Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/9dac9c-85c6-4572-ad60-14512e7e59ef/1/bj7Jcvl2C4VfHUOQvDdbP6PUEbY.mft
File: bj7Jcvl2C4VfHUOQvDdbP6PUEbY.mft (raw, json)
Hash identifier: qqJJroqjCtlyAT+81SHnG8E+QefmGwP8jgSiNW0kJUw=
Subject key identifier: B2:36:07:F7:26:2C:AC:D5:F8:FD:52:F8:48:71:DA:DE:93:1C:2F:30
Authority key identifier: 6E:3E:C9:72:F9:76:0B:85:5F:1D:43:90:BC:37:5B:3F:A3:D4:11:B6
Certificate issuer: /CN=6e3ec972f9760b855f1d4390bc375b3fa3d411b6
Certificate serial: 019759B6A866E339B2E62DFFCEF2E8E77D5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bj7Jcvl2C4VfHUOQvDdbP6PUEbY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/9dac9c-85c6-4572-ad60-14512e7e59ef/1/bj7Jcvl2C4VfHUOQvDdbP6PUEbY.mft
Manifest number: 1584
Signing time: Tue 10 Jun 2025 12:00:32 +0000
Manifest this update: Tue 10 Jun 2025 12:00:32 +0000
Manifest next update: Wed 11 Jun 2025 12:00:32 +0000
Files and hashes: 1: bj7Jcvl2C4VfHUOQvDdbP6PUEbY.crl (hash: qFTx30Pk/wLxE2JXSx7dzEp2reyZuGrvUr4IRLYDUMQ=)
2: dT_nuVNPNVy7zap0s-GlTGbCJFQ.roa (hash: 2ckePt60vTr0Jaf/aV6ugqWUeBibjAZagoTGX9Ra3Qc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/9dac9c-85c6-4572-ad60-14512e7e59ef/1/bj7Jcvl2C4VfHUOQvDdbP6PUEbY.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/9dac9c-85c6-4572-ad60-14512e7e59ef/1/bj7Jcvl2C4VfHUOQvDdbP6PUEbY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bj7Jcvl2C4VfHUOQvDdbP6PUEbY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 12:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:59:b6:a8:66:e3:39:b2:e6:2d:ff:ce:f2:e8:e7:7d:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e3ec972f9760b855f1d4390bc375b3fa3d411b6
Validity
Not Before: Jun 10 12:00:32 2025 GMT
Not After : Jun 11 12:00:32 2025 GMT
Subject: CN=b23607f7262cacd5f8fd52f84871dade931c2f30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:aa:b4:70:d9:3d:d0:40:b1:3d:a6:04:a2:53:
46:75:90:b5:13:bb:dd:98:8b:d8:5c:32:a6:c2:e5:
30:2b:79:a1:30:8b:1f:e6:fd:1c:39:94:cd:0e:b8:
7d:ba:01:2b:36:ea:2b:cb:a9:9e:09:4c:ea:8c:e7:
99:86:d3:27:5c:e0:70:f9:9e:f8:7b:e4:3f:d1:d9:
8e:7e:bb:fa:b7:c4:a2:63:30:4c:39:98:d7:a5:b7:
f5:fe:b9:b7:6d:82:8a:dd:98:1c:15:33:35:74:78:
e8:12:3f:07:e4:44:f2:7e:29:41:78:09:1e:ab:90:
87:18:ab:69:65:86:01:e0:be:af:4f:b2:76:37:d2:
e5:a7:0f:7f:66:fa:75:50:49:9d:bb:a4:d0:ff:1a:
82:6a:88:7f:b0:41:1d:0e:90:04:14:9c:5f:88:cc:
e4:b6:aa:84:76:cd:3a:15:5b:26:36:c5:f1:83:79:
dc:47:ac:3c:8c:f2:8d:2a:d3:9b:86:ab:9c:3e:f1:
77:53:dd:f2:a4:a1:83:48:4d:fc:5a:ce:8e:0d:e4:
73:5b:65:66:a6:0f:5e:88:f9:32:4c:a7:a1:47:93:
02:6b:97:41:fe:b1:27:20:ef:48:3f:9a:c6:6d:1c:
a4:89:16:43:c3:3c:23:91:55:1f:e1:17:3b:a5:ff:
01:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:36:07:F7:26:2C:AC:D5:F8:FD:52:F8:48:71:DA:DE:93:1C:2F:30
X509v3 Authority Key Identifier:
keyid:6E:3E:C9:72:F9:76:0B:85:5F:1D:43:90:BC:37:5B:3F:A3:D4:11:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bj7Jcvl2C4VfHUOQvDdbP6PUEbY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9dac9c-85c6-4572-ad60-14512e7e59ef/1/bj7Jcvl2C4VfHUOQvDdbP6PUEbY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9dac9c-85c6-4572-ad60-14512e7e59ef/1/bj7Jcvl2C4VfHUOQvDdbP6PUEbY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:ae:b5:50:69:2f:1b:93:d8:81:d5:9c:83:b4:83:3a:22:4a:
c9:34:94:1c:73:df:75:e6:5c:c4:ea:01:c9:b9:b7:37:bd:c4:
18:ca:bb:80:1b:60:4d:4e:82:c7:c1:5e:ec:50:52:7e:ce:f8:
87:bf:bb:15:46:f1:8c:2d:ee:40:3d:3a:f4:cd:5e:e6:f1:1d:
45:2c:c7:6b:45:1c:2c:5f:2c:60:ae:a7:4d:52:fa:79:45:5f:
0a:90:cc:62:94:36:49:0e:1d:b4:e4:98:97:f0:8d:d7:15:9e:
ed:6d:d4:f0:25:15:1a:d2:d5:7e:9a:f3:b5:6b:22:03:bd:62:
20:fa:42:f9:21:e1:f3:d5:f0:e8:83:5a:ac:f6:97:33:4a:69:
60:fc:a1:c6:35:0b:c5:64:89:3c:cb:9b:2c:3d:5d:b8:37:80:
ee:4d:0a:fc:89:04:eb:a6:b7:2d:be:3a:6e:7e:c6:f8:89:9b:
33:63:f5:58:86:a9:ae:96:5b:3f:07:6f:45:3d:a3:7d:74:cf:
2d:e7:1f:ff:6d:5a:d8:f0:d6:78:4c:8d:70:f7:d0:05:1d:bc:
2e:16:ea:c8:a0:95:3c:ea:07:bf:4e:c4:d7:30:c6:b5:e7:06:
47:62:23:eb:c5:c8:fe:e8:ae:a8:60:53:01:25:d1:3d:2d:44:
3a:6b:05:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 17:39:12 2025 by rpki-client