Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/e6a120-41b4-4db4-83b9-eef529a477e7/1/bAhhkss_KPWLIUTd4tkaIxIFb8g.mft
File: bAhhkss_KPWLIUTd4tkaIxIFb8g.mft (raw, json)
Hash identifier: 2DKx+EA3TfngSnFYLWnmynqYvC9F1s8Yw7XaLEkqwN0=
Subject key identifier: A5:FA:96:9A:79:BC:26:B5:C5:A9:A5:B8:52:DA:73:66:87:4A:EA:64
Authority key identifier: 6C:08:61:92:CB:3F:28:F5:8B:21:44:DD:E2:D9:1A:23:12:05:6F:C8
Certificate issuer: /CN=6c086192cb3f28f58b2144dde2d91a2312056fc8
Certificate serial: 0197C8DE64C5E8519508D70812DA78BE8FDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bAhhkss_KPWLIUTd4tkaIxIFb8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/e6a120-41b4-4db4-83b9-eef529a477e7/1/bAhhkss_KPWLIUTd4tkaIxIFb8g.mft
Manifest number: 05E5
Signing time: Wed 02 Jul 2025 02:01:47 +0000
Manifest this update: Wed 02 Jul 2025 02:01:47 +0000
Manifest next update: Thu 03 Jul 2025 02:01:47 +0000
Files and hashes: 1: bAhhkss_KPWLIUTd4tkaIxIFb8g.crl (hash: Zto0xRxSlMFI3if/Nfn6EUrKh2fB5AW7GOqRPFSsrSs=)
2: h0CiyPqTT3nB3mru9Rx5ThXMJsc.roa (hash: gn5UUlC6bwE9RLEUWaV0t2xvepay+0W+QHAMC8Fs/OE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/e6a120-41b4-4db4-83b9-eef529a477e7/1/bAhhkss_KPWLIUTd4tkaIxIFb8g.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/e6a120-41b4-4db4-83b9-eef529a477e7/1/bAhhkss_KPWLIUTd4tkaIxIFb8g.mft
rsync://rpki.ripe.net/repository/DEFAULT/bAhhkss_KPWLIUTd4tkaIxIFb8g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c8:de:64:c5:e8:51:95:08:d7:08:12:da:78:be:8f:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c086192cb3f28f58b2144dde2d91a2312056fc8
Validity
Not Before: Jul 2 02:01:47 2025 GMT
Not After : Jul 3 02:01:47 2025 GMT
Subject: CN=a5fa969a79bc26b5c5a9a5b852da7366874aea64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c7:d6:a9:dd:0b:3e:01:f2:0a:97:d1:5c:3c:
c1:32:32:48:90:42:0e:6d:3d:51:53:18:7f:08:7e:
9c:95:46:e1:9f:ab:da:14:bf:89:84:a3:b6:4f:90:
05:e4:ce:ee:6b:ef:a5:4c:86:40:7d:ba:c6:71:f5:
ab:42:a4:7d:ba:55:f3:4f:cb:db:53:57:c8:d9:59:
d1:0a:00:53:46:22:f9:5a:6d:55:a7:61:5e:00:28:
7b:96:f9:df:bf:13:af:c3:40:82:ca:61:c9:09:b1:
59:f9:f8:27:fd:dd:a5:b5:e5:fe:ef:59:0d:31:88:
00:c1:2b:b1:65:16:a9:3d:02:b4:77:1d:8b:ce:fc:
1a:94:74:04:3b:de:81:e1:88:d8:79:cc:6c:55:0e:
10:11:09:f5:e1:65:0d:00:69:e6:cc:37:b5:27:49:
61:c2:31:92:28:d5:5a:21:f2:8e:b8:36:1e:66:99:
3c:7e:ec:40:0e:71:f3:e0:09:cb:ac:03:fb:33:c1:
9b:36:e9:54:cd:a7:a1:25:32:17:85:d2:c1:ea:a7:
72:aa:4e:a8:b1:4b:d3:8a:70:d9:23:82:03:b6:c9:
67:7e:60:18:7f:42:47:b5:2a:ea:c0:af:d5:7d:36:
72:0d:73:64:a7:fb:e9:ae:ac:7f:4f:ad:d7:f2:7b:
ea:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:FA:96:9A:79:BC:26:B5:C5:A9:A5:B8:52:DA:73:66:87:4A:EA:64
X509v3 Authority Key Identifier:
keyid:6C:08:61:92:CB:3F:28:F5:8B:21:44:DD:E2:D9:1A:23:12:05:6F:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bAhhkss_KPWLIUTd4tkaIxIFb8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/e6a120-41b4-4db4-83b9-eef529a477e7/1/bAhhkss_KPWLIUTd4tkaIxIFb8g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/e6a120-41b4-4db4-83b9-eef529a477e7/1/bAhhkss_KPWLIUTd4tkaIxIFb8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:fc:75:87:93:93:8e:1f:e8:cf:e4:9b:3f:3f:e0:91:5d:f3:
1d:43:ce:f2:e0:c6:29:a3:9f:a0:77:c1:be:5a:9a:65:49:6a:
67:e6:15:a9:10:29:1b:b2:f3:6f:b0:5f:6f:1a:ba:7d:b5:cb:
4d:1a:b3:ee:15:b5:0d:c2:c1:9b:46:f9:21:1d:29:37:d4:a7:
5c:d7:de:78:01:ae:13:fb:26:28:66:07:f9:b7:aa:79:ef:f7:
b0:1c:fd:b2:c1:50:04:d3:b9:69:29:a4:93:a4:de:76:67:f4:
07:50:1e:7d:17:bc:4a:c8:18:13:c7:7f:af:ed:4d:d1:d3:2b:
59:e1:76:57:39:5c:26:fc:43:84:7d:2b:65:98:f0:05:00:0c:
dc:3b:86:02:bf:fc:a3:71:92:2d:dc:05:35:27:a5:69:ca:d9:
ea:62:90:65:f4:c4:71:5f:cd:d8:de:57:7b:fc:48:4e:50:32:
28:f2:9a:ed:51:e6:46:07:4b:ab:c7:3a:1d:a8:ab:06:9e:ea:
07:d1:1d:a0:70:86:41:83:f6:a1:9b:5d:84:f0:c8:2f:43:bd:
b3:b4:7d:6f:c6:3d:c3:59:fd:7a:d5:09:be:6a:68:f2:ea:0f:
c8:91:18:14:31:d0:e8:75:c5:25:b2:3b:0b:a8:3c:ab:f4:88:
32:14:15:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 11:56:59 2025 by rpki-client