:14:CF
Certificate issuer: /CN=6e4067d77bfea99df25ce5e08a9213d1128014cf
Certificate serial: 019749D5C62A1AEC709F4488360B462ADCC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bkBn13v-qZ3yXOXgipIT0RKAFM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/589eca-3f19-4e23-a3fb-3303f71622f9/1/bkBn13v-qZ3yXOXgipIT0RKAFM8.mft
Manifest number: 1583
Signing time: Sat 07 Jun 2025 10:00:36 +0000
Manifest this update: Sat 07 Jun 2025 10:00:36 +0000
Manifest next update: Sun 08 Jun 2025 10:00:36 +0000
Files and hashes: 1: adNDLvUmYkNZRHIO-8EvQkOny3U.roa (hash: JFJ+lodVDeHLySNvitcsYBxq8cfuImJHPxEA0H+DjjY=)
2: bkBn13v-qZ3yXOXgipIT0RKAFM8.crl (hash: Dk3AmDHeIQWORD8MK1H+kOzSOxFTw9vASIAtZQbAJHE=)
3: iktdBTw9X8o6AOOEkLAyuZNK_gg.roa (hash: 2nzjnmBtk5vklJiWyvmO30xEFTmYF5gvtQ11fyrTZUE=)
4: mQ9zePbKKPrER63rktmN5-Z8AoQ.roa (hash: qfFxiv4hVcYLNON7vIi9UIknKo4icjwq21EoSvpzScg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/589eca-3f19-4e23-a3fb-3303f71622f9/1/bkBn13v-qZ3yXOXgipIT0RKAFM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/589eca-3f19-4e23-a3fb-3303f71622f9/1/bkBn13v-qZ3yXOXgipIT0RKAFM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bkBn13v-qZ3yXOXgipIT0RKAFM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d5:c6:2a:1a:ec:70:9f:44:88:36:0b:46:2a:dc:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e4067d77bfea99df25ce5e08a9213d1128014cf
Validity
Not Before: Jun 7 10:00:36 2025 GMT
Not After : Jun 8 10:00:36 2025 GMT
Subject: CN=afc212167b38461b3c93f26c0e505df4549466bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:58:28:37:5c:97:72:d6:1b:54:57:14:2c:f7:
21:7d:03:72:36:3a:a9:24:40:85:b2:61:87:00:d3:
f5:45:6a:85:90:2f:02:5f:62:24:7b:de:57:6e:90:
98:67:35:65:36:7e:8b:85:1a:8a:6e:bc:f2:d2:31:
dd:66:63:ad:bd:bd:f9:94:9e:e8:6c:89:1e:93:0f:
9a:6a:8a:86:46:6b:da:dc:b9:ec:e8:b3:2a:93:81:
bc:18:e3:af:99:fb:c4:02:a7:05:fa:30:90:74:32:
b9:8b:03:a0:63:db:73:7d:52:66:9c:dc:2d:c8:56:
ed:57:fe:50:90:a8:cb:37:3e:03:3a:7e:5b:74:5d:
a8:f7:f4:01:b4:21:d1:64:a2:40:40:8d:95:32:d1:
21:51:65:63:7b:3a:3e:85:65:46:10:74:0b:65:aa:
32:09:63:a1:26:34:ab:af:33:32:5e:83:6a:f6:13:
1b:2d:aa:16:d9:df:2b:06:82:26:34:f2:df:3e:43:
31:2b:7c:58:dc:4a:32:68:35:c0:7b:79:4a:d0:74:
a9:3e:22:57:d7:e6:32:74:35:34:e6:18:9d:55:b4:
ff:7b:89:9a:15:bf:8e:0c:f0:80:e4:56:aa:a1:9f:
6c:bf:21:5b:ae:b4:a7:0a:94:25:ab:91:40:5c:9a:
15:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:C2:12:16:7B:38:46:1B:3C:93:F2:6C:0E:50:5D:F4:54:94:66:BB
X509v3 Authority Key Identifier:
keyid:6E:40:67:D7:7B:FE:A9:9D:F2:5C:E5:E0:8A:92:13:D1:12:80:14:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bkBn13v-qZ3yXOXgipIT0RKAFM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/589eca-3f19-4e23-a3fb-3303f71622f9/1/bkBn13v-qZ3yXOXgipIT0RKAFM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/589eca-3f19-4e23-a3fb-3303f71622f9/1/bkBn13v-qZ3yXOXgipIT0RKAFM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:a1:f2:3a:d0:3a:37:cc:72:8f:74:13:38:c9:f1:b1:f1:f5:
b6:24:97:bd:db:e8:e3:3b:56:b9:81:bf:4f:3c:14:10:e4:81:
8f:7a:5c:83:1b:ec:61:66:73:80:da:df:5e:47:07:20:2f:a8:
06:ae:af:f5:a6:65:07:c0:03:33:15:0f:09:05:ca:dd:8e:65:
51:87:21:0d:66:67:3d:7e:41:66:98:c3:bd:c5:7f:c9:54:78:
7d:88:0b:f1:80:82:87:4f:7f:b5:eb:ee:fe:0f:88:87:ba:2b:
a1:4e:a0:28:f6:d2:10:2a:9f:f2:12:7d:b9:06:6c:55:65:81:
08:33:44:93:72:84:93:41:8f:27:af:a3:e3:b9:30:11:5a:20:
30:92:c5:10:11:2e:d6:f4:76:00:a9:bb:1c:bb:cb:fb:66:e1:
fb:a8:f4:17:f7:16:5c:a2:35:d8:68:4e:d3:df:b3:82:98:d5:
b8:24:14:d0:d5:7a:c8:4d:25:d0:fc:c1:2a:69:1e:a9:72:32:
98:9d:ac:c4:dc:47:b9:ca:d2:48:40:e4:8d:19:98:e3:94:67:
cf:78:7a:bc:23:24:cb:a1:3b:9c:bf:b1:16:1f:ad:a0:03:18:
7b:d7:33:33:ac:3b:89:96:49:0e:33:dc:67:44:d6:1f:f1:75:
c7:46:e7:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:39:27 2025 by rpki-client