Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/c25dc2-f54d-414d-8769-8d65f4ee91df/1/bLu4HYIwad2CTY2Ngsjb-zBduY8.mft
File: bLu4HYIwad2CTY2Ngsjb-zBduY8.mft (raw, json)
Hash identifier: kaiilxqOoyNwnt4HNTMeDnanbXPkiy0IsR4oCFY9VWc=
Subject key identifier: 7B:28:E6:11:D5:E0:74:83:A7:98:00:15:43:F6:EA:5E:62:F4:21:69
Authority key identifier: 6C:BB:B8:1D:82:30:69:DD:82:4D:8D:8D:82:C8:DB:FB:30:5D:B9:8F
Certificate issuer: /CN=6cbbb81d823069dd824d8d8d82c8dbfb305db98f
Certificate serial: 01974B8D843A617EE5B89A66771D2B072ABB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bLu4HYIwad2CTY2Ngsjb-zBduY8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/c25dc2-f54d-414d-8769-8d65f4ee91df/1/bLu4HYIwad2CTY2Ngsjb-zBduY8.mft
Manifest number: 14B4
Signing time: Sat 07 Jun 2025 18:00:54 +0000
Manifest this update: Sat 07 Jun 2025 18:00:54 +0000
Manifest next update: Sun 08 Jun 2025 18:00:54 +0000
Files and hashes: 1: Kzmni7xeA7Gni0kYnHO5daJh5Mk.roa (hash: G+JlA/GfSH/1W28f9m1jif2MBvIydlQBDUO2Og4m/hU=)
2: bLu4HYIwad2CTY2Ngsjb-zBduY8.crl (hash: 6bXiOs+vimpDwACLKrg5kr6hNPCGHfJnkXD6SHAYkL0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/c25dc2-f54d-414d-8769-8d65f4ee91df/1/bLu4HYIwad2CTY2Ngsjb-zBduY8.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/c25dc2-f54d-414d-8769-8d65f4ee91df/1/bLu4HYIwad2CTY2Ngsjb-zBduY8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bLu4HYIwad2CTY2Ngsjb-zBduY8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:8d:84:3a:61:7e:e5:b8:9a:66:77:1d:2b:07:2a:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cbbb81d823069dd824d8d8d82c8dbfb305db98f
Validity
Not Before: Jun 7 18:00:54 2025 GMT
Not After : Jun 8 18:00:54 2025 GMT
Subject: CN=7b28e611d5e07483a798001543f6ea5e62f42169
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:a4:6a:bd:1c:52:55:a8:44:d1:00:b9:b0:82:
0d:38:16:22:d5:74:be:23:6a:ad:9d:0a:58:fd:3f:
5e:19:6c:1e:0e:d5:05:93:ed:a0:c9:b7:59:42:0b:
1e:b8:37:f2:be:72:72:a3:d3:cb:be:e1:d2:58:35:
2f:84:ec:7f:02:ae:46:7f:3c:37:0c:70:49:6b:51:
96:8a:fe:65:6d:0b:81:88:f7:a9:22:03:9e:1e:6d:
5f:8d:6a:76:1c:be:03:43:83:9b:12:70:7a:75:f3:
a0:20:93:6d:32:61:14:d1:ac:1f:1e:d5:d7:eb:d6:
dd:03:43:1a:03:7a:06:94:b4:01:b8:48:9f:e6:42:
49:90:86:48:f0:a4:09:49:ff:df:22:43:41:03:34:
97:fa:b4:52:94:6d:9d:6a:9d:57:94:c6:34:e1:d4:
d3:ad:dd:97:89:ef:a3:83:db:06:7e:ac:8f:8f:33:
8f:27:0d:db:23:71:29:34:4e:bb:56:3d:91:02:f4:
87:77:90:c6:06:0e:bd:48:9e:5d:53:7c:13:fa:b5:
82:47:84:15:9a:1c:5a:ef:0c:25:13:bc:a4:ee:6e:
a9:f5:5c:f3:26:30:5b:11:65:98:a3:51:b7:cc:8c:
91:68:69:ff:a8:d5:67:cc:34:cc:42:c2:f7:ce:95:
30:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:28:E6:11:D5:E0:74:83:A7:98:00:15:43:F6:EA:5E:62:F4:21:69
X509v3 Authority Key Identifier:
keyid:6C:BB:B8:1D:82:30:69:DD:82:4D:8D:8D:82:C8:DB:FB:30:5D:B9:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bLu4HYIwad2CTY2Ngsjb-zBduY8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c25dc2-f54d-414d-8769-8d65f4ee91df/1/bLu4HYIwad2CTY2Ngsjb-zBduY8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c25dc2-f54d-414d-8769-8d65f4ee91df/1/bLu4HYIwad2CTY2Ngsjb-zBduY8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:8a:59:ab:bc:31:be:73:af:7c:fa:a2:de:22:ce:46:a7:58:
22:1d:7b:b8:a5:37:05:f0:01:b3:e5:ec:b7:4f:b5:ac:74:1c:
60:89:a0:30:0b:35:e2:4d:a7:89:9a:77:6c:98:ce:bf:ff:13:
2a:48:30:74:71:f0:7c:7e:ef:be:98:0b:73:ac:7e:2a:b0:85:
8c:87:d5:66:df:53:0f:c1:64:ff:47:e9:dc:16:81:e2:fc:37:
8f:59:33:72:09:14:c0:1f:a6:57:3e:29:33:63:9a:cd:f3:71:
22:fd:1c:70:59:f4:e3:bb:4f:10:bd:39:75:45:84:25:c5:d2:
71:69:3a:24:0d:09:cb:af:ce:95:fd:00:e8:cf:16:23:46:cb:
3e:2c:7a:a3:a8:65:96:a9:33:23:f5:61:c7:5d:5d:d0:f8:41:
f2:f6:c8:f5:e0:ff:f7:b5:17:ad:93:e2:23:a4:46:f2:3d:e3:
70:94:d9:dd:fa:97:d4:fa:f6:4b:ac:c6:e9:3c:81:d6:72:4c:
0e:a0:f3:ab:47:30:9a:6f:57:a5:89:23:5a:58:1d:7c:70:27:
75:5b:8d:b2:fb:c5:95:6b:db:af:78:6a:ec:98:13:b5:c8:7a:
cb:62:6c:63:0e:f9:b8:b6:0d:cd:01:d1:f2:9c:15:96:a0:f0:
f6:7c:b3:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:41:28 2025 by rpki-client