Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6fe1eb-3a1b-44ee-b8e2-1a9abab24dc9/1/beqfD_dpbglzZ0Zd40tOvQG11yo.mft
File: beqfD_dpbglzZ0Zd40tOvQG11yo.mft (raw, json)
Hash identifier: fai2KCZrMPrs73C8dCaCgYIPIHO5WJL6fealw++esgs=
Subject key identifier: 0F:57:A6:25:2E:CA:12:2B:D4:7E:8D:4A:2D:4F:57:43:62:A2:3C:45
Authority key identifier: 6D:EA:9F:0F:F7:69:6E:09:73:67:46:5D:E3:4B:4E:BD:01:B5:D7:2A
Certificate issuer: /CN=6dea9f0ff7696e097367465de34b4ebd01b5d72a
Certificate serial: 01974A7B7B39E5DE69549EE8D93C121D1C66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/beqfD_dpbglzZ0Zd40tOvQG11yo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6fe1eb-3a1b-44ee-b8e2-1a9abab24dc9/1/beqfD_dpbglzZ0Zd40tOvQG11yo.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 13:01:35 +0000
Manifest this update: Sat 07 Jun 2025 13:01:35 +0000
Manifest next update: Sun 08 Jun 2025 13:01:35 +0000
Files and hashes: 1: TPTipmCf9BsOGFcyPoYhIPJPS2A.roa (hash: aQYPaPwtQe3/gUYOUMBsHdSV7yzKJ4eszHX6ZM/z8PM=)
2: beqfD_dpbglzZ0Zd40tOvQG11yo.crl (hash: qzv6T9btudvcD6cvDVmAB52H/biX/4Kx0FYdzGMjj8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/6fe1eb-3a1b-44ee-b8e2-1a9abab24dc9/1/beqfD_dpbglzZ0Zd40tOvQG11yo.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/6fe1eb-3a1b-44ee-b8e2-1a9abab24dc9/1/beqfD_dpbglzZ0Zd40tOvQG11yo.mft
rsync://rpki.ripe.net/repository/DEFAULT/beqfD_dpbglzZ0Zd40tOvQG11yo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7b:7b:39:e5:de:69:54:9e:e8:d9:3c:12:1d:1c:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dea9f0ff7696e097367465de34b4ebd01b5d72a
Validity
Not Before: Jun 7 13:01:35 2025 GMT
Not After : Jun 8 13:01:35 2025 GMT
Subject: CN=0f57a6252eca122bd47e8d4a2d4f574362a23c45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:71:71:a8:0e:91:fe:ed:95:98:fd:4d:74:23:
f7:e4:3b:78:ef:36:25:3c:ac:a4:ed:3b:ed:d9:c7:
9f:bf:32:23:b4:24:0a:15:46:76:8b:d2:42:ca:5d:
e5:77:7c:86:72:fd:09:4f:82:b9:54:ba:56:64:21:
33:08:a2:8a:0e:cd:9d:1e:00:29:c2:57:d1:14:aa:
1c:c1:87:bd:43:eb:94:98:94:1a:58:34:7a:8b:a2:
71:8a:89:d5:4f:22:27:e8:b6:b8:93:c5:8b:90:7b:
9b:bb:d4:6d:2b:b6:5b:72:c8:cd:b3:82:6b:18:d4:
fb:c3:a8:34:5b:0a:c6:fe:32:70:9a:e1:b5:28:01:
f9:0d:3e:6a:93:60:7d:f6:bd:39:a9:4d:20:85:8b:
0e:3a:a0:57:0b:8b:6b:c3:b4:39:26:4d:30:60:a4:
e3:f7:9b:13:28:f3:58:e3:dc:f1:23:62:eb:30:69:
47:19:28:6a:d4:f7:75:5c:1f:da:83:69:46:e0:0e:
d4:89:6a:49:77:23:6f:5d:94:84:09:af:ab:49:bb:
bf:82:81:2c:63:88:79:94:a6:2d:7f:25:00:0f:37:
a7:32:68:9a:9a:65:4e:90:75:3b:fc:f6:2f:4b:65:
06:45:ca:b0:be:12:2f:a9:b2:4f:8b:62:43:70:0d:
59:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:57:A6:25:2E:CA:12:2B:D4:7E:8D:4A:2D:4F:57:43:62:A2:3C:45
X509v3 Authority Key Identifier:
keyid:6D:EA:9F:0F:F7:69:6E:09:73:67:46:5D:E3:4B:4E:BD:01:B5:D7:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/beqfD_dpbglzZ0Zd40tOvQG11yo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6fe1eb-3a1b-44ee-b8e2-1a9abab24dc9/1/beqfD_dpbglzZ0Zd40tOvQG11yo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6fe1eb-3a1b-44ee-b8e2-1a9abab24dc9/1/beqfD_dpbglzZ0Zd40tOvQG11yo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:4f:15:35:18:db:8e:b3:b9:09:0a:48:ca:63:b8:bf:83:d4:
b7:31:34:30:95:44:86:42:0e:63:33:74:14:8d:fe:8c:ad:ff:
85:2b:a2:5c:14:e8:6d:de:10:bf:4a:e4:d4:7f:8d:15:e4:a5:
cc:72:16:de:78:f1:4f:79:5c:2a:4a:6f:79:5d:27:f4:aa:2a:
99:ef:e4:8a:e4:ba:d2:47:46:6f:6f:85:97:9f:3e:77:38:ae:
5b:3a:98:f2:45:e4:4d:93:68:6c:93:ac:ad:e4:16:f4:32:f4:
91:87:82:8f:20:42:5c:82:a6:c6:3d:96:77:6b:7c:5d:16:36:
52:50:35:5b:78:10:95:c3:3b:4c:2b:d7:7f:d4:e9:f2:70:df:
d9:91:0e:5f:07:f0:56:d6:b1:ab:10:2e:58:33:0e:58:3f:2d:
00:76:f8:6c:ae:5e:8e:dd:09:d8:af:17:16:8b:2e:8e:ab:21:
33:62:e3:bb:13:71:83:27:83:3a:71:e9:72:22:d7:42:38:13:
07:02:29:47:f2:55:67:50:fa:18:8e:a8:a6:66:8c:33:5f:81:
f9:7f:b0:1f:df:1b:7b:0e:72:2f:05:41:ff:cb:b4:e9:dc:97:
08:6c:8d:96:ee:a2:4d:06:00:d6:0f:71:3f:07:de:d6:bf:13:
63:eb:0e:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:30:09 2025 by rpki-client