Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/bKlE6qnH9tRXQG8ULG4oz1rMasg.mft
File: bKlE6qnH9tRXQG8ULG4oz1rMasg.mft (raw, json)
Hash identifier: iRWOfzMuLC+oAsEkZLZvIgrguLveaHUBfKS5jxxf8R0=
Subject key identifier: 56:8B:A1:3C:5F:E6:F0:6C:64:51:B2:9E:B8:EC:59:F2:89:65:5B:15
Authority key identifier: 6C:A9:44:EA:A9:C7:F6:D4:57:40:6F:14:2C:6E:28:CF:5A:CC:6A:C8
Certificate issuer: /CN=6ca944eaa9c7f6d457406f142c6e28cf5acc6ac8
Certificate serial: 01974AE8D969245C5128667E08D924A0DDF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bKlE6qnH9tRXQG8ULG4oz1rMasg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/bKlE6qnH9tRXQG8ULG4oz1rMasg.mft
Manifest number: 0B47
Signing time: Sat 07 Jun 2025 15:01:03 +0000
Manifest this update: Sat 07 Jun 2025 15:01:03 +0000
Manifest next update: Sun 08 Jun 2025 15:01:03 +0000
Files and hashes: 1: U_3B74ujhAJrCWsRNX6BqqwgnVw.roa (hash: t7MohkwWoi0EopfC0Tnorl6v62Y4aRFAg2yz8Q6y9x8=)
2: bKlE6qnH9tRXQG8ULG4oz1rMasg.crl (hash: yrRRyuIff7wPJUUCatJ53V6giTGHzozAzs3efFMxjOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/bKlE6qnH9tRXQG8ULG4oz1rMasg.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/bKlE6qnH9tRXQG8ULG4oz1rMasg.mft
rsync://rpki.ripe.net/repository/DEFAULT/bKlE6qnH9tRXQG8ULG4oz1rMasg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 15:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e8:d9:69:24:5c:51:28:66:7e:08:d9:24:a0:dd:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ca944eaa9c7f6d457406f142c6e28cf5acc6ac8
Validity
Not Before: Jun 7 15:01:03 2025 GMT
Not After : Jun 8 15:01:03 2025 GMT
Subject: CN=568ba13c5fe6f06c6451b29eb8ec59f289655b15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:96:24:22:4c:6b:9d:fa:41:f0:68:58:75:a3:
41:a3:2c:88:80:dc:69:af:a2:85:c0:47:56:4d:a1:
aa:a6:fc:8f:98:fe:1a:a2:bc:24:78:02:ce:14:76:
7d:04:99:9f:77:f6:5b:63:ab:5d:36:6d:b5:99:2b:
73:67:57:b1:af:95:cf:f7:71:b5:80:09:f8:a5:7b:
67:b0:e8:15:5f:bc:65:9f:9c:6d:b0:c4:4d:c7:10:
04:28:1a:76:3d:19:57:4f:b3:64:98:de:86:72:ac:
dc:e2:f5:04:5b:65:4e:f1:2c:60:6b:b1:1b:f0:9e:
b3:c4:60:c1:0c:a4:06:e0:66:f4:a1:a0:cd:4b:2a:
58:22:e4:93:f1:73:43:75:66:1b:c6:e7:43:92:6d:
32:7e:72:90:23:6f:c6:11:7b:94:b4:82:33:55:4f:
23:eb:54:a3:cc:0b:c3:58:06:92:82:26:bc:da:3b:
ee:ea:99:84:5a:f1:80:b5:2e:26:59:c2:90:8a:8f:
82:d3:2d:42:5a:65:7b:f1:dc:d1:06:35:19:a4:b9:
d8:c5:2b:06:ca:ed:9e:55:8d:14:6e:46:00:87:b7:
23:73:59:64:5e:c3:ae:79:68:86:e3:32:e2:fa:0b:
b7:af:e6:32:81:1c:12:20:43:d8:f3:2c:71:d8:1c:
3b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:8B:A1:3C:5F:E6:F0:6C:64:51:B2:9E:B8:EC:59:F2:89:65:5B:15
X509v3 Authority Key Identifier:
keyid:6C:A9:44:EA:A9:C7:F6:D4:57:40:6F:14:2C:6E:28:CF:5A:CC:6A:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bKlE6qnH9tRXQG8ULG4oz1rMasg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/bKlE6qnH9tRXQG8ULG4oz1rMasg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/bKlE6qnH9tRXQG8ULG4oz1rMasg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:8a:fc:6f:81:8d:88:fb:5c:1b:01:d6:bd:80:7b:49:0a:c8:
46:c0:53:a6:85:7c:15:a9:8b:65:f2:d3:7a:79:5d:16:0f:db:
2e:58:99:f6:98:dd:7e:68:c4:84:40:75:eb:3b:47:7f:93:15:
74:0d:af:7d:7f:32:0d:be:e3:a3:46:72:cc:59:b1:2d:f9:41:
33:51:52:e5:39:f1:9b:b1:bb:0b:68:40:0a:75:41:06:7e:6c:
72:15:7c:0f:79:14:8e:87:b9:73:9c:0a:2e:5e:13:ab:bd:dc:
1e:14:b7:03:6c:46:1f:3b:aa:fd:0f:42:7c:b8:dc:a7:03:ea:
b1:32:db:da:3c:3d:6c:a5:19:a8:51:c9:c1:07:e8:ef:05:5a:
24:2e:3f:60:f8:3e:cc:6e:03:33:a6:bc:4f:8d:3d:f8:42:fd:
55:84:45:15:e9:18:bb:8f:b0:55:23:fd:94:ba:f1:0e:cd:a9:
a8:81:49:8d:d9:7e:ea:13:e5:75:8b:9e:cd:36:40:fc:05:c4:
e9:37:84:bd:69:2f:e1:38:bb:7f:50:4f:84:a7:20:c8:16:99:
00:32:e0:8c:6c:15:5e:8e:0a:4b:65:a5:89:de:4c:2a:88:76:
5c:95:13:26:49:85:8c:a4:e5:2c:e5:d4:0a:50:73:1d:a0:ef:
f1:12:94:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:26:21 2025 by rpki-client