Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/b7ca89-70f2-408f-a4e4-b4a0cb8ed821/1/bWUK8XJES1IRanpn10qsffilXhw.mft
File: bWUK8XJES1IRanpn10qsffilXhw.mft (raw, json)
Hash identifier: l8MVDfvlQzo0fBc/WEa2AanRGOYclYQe4MZmSik0JbY=
Subject key identifier: F3:D1:AF:AC:1B:77:0A:07:F0:82:4D:DB:21:C4:84:C2:22:6E:0B:72
Authority key identifier: 6D:65:0A:F1:72:44:4B:52:11:6A:7A:67:D7:4A:AC:7D:F8:A5:5E:1C
Certificate issuer: /CN=6d650af172444b52116a7a67d74aac7df8a55e1c
Certificate serial: 01974A0D0E86EFB1FFE38E9CAA3C19FC79BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWUK8XJES1IRanpn10qsffilXhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/b7ca89-70f2-408f-a4e4-b4a0cb8ed821/1/bWUK8XJES1IRanpn10qsffilXhw.mft
Manifest number: 067D
Signing time: Sat 07 Jun 2025 11:00:58 +0000
Manifest this update: Sat 07 Jun 2025 11:00:58 +0000
Manifest next update: Sun 08 Jun 2025 11:00:58 +0000
Files and hashes: 1: Eo0dId6A79FMWJgsJrbvuL3-EFE.roa (hash: 681u60p0nhE1DcYKUWV+uIEbDRMQt7MvDh5nM8HZoDY=)
2: JA7bmNFaXPZ3zOhIhSoSK6cX0GM.roa (hash: /9NIaaC/nQfKu4JBvIQ0FkNL7E03OA0xPdL0pUFpcGQ=)
3: bWUK8XJES1IRanpn10qsffilXhw.crl (hash: 6KPniOn6Rd++uM9rYH4igb8uVrZPV6jRuN5/gKDfgFs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/b7ca89-70f2-408f-a4e4-b4a0cb8ed821/1/bWUK8XJES1IRanpn10qsffilXhw.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/b7ca89-70f2-408f-a4e4-b4a0cb8ed821/1/bWUK8XJES1IRanpn10qsffilXhw.mft
rsync://rpki.ripe.net/repository/DEFAULT/bWUK8XJES1IRanpn10qsffilXhw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:0d:0e:86:ef:b1:ff:e3:8e:9c:aa:3c:19:fc:79:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d650af172444b52116a7a67d74aac7df8a55e1c
Validity
Not Before: Jun 7 11:00:58 2025 GMT
Not After : Jun 8 11:00:58 2025 GMT
Subject: CN=f3d1afac1b770a07f0824ddb21c484c2226e0b72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:36:b4:72:d3:14:b8:4d:e6:f2:d7:2b:7f:24:
f6:e4:b2:48:d4:d1:ca:0e:6c:ae:d0:f2:1e:ff:23:
72:93:49:e5:d9:23:8f:88:98:8e:52:40:53:10:81:
49:c1:67:0c:df:d7:79:bd:2d:35:cb:2c:d0:dd:e7:
14:d6:aa:a4:74:ab:2e:7d:72:55:60:b1:27:29:82:
b7:76:7f:a0:26:a0:75:72:3b:3c:08:ab:31:18:79:
e9:a7:94:31:44:59:6f:7a:1b:8c:7a:61:13:cc:7f:
e6:37:f7:d8:7c:37:77:7e:a2:49:c6:c4:77:2f:5f:
6b:e2:7c:65:ee:a8:fd:fc:25:ca:42:2b:e0:34:90:
5e:f9:93:23:c1:80:c2:fe:35:3c:ff:1e:69:0e:74:
7c:72:a0:52:ac:cf:d7:25:21:2f:e7:b9:ae:7d:8d:
a3:81:f6:34:a3:d3:40:f4:1d:fb:8f:b6:7d:0d:56:
2d:68:3a:30:9e:7e:5c:6b:1b:c2:61:1d:27:b3:68:
e7:02:ea:16:e6:26:62:ae:14:34:f1:1d:78:5f:86:
ef:9c:49:03:59:01:9a:73:07:e8:7f:02:be:70:c4:
c6:55:e3:8b:af:88:75:91:ba:62:93:6e:ab:12:c8:
d9:53:ec:40:c3:32:b6:95:17:da:d6:61:4f:2d:a3:
dd:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:D1:AF:AC:1B:77:0A:07:F0:82:4D:DB:21:C4:84:C2:22:6E:0B:72
X509v3 Authority Key Identifier:
keyid:6D:65:0A:F1:72:44:4B:52:11:6A:7A:67:D7:4A:AC:7D:F8:A5:5E:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWUK8XJES1IRanpn10qsffilXhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/b7ca89-70f2-408f-a4e4-b4a0cb8ed821/1/bWUK8XJES1IRanpn10qsffilXhw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/b7ca89-70f2-408f-a4e4-b4a0cb8ed821/1/bWUK8XJES1IRanpn10qsffilXhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:e2:dd:0c:a5:7a:de:cd:8f:ac:65:54:ef:b9:9a:e6:c2:23:
a4:24:fb:a3:ac:d5:bb:02:2b:36:df:d8:3c:35:b3:ca:6b:c4:
21:bc:e3:0b:e2:cc:54:56:8d:ef:92:1b:fb:59:b0:e8:7a:24:
61:fa:72:70:b7:54:3a:69:cc:23:37:de:6b:cd:90:0f:87:99:
b3:61:2d:33:b7:63:4d:a6:59:0a:7d:a7:f4:6c:92:96:29:28:
31:4f:e8:9f:06:26:36:a8:28:d6:d5:02:98:6f:db:78:4c:90:
01:7b:26:43:60:b7:93:44:37:a5:c0:bb:4e:b5:31:d4:28:d2:
a7:55:f0:cf:5d:68:de:90:1f:f7:b0:d5:63:e3:bb:6e:bc:92:
f6:6a:31:4c:33:48:f1:9e:c2:a7:e2:ff:9f:ed:da:1b:d1:84:
a7:18:8b:04:5f:8f:1f:fa:57:6c:91:49:d9:15:a3:e2:de:64:
83:ec:cd:25:9d:f4:74:3e:d4:96:92:b0:21:f5:56:d8:31:77:
bd:70:14:92:58:97:66:1f:25:8f:65:5a:36:c9:99:59:72:ce:
53:55:8e:74:36:69:14:1d:5d:c9:d9:ff:6e:b6:6d:5d:ed:98:
a7:c1:f8:af:43:75:1c:34:39:85:98:64:3e:35:53:57:f1:bd:
5c:b3:70:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:16:44 2025 by rpki-client