Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/46c7e6-4006-40f0-adaa-b4192ac638c9/1/CkKubpYYDwO3ym2XQnUW5MB_bis.mft
File: CkKubpYYDwO3ym2XQnUW5MB_bis.mft (raw, json)
Hash identifier: 6iMY1DnSarB7qmRxEmL9Ga5Pj3HrN3mr9kTwWY4LiZg=
Subject key identifier: A9:E7:E7:C2:60:45:27:35:1D:E9:B7:CE:B6:2F:17:57:3A:9E:5C:2A
Authority key identifier: 0A:42:AE:6E:96:18:0F:03:B7:CA:6D:97:42:75:16:E4:C0:7F:6E:2B
Certificate issuer: /CN=0a42ae6e96180f03b7ca6d97427516e4c07f6e2b
Certificate serial: 01974931096991F553378D223883DF60C377
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CkKubpYYDwO3ym2XQnUW5MB_bis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/46c7e6-4006-40f0-adaa-b4192ac638c9/1/CkKubpYYDwO3ym2XQnUW5MB_bis.mft
Manifest number: 141B
Signing time: Sat 07 Jun 2025 07:00:39 +0000
Manifest this update: Sat 07 Jun 2025 07:00:39 +0000
Manifest next update: Sun 08 Jun 2025 07:00:39 +0000
Files and hashes: 1: CkKubpYYDwO3ym2XQnUW5MB_bis.crl (hash: y7q0qsnq10+BpZ6MsC0QVYeizx+7m2wrf6SFQegP+/g=)
2: OH2h9N_hyzRLLEO1xxz2pS01OI8.roa (hash: KX0d4zyKelEiSPA5pJcqywoIBRSpP8vuqYcvjW39t40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/46c7e6-4006-40f0-adaa-b4192ac638c9/1/CkKubpYYDwO3ym2XQnUW5MB_bis.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/46c7e6-4006-40f0-adaa-b4192ac638c9/1/CkKubpYYDwO3ym2XQnUW5MB_bis.mft
rsync://rpki.ripe.net/repository/DEFAULT/CkKubpYYDwO3ym2XQnUW5MB_bis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:31:09:69:91:f5:53:37:8d:22:38:83:df:60:c3:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a42ae6e96180f03b7ca6d97427516e4c07f6e2b
Validity
Not Before: Jun 7 07:00:39 2025 GMT
Not After : Jun 8 07:00:39 2025 GMT
Subject: CN=a9e7e7c2604527351de9b7ceb62f17573a9e5c2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:44:d4:d3:ef:42:a1:de:da:1e:26:a9:44:12:
cb:1c:68:f6:9a:10:e0:58:52:30:35:2b:94:e8:01:
b3:ba:f4:52:b7:22:dd:07:29:8f:9d:3a:8e:8b:38:
e2:0d:a5:19:04:bd:8e:e1:46:17:93:09:7a:00:e3:
3b:8a:30:38:b9:42:17:f2:1d:d5:1c:e8:b2:c6:fd:
ae:c0:8f:ca:6c:d4:8d:75:c5:57:68:7c:2e:fb:0a:
60:ed:88:bd:31:98:72:92:15:30:9f:14:d4:87:a7:
48:18:b3:b1:7e:76:bf:d0:83:b2:d1:9e:3c:53:ef:
bf:61:dc:b3:ec:6d:d0:47:0e:29:f9:77:f6:a7:d5:
59:09:2c:ed:23:91:23:e1:f6:45:bd:d0:8b:37:11:
15:c5:7b:23:7d:97:ee:2b:93:a6:1b:79:2f:27:7f:
c4:1d:df:06:07:ee:79:ae:8d:c5:79:bd:61:1d:c8:
7c:c0:c6:c1:d2:63:d9:82:07:cf:eb:9f:14:98:82:
75:8d:e2:e0:1e:32:3a:27:68:ba:80:e6:5f:d4:09:
17:8a:4b:12:48:bc:34:bf:61:72:15:89:0b:74:ea:
a2:79:fd:cb:20:5b:2e:6d:5f:26:f3:b0:f4:ea:5b:
34:65:e2:1f:64:dd:73:06:d4:ce:71:b1:1c:39:5c:
40:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:E7:E7:C2:60:45:27:35:1D:E9:B7:CE:B6:2F:17:57:3A:9E:5C:2A
X509v3 Authority Key Identifier:
keyid:0A:42:AE:6E:96:18:0F:03:B7:CA:6D:97:42:75:16:E4:C0:7F:6E:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CkKubpYYDwO3ym2XQnUW5MB_bis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/46c7e6-4006-40f0-adaa-b4192ac638c9/1/CkKubpYYDwO3ym2XQnUW5MB_bis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/46c7e6-4006-40f0-adaa-b4192ac638c9/1/CkKubpYYDwO3ym2XQnUW5MB_bis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:3a:0e:6d:19:5d:c3:83:f7:2f:b3:8d:bc:2d:4c:68:b3:af:
ad:14:84:a1:d4:25:bf:73:8a:d9:3e:fb:3b:44:c8:96:d1:7c:
7b:f5:52:05:59:97:32:63:6e:44:07:32:a9:f5:38:a3:bc:70:
ac:f6:74:40:92:d8:90:e1:5a:62:51:70:72:fa:a8:26:de:72:
7c:bb:77:ac:29:c8:42:c9:11:80:78:1d:12:0f:a0:b5:55:5a:
e0:b5:f4:b8:72:91:ff:0e:6c:90:1c:31:bf:62:4d:30:b7:75:
95:ae:69:e3:a8:56:64:e6:69:19:4b:a0:f9:99:3c:7a:41:8c:
d6:24:17:0a:0a:2a:ae:04:a2:24:27:7b:53:ac:bc:1b:13:3b:
8b:d2:83:a0:2d:a9:38:77:36:38:99:f6:50:b5:5e:03:5a:93:
88:4b:18:6d:29:82:95:1f:2f:25:95:e1:a2:49:a8:63:05:f6:
97:95:cf:17:86:91:37:ef:58:db:99:72:09:3e:7e:95:05:6a:
dd:17:f3:0f:04:d4:85:8a:0f:f5:3b:b3:68:db:47:09:1c:f0:
91:10:57:00:08:f3:9f:75:58:d5:b3:43:0e:5f:09:f1:97:03:
7f:10:34:b7:2e:09:4a:61:38:dd:9f:a3:c7:f4:72:27:f7:d1:
7e:21:a3:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:44:13 2025 by rpki-client