Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/f01a02-5a9e-4441-9b3d-d5c18862d026/1/bJX9yjZ7zhni8lO3jzYI_zQUKMk.mft
File: bJX9yjZ7zhni8lO3jzYI_zQUKMk.mft (raw, json)
Hash identifier: PJVMebOvlddNiMK+z3ctEP34mKvlD0MjYIresv8Yt/s=
Subject key identifier: E2:40:17:B9:90:1D:FB:48:1E:68:8B:45:7D:56:E5:C1:96:CB:20:C7
Authority key identifier: 6C:95:FD:CA:36:7B:CE:19:E2:F2:53:B7:8F:36:08:FF:34:14:28:C9
Certificate issuer: /CN=6c95fdca367bce19e2f253b78f3608ff341428c9
Certificate serial: 01975122059ED21F4A36CD9CC1D9AFB7EA84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bJX9yjZ7zhni8lO3jzYI_zQUKMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/f01a02-5a9e-4441-9b3d-d5c18862d026/1/bJX9yjZ7zhni8lO3jzYI_zQUKMk.mft
Manifest number: 014B
Signing time: Sun 08 Jun 2025 20:01:13 +0000
Manifest this update: Sun 08 Jun 2025 20:01:13 +0000
Manifest next update: Mon 09 Jun 2025 20:01:13 +0000
Files and hashes: 1: Lf1xzTXAc6SiNDJtIVl8iWMf5b4.roa (hash: Mlu5t33KkThbOioHblpilqA5fDGAJvYvW4onNzjvD5s=)
2: bJX9yjZ7zhni8lO3jzYI_zQUKMk.crl (hash: qeaPq7HSU2HyoxpyI8hBwR3iXDM6F4mvlifxbFNYUPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/f01a02-5a9e-4441-9b3d-d5c18862d026/1/bJX9yjZ7zhni8lO3jzYI_zQUKMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/f01a02-5a9e-4441-9b3d-d5c18862d026/1/bJX9yjZ7zhni8lO3jzYI_zQUKMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/bJX9yjZ7zhni8lO3jzYI_zQUKMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:22:05:9e:d2:1f:4a:36:cd:9c:c1:d9:af:b7:ea:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c95fdca367bce19e2f253b78f3608ff341428c9
Validity
Not Before: Jun 8 20:01:13 2025 GMT
Not After : Jun 9 20:01:13 2025 GMT
Subject: CN=e24017b9901dfb481e688b457d56e5c196cb20c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:86:5c:90:c4:46:46:36:9a:87:04:ad:33:ae:
6e:ee:e9:97:e1:ec:bb:ec:b0:64:05:f9:ae:20:d8:
e4:16:39:e4:f8:45:60:a6:78:3f:c6:8a:6e:a8:b5:
24:df:73:e5:ba:aa:ec:69:96:9d:5e:9e:14:d1:73:
1c:ae:bc:9f:0c:d5:b5:d6:6b:66:23:82:53:3d:b6:
f5:d2:5f:bd:98:af:65:3a:74:76:e4:e0:ec:d6:63:
30:ab:94:41:fd:05:56:d0:53:72:0d:e0:b5:e0:d5:
d6:ad:68:97:ad:cb:bb:05:41:4b:46:2c:ad:43:e4:
54:ce:a8:ec:a1:bb:05:26:33:8f:00:9a:41:3a:f0:
e1:e3:02:58:84:f1:f6:2c:3c:2d:74:51:de:68:ac:
b3:a1:67:2f:72:ef:d9:79:9c:7e:43:6f:7e:8d:0e:
2d:20:33:ac:63:7d:d7:05:69:c2:53:05:ec:2e:e5:
28:a8:af:8c:82:11:83:1c:ca:0c:b1:99:02:d0:01:
1c:ed:a1:61:13:7f:6e:1c:92:2d:6a:80:43:fb:49:
ab:5e:3f:8a:59:bf:9e:e5:9a:53:ee:21:6c:15:47:
57:2c:65:58:0d:ef:2e:d8:60:7e:1a:88:f1:2e:58:
47:06:10:76:77:2e:f7:bf:74:00:d1:e1:61:38:2d:
9d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:40:17:B9:90:1D:FB:48:1E:68:8B:45:7D:56:E5:C1:96:CB:20:C7
X509v3 Authority Key Identifier:
keyid:6C:95:FD:CA:36:7B:CE:19:E2:F2:53:B7:8F:36:08:FF:34:14:28:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bJX9yjZ7zhni8lO3jzYI_zQUKMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/f01a02-5a9e-4441-9b3d-d5c18862d026/1/bJX9yjZ7zhni8lO3jzYI_zQUKMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/f01a02-5a9e-4441-9b3d-d5c18862d026/1/bJX9yjZ7zhni8lO3jzYI_zQUKMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:0f:6b:a5:02:dd:4b:10:e0:f5:6b:e5:4b:b2:34:04:6b:4e:
7e:32:0d:e7:36:72:98:2a:b3:3b:80:d3:c8:d7:5f:51:16:c1:
d0:50:d8:b6:e9:b2:ca:43:3f:28:f5:85:cc:b9:2b:01:b2:61:
99:5a:d3:f0:76:ea:37:5c:49:f8:cf:fe:e3:10:a6:3f:ac:02:
f2:28:ae:b0:f0:66:fa:12:79:26:64:e5:4e:6d:c7:46:9b:32:
67:ed:96:74:4b:a8:42:c4:35:dc:1a:cf:47:4c:15:1f:bf:18:
ba:b6:e0:bc:39:f0:d4:38:96:2c:bb:8f:cd:06:33:d6:5a:f9:
6b:4c:86:69:20:a3:a2:4e:a2:52:91:4c:55:5b:1f:33:42:7b:
31:b4:e2:cf:32:32:9a:ee:45:75:52:8c:ca:f8:03:f7:20:67:
aa:5c:e4:5e:71:5c:a0:a2:92:3f:f9:89:be:4c:09:63:6f:9e:
dd:ed:8f:a0:f5:83:77:c4:36:64:c3:f6:3e:4d:76:db:d4:98:
b5:ef:26:f6:cd:21:1e:40:73:a1:ec:4f:a8:a6:d5:c9:97:30:
10:ca:3e:c3:39:9e:c3:1a:82:23:b7:d4:11:9c:98:4d:c2:79:
ef:c7:23:70:4a:05:fe:01:49:d6:bc:0c:4e:f1:3e:f6:cc:3f:
5b:53:c6:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 01:32:19 2025 by rpki-client