Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/bDgMi05V5ZCBr3OqGTXhCgEgV_o.mft
File: bDgMi05V5ZCBr3OqGTXhCgEgV_o.mft (raw, json)
Hash identifier: elX39hDpz0NsujDiAiaANQNS9gt4DEYJDnQs9Yal/fg=
Subject key identifier: F0:46:4B:BA:D1:66:69:7D:81:51:34:CA:95:E8:46:1C:C6:2F:73:95
Authority key identifier: 6C:38:0C:8B:4E:55:E5:90:81:AF:73:AA:19:35:E1:0A:01:20:57:FA
Certificate issuer: /CN=6c380c8b4e55e59081af73aa1935e10a012057fa
Certificate serial: 0197469EE1A49DD49A78197AE5520921DBCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bDgMi05V5ZCBr3OqGTXhCgEgV_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/bDgMi05V5ZCBr3OqGTXhCgEgV_o.mft
Manifest number: 157B
Signing time: Fri 06 Jun 2025 19:01:46 +0000
Manifest this update: Fri 06 Jun 2025 19:01:46 +0000
Manifest next update: Sat 07 Jun 2025 19:01:46 +0000
Files and hashes: 1: G8ZxZv3rAsdyjkZIWbmu2tXV_Og.roa (hash: lGe21WZY7KMyNN8ysWzw0Q97lgbjrid4+uoj3fQOhEo=)
2: bDgMi05V5ZCBr3OqGTXhCgEgV_o.crl (hash: QWOsVH93KHOk9xDE2LyJq/q9EN3WCxUEZ36JaB1e+nY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/bDgMi05V5ZCBr3OqGTXhCgEgV_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/bDgMi05V5ZCBr3OqGTXhCgEgV_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/bDgMi05V5ZCBr3OqGTXhCgEgV_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 19:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:9e:e1:a4:9d:d4:9a:78:19:7a:e5:52:09:21:db:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c380c8b4e55e59081af73aa1935e10a012057fa
Validity
Not Before: Jun 6 19:01:46 2025 GMT
Not After : Jun 7 19:01:46 2025 GMT
Subject: CN=f0464bbad166697d815134ca95e8461cc62f7395
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:10:5f:c4:b8:a3:27:07:f5:a9:ff:b8:f7:d0:
38:90:ff:b5:17:6f:01:f3:0e:22:04:f0:59:19:92:
70:a9:4f:68:65:64:1f:89:20:da:d6:ba:10:2a:68:
ca:3f:e3:04:7d:41:a6:2f:c6:70:ae:a5:63:db:18:
9c:69:50:3d:3d:0b:b6:35:a3:d2:c9:80:47:f6:71:
61:27:21:52:bf:e7:2f:61:cb:38:9a:9d:cd:da:59:
56:4f:7a:96:e3:c7:11:cb:f7:f9:df:12:b4:58:50:
96:d5:4d:fb:cc:8a:ef:9a:ae:b5:d7:a6:d7:4d:e4:
45:cc:20:ff:b6:de:07:48:0a:c5:68:d0:7b:9e:4e:
c1:7e:1d:f6:af:43:6f:16:d1:64:a4:0e:ab:38:68:
7a:6c:ce:80:47:7a:fd:2c:f9:77:c4:58:74:fc:63:
af:51:83:4b:e5:37:6c:07:ef:0d:84:ff:e8:9c:23:
dd:51:28:95:13:e4:cc:7b:58:a4:28:4a:ab:7e:76:
03:7b:fc:5a:5c:6a:40:25:f0:da:ce:f8:30:a6:10:
29:87:d5:d6:57:da:a3:96:df:c9:98:3d:28:ca:3c:
09:0f:a1:59:20:df:3d:05:8a:01:b4:84:b4:0e:2c:
d3:f5:fd:59:5a:22:53:6b:c0:4d:5c:32:5c:a3:be:
71:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:46:4B:BA:D1:66:69:7D:81:51:34:CA:95:E8:46:1C:C6:2F:73:95
X509v3 Authority Key Identifier:
keyid:6C:38:0C:8B:4E:55:E5:90:81:AF:73:AA:19:35:E1:0A:01:20:57:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bDgMi05V5ZCBr3OqGTXhCgEgV_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/bDgMi05V5ZCBr3OqGTXhCgEgV_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/bDgMi05V5ZCBr3OqGTXhCgEgV_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:89:df:dd:82:30:83:c9:9a:54:9e:6f:19:b2:bd:2f:14:25:
75:68:68:9c:b2:a6:3c:1f:e8:2c:98:55:6f:62:9d:21:5c:8e:
04:36:70:04:eb:4b:cc:c4:03:72:ff:84:e2:a6:0e:03:a0:77:
39:f2:b6:cd:66:81:c6:d4:98:1f:11:4d:75:dd:7f:2b:8c:32:
b7:e1:72:57:30:5e:bd:94:88:b0:2e:98:63:0b:0f:cb:99:4d:
9a:ed:74:70:5e:6a:77:e8:54:2b:60:2e:b3:8e:79:8f:fd:b4:
9a:47:4f:91:5a:3b:63:3c:f4:f0:d9:78:53:30:41:a9:37:b2:
95:86:bd:d8:5a:e9:04:5e:56:ad:22:32:50:c3:a9:09:5e:a9:
e9:74:81:5d:a7:f8:76:41:48:e7:c3:22:a7:3f:d9:6b:df:61:
5f:90:4f:a8:40:c8:53:48:81:27:92:67:a8:a4:52:75:7b:85:
ca:e5:2c:e3:00:ed:cc:83:1e:27:fd:48:1a:d4:80:d6:99:0e:
9c:ae:77:e4:b4:63:f5:58:8b:0f:c4:d6:17:22:61:0b:08:42:
ca:ab:ef:6a:cc:7a:0a:60:a2:4c:aa:07:38:63:3e:88:22:e7:
17:a6:5f:e5:c4:ee:c9:9d:ed:b0:cc:40:a0:85:6e:3f:24:19:
22:26:68:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 06:04:40 2025 by rpki-client