Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.mft
File: v42FRzQuL8ns-t_O8Azyc--dbpA.mft (raw, json)
Hash identifier: 6tBym8Y+nTmcDxRdWncvufc3fl5pVL2bc2NGCYAzjLs=
Subject key identifier: 38:60:28:DA:8A:4F:B3:CE:3D:C8:5F:D1:D3:7F:77:0E:91:B3:9B:C8
Authority key identifier: BF:8D:85:47:34:2E:2F:C9:EC:FA:DF:CE:F0:0C:F2:73:EF:9D:6E:90
Certificate issuer: /CN=bf8d8547342e2fc9ecfadfcef00cf273ef9d6e90
Certificate serial: 01974C9FB47104CA6FD4BE0A7BBA07526844
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v42FRzQuL8ns-t_O8Azyc--dbpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.mft
Manifest number: 02DE
Signing time: Sat 07 Jun 2025 23:00:24 +0000
Manifest this update: Sat 07 Jun 2025 23:00:24 +0000
Manifest next update: Sun 08 Jun 2025 23:00:24 +0000
Files and hashes: 1: fwI8WQwy5fbXMlIKzIdcXaYEMU0.roa (hash: bPDJhxbWV/nawvua5orm+AkfyQvA9xpKaA3uAdqYMPA=)
2: v42FRzQuL8ns-t_O8Azyc--dbpA.crl (hash: 9XTfqLjitU0FnTs5Z/YMmqUweVxt4cF+8QarMZL0g2w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.mft
rsync://rpki.ripe.net/repository/DEFAULT/v42FRzQuL8ns-t_O8Azyc--dbpA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 23:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:9f:b4:71:04:ca:6f:d4:be:0a:7b:ba:07:52:68:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf8d8547342e2fc9ecfadfcef00cf273ef9d6e90
Validity
Not Before: Jun 7 23:00:24 2025 GMT
Not After : Jun 8 23:00:24 2025 GMT
Subject: CN=386028da8a4fb3ce3dc85fd1d37f770e91b39bc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:42:03:15:68:f1:ce:1f:71:ea:87:3c:0e:14:
70:7a:87:c4:c0:dc:d2:b3:24:db:69:23:77:f5:19:
80:a0:8b:92:7e:24:7e:4b:35:f7:f2:a8:53:af:ed:
8e:6b:69:a2:e4:61:ae:29:bb:4d:fd:50:ea:fe:95:
fd:c1:18:c1:46:c9:5b:5a:0b:91:f6:5a:58:5a:96:
c0:d1:b4:67:8d:e5:46:81:1b:86:cc:94:0c:25:7d:
38:aa:e3:6a:4c:84:c7:bb:33:d3:61:db:4e:de:80:
e2:db:e9:1a:f0:43:b9:ca:17:f8:cf:c7:86:14:9d:
33:c0:0d:05:5c:cc:21:5e:52:d1:be:50:36:71:22:
7b:83:ad:36:d6:ac:a0:42:09:57:b2:dd:b2:1a:77:
19:0c:66:18:e9:e1:70:81:f8:ff:37:94:86:50:ea:
d1:6f:0a:39:8d:c3:97:64:de:ad:30:35:4c:78:eb:
07:73:6a:fb:b6:43:af:bd:31:a6:be:90:62:97:b7:
bf:e8:40:8f:5b:01:00:de:86:96:1a:c2:aa:28:92:
e8:51:eb:f7:cf:2c:cd:aa:08:b3:ee:21:e3:f5:b8:
92:93:45:c1:15:9a:37:8d:36:83:79:7e:97:6e:77:
88:cd:b6:0b:10:d1:34:1d:5b:ea:28:43:4b:be:76:
80:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:60:28:DA:8A:4F:B3:CE:3D:C8:5F:D1:D3:7F:77:0E:91:B3:9B:C8
X509v3 Authority Key Identifier:
keyid:BF:8D:85:47:34:2E:2F:C9:EC:FA:DF:CE:F0:0C:F2:73:EF:9D:6E:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v42FRzQuL8ns-t_O8Azyc--dbpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:7a:3f:5d:ad:5b:1f:92:aa:4f:43:2d:de:af:f2:f0:83:16:
6d:89:45:be:e1:4f:ea:ba:15:bb:a3:82:be:ae:60:90:2f:aa:
3a:de:79:a8:8b:73:20:5a:77:35:f9:83:8f:b4:a5:14:a7:14:
8e:87:d0:78:c2:60:02:df:b9:62:ae:af:51:ff:28:4d:93:40:
81:b3:d6:5f:a8:28:e0:84:b7:2b:ab:bf:e4:34:3d:e0:11:1e:
32:f4:01:a6:2f:55:04:4a:4b:e6:fb:78:82:75:27:f7:45:8d:
b1:1d:64:80:61:a0:e5:1b:74:e2:d2:4e:3c:93:08:a9:77:c4:
4c:b3:36:84:34:c9:1c:9c:32:d0:46:fa:d0:23:17:ec:eb:0c:
d0:3d:28:26:3c:cf:3b:36:23:9e:15:b0:da:25:93:ba:b4:bd:
1c:95:c6:22:6d:ec:8c:f0:ee:31:0d:44:1e:bf:11:99:5a:4e:
95:3d:f0:f6:44:c5:89:2a:06:9c:a8:e8:4e:a7:ea:a8:30:c0:
f3:b0:4a:96:ef:8b:1e:c5:8a:86:36:2a:5f:cd:28:81:db:37:
3f:68:d2:4c:0f:e3:0f:fa:c0:44:23:1b:4c:3f:f8:4b:2b:fa:
5e:2b:2f:c9:eb:31:9d:1e:a1:ae:90:54:3c:55:a3:f3:24:13:
3a:ab:11:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:18:43 2025 by rpki-client