Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/bywMZra0YSyJSYAPCSkcr6OGX9M.mft
File: bywMZra0YSyJSYAPCSkcr6OGX9M.mft (raw, json)
Hash identifier: 1/bpfYfzSUdx8spZ7I6PX5OOcWQaTLhdrqrHLErQWp0=
Subject key identifier: 98:AB:21:24:9F:AD:0F:EE:38:BE:41:E9:5E:2E:06:1F:88:FA:BA:30
Authority key identifier: 6F:2C:0C:66:B6:B4:61:2C:89:49:80:0F:09:29:1C:AF:A3:86:5F:D3
Certificate issuer: /CN=6f2c0c66b6b4612c8949800f09291cafa3865fd3
Certificate serial: 01974E207A7F8E965E40DA4025963489C2FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bywMZra0YSyJSYAPCSkcr6OGX9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/bywMZra0YSyJSYAPCSkcr6OGX9M.mft
Manifest number: 1582
Signing time: Sun 08 Jun 2025 06:00:40 +0000
Manifest this update: Sun 08 Jun 2025 06:00:40 +0000
Manifest next update: Mon 09 Jun 2025 06:00:40 +0000
Files and hashes: 1: DI4vBCoaFwWH56fastsgpI_OzV4.roa (hash: G2unu3ORD0MMoGD5/yRPHnaWwSlBATtxNpmWR5aHEM4=)
2: QbZjSv4xV1QIelVl1fHRXPXo-KY.roa (hash: nZ8Pn0ydQCeXXExV5rYMDz5OqoHrLBQ2oK8QMtT/S9Y=)
3: bywMZra0YSyJSYAPCSkcr6OGX9M.crl (hash: HIkcn6khs46O0BUB1hcwiR2PilrSweSiE5oeK94lUls=)
4: rhg0m5TQoZx8ukpxPs6B_OGSfP4.roa (hash: MBQcZRbmqaZyE17cVqxXA3L5aucn3oF+oVOWkl+2m88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/bywMZra0YSyJSYAPCSkcr6OGX9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/bywMZra0YSyJSYAPCSkcr6OGX9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/bywMZra0YSyJSYAPCSkcr6OGX9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:20:7a:7f:8e:96:5e:40:da:40:25:96:34:89:c2:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f2c0c66b6b4612c8949800f09291cafa3865fd3
Validity
Not Before: Jun 8 06:00:40 2025 GMT
Not After : Jun 9 06:00:40 2025 GMT
Subject: CN=98ab21249fad0fee38be41e95e2e061f88faba30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:dd:76:d5:76:02:70:99:52:20:54:05:bd:ca:
2b:d4:2f:49:2b:80:8c:2a:1a:df:e4:a0:61:8c:f4:
da:35:ee:2f:be:c5:75:31:c6:06:e5:0a:43:c6:32:
6f:ac:5a:85:42:cc:62:de:03:13:d8:6f:06:b0:b5:
01:c2:89:7f:e1:66:50:35:35:34:98:38:b7:6e:08:
78:92:52:70:ac:5b:7a:8a:a0:61:53:45:37:89:1b:
de:76:96:04:8d:32:fe:85:13:bd:59:4b:21:67:ea:
05:8f:e3:01:75:55:27:6c:f7:1f:74:fb:4e:fe:87:
e6:26:d9:03:a4:7f:dd:b3:d2:dc:0e:45:22:9b:0d:
d8:44:c6:af:3c:23:49:05:4d:1a:3e:9a:43:49:6c:
5f:aa:e1:c2:77:5f:72:4b:a4:61:6f:8f:49:ba:f3:
75:e2:8a:f0:19:82:f1:7e:7b:01:98:48:ec:75:f9:
bb:c9:d9:27:cb:b2:13:47:ca:60:65:3c:f2:e0:4f:
1d:9b:0e:24:46:d1:8b:39:88:02:aa:ba:7f:99:a0:
28:7d:bc:99:22:f6:f0:16:90:c2:01:26:62:80:37:
cb:94:f3:16:46:c2:5a:77:96:bc:7b:75:3f:75:c5:
a6:ca:65:6d:96:c8:e8:49:13:3d:d8:58:51:0b:91:
09:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:AB:21:24:9F:AD:0F:EE:38:BE:41:E9:5E:2E:06:1F:88:FA:BA:30
X509v3 Authority Key Identifier:
keyid:6F:2C:0C:66:B6:B4:61:2C:89:49:80:0F:09:29:1C:AF:A3:86:5F:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bywMZra0YSyJSYAPCSkcr6OGX9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/bywMZra0YSyJSYAPCSkcr6OGX9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/4d8a74-60b8-410e-aa35-392a752464b1/1/bywMZra0YSyJSYAPCSkcr6OGX9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:df:e8:c2:d3:59:17:ef:96:8f:e2:76:5e:1f:92:50:0a:b7:
64:a4:73:b2:13:e8:ef:40:31:3f:0d:ab:af:37:57:8e:9e:e9:
bf:6f:0f:f8:62:a8:7e:f8:2c:35:8d:19:ba:fd:16:f4:3a:32:
13:b2:fe:92:f0:4d:ad:09:59:ca:7d:e7:66:c2:35:3a:a6:10:
4e:44:42:d1:bb:8d:06:d7:dd:90:42:cf:71:7a:8d:15:54:41:
c8:13:4a:f6:d8:ad:3c:0b:e7:3e:a4:16:ab:01:86:d3:4a:45:
4e:f7:e9:ad:29:26:e2:d1:d3:c6:ce:d5:24:30:c2:a4:fa:a3:
f7:6a:3a:c7:a1:f7:46:0f:7a:af:ce:92:84:96:c2:5f:cb:aa:
4a:88:1e:4e:03:2c:78:a2:36:f7:90:ec:b6:a5:65:4d:bc:a2:
e7:83:79:4d:ac:d2:66:ee:93:3a:5f:ed:e0:08:bd:3b:0f:7b:
2e:a3:ba:6d:81:1d:13:04:7d:ef:e8:f8:1a:65:54:13:05:04:
da:75:f2:d9:4b:5e:6e:63:92:41:68:e7:71:56:96:a5:aa:ac:
74:b1:7c:2e:f5:d0:1a:52:78:58:e4:58:f2:c1:5b:d3:08:c2:
6b:e7:5f:9d:56:85:bf:5c:bb:db:3e:5c:6c:0b:67:c7:76:07:
2c:8c:47:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 12:32:36 2025 by rpki-client