Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/e4f2db-6f46-4761-adfe-7327df6bdd10/1/bj7iuEACCKfupFBg9LeoPEPo3nw.mft
File: bj7iuEACCKfupFBg9LeoPEPo3nw.mft (raw, json)
Hash identifier: dK/2r1645HA4I055EEcmPZt/vE1ccM44r7rlalvDDQI=
Subject key identifier: 78:05:A8:1C:BA:C8:2D:22:44:14:86:9F:61:65:4A:8B:B9:EE:61:CC
Authority key identifier: 6E:3E:E2:B8:40:02:08:A7:EE:A4:50:60:F4:B7:A8:3C:43:E8:DE:7C
Certificate issuer: /CN=6e3ee2b8400208a7eea45060f4b7a83c43e8de7c
Certificate serial: 0197481E249489419827A986CCAE83CF28DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bj7iuEACCKfupFBg9LeoPEPo3nw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/e4f2db-6f46-4761-adfe-7327df6bdd10/1/bj7iuEACCKfupFBg9LeoPEPo3nw.mft
Manifest number: 0CB8
Signing time: Sat 07 Jun 2025 02:00:24 +0000
Manifest this update: Sat 07 Jun 2025 02:00:24 +0000
Manifest next update: Sun 08 Jun 2025 02:00:24 +0000
Files and hashes: 1: CHQq2YDxipt537b311Ui3tG3zOU.roa (hash: Q8vdLMat40/Z7pZgYQmg+RQTQD9awPvQh60JlwKVzLU=)
2: bj7iuEACCKfupFBg9LeoPEPo3nw.crl (hash: mbMYyKOtgBBfrktfwQt+KYuxHtKg/6DFEWYFXJKdBjc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/e4f2db-6f46-4761-adfe-7327df6bdd10/1/bj7iuEACCKfupFBg9LeoPEPo3nw.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/e4f2db-6f46-4761-adfe-7327df6bdd10/1/bj7iuEACCKfupFBg9LeoPEPo3nw.mft
rsync://rpki.ripe.net/repository/DEFAULT/bj7iuEACCKfupFBg9LeoPEPo3nw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:1e:24:94:89:41:98:27:a9:86:cc:ae:83:cf:28:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e3ee2b8400208a7eea45060f4b7a83c43e8de7c
Validity
Not Before: Jun 7 02:00:24 2025 GMT
Not After : Jun 8 02:00:24 2025 GMT
Subject: CN=7805a81cbac82d224414869f61654a8bb9ee61cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:76:d7:1e:58:f8:35:4d:fa:32:61:ca:75:47:
4b:23:b1:ce:6d:65:59:33:4a:b4:16:38:06:57:c2:
3e:d2:b2:ee:c3:d7:2b:f2:c6:39:7a:9e:12:c6:a2:
10:b4:23:d8:a4:5f:a5:47:14:fb:5c:61:52:af:c7:
b4:66:1c:0e:05:6d:38:4e:8a:45:39:c7:89:bc:ef:
54:58:c2:88:68:b5:36:99:c4:24:dd:99:6d:6c:06:
91:28:6a:3c:3d:dc:f8:f4:29:97:eb:70:a9:32:e4:
e5:9a:f5:68:d6:b6:25:6a:91:6a:e1:34:48:66:81:
b0:df:8d:1f:d6:4a:71:06:6c:f5:41:ad:40:c8:9d:
9e:61:5a:0e:d8:91:e2:36:49:d6:73:ab:03:97:bd:
a1:bf:1c:30:a9:67:7a:d9:0a:7e:64:f8:f4:9c:28:
7e:e1:4c:c8:ff:73:59:7b:fb:27:f8:2b:88:20:9e:
b6:6f:ea:65:1d:1d:60:83:40:ad:62:18:66:bf:a5:
cf:b7:78:17:2c:1e:4e:50:9b:19:cc:bd:24:ae:92:
a9:d9:32:b3:6a:93:12:b3:6a:61:5c:58:2b:7e:55:
db:48:8d:e0:ef:76:9a:85:6c:1a:48:58:c0:29:0b:
d1:5a:3f:ef:f8:7e:fa:da:50:e9:de:23:ba:93:84:
6f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:05:A8:1C:BA:C8:2D:22:44:14:86:9F:61:65:4A:8B:B9:EE:61:CC
X509v3 Authority Key Identifier:
keyid:6E:3E:E2:B8:40:02:08:A7:EE:A4:50:60:F4:B7:A8:3C:43:E8:DE:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bj7iuEACCKfupFBg9LeoPEPo3nw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/e4f2db-6f46-4761-adfe-7327df6bdd10/1/bj7iuEACCKfupFBg9LeoPEPo3nw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/e4f2db-6f46-4761-adfe-7327df6bdd10/1/bj7iuEACCKfupFBg9LeoPEPo3nw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:84:c1:f0:f6:eb:91:b1:af:2a:99:3e:47:e4:fc:56:2e:1a:
64:40:a7:45:68:1e:1b:7d:9d:75:f8:9a:9b:ed:bc:90:ee:17:
20:f5:cc:6d:d3:4a:8b:40:91:96:a9:9d:ea:d7:54:d2:d5:47:
97:8d:55:31:12:a1:0e:2c:fb:13:38:37:9f:4c:23:aa:60:aa:
c2:06:f3:85:7d:36:0c:8e:0a:78:63:f7:a9:3e:22:a4:56:4e:
43:52:fb:df:af:51:5f:1c:bc:60:88:cf:4b:00:3d:e1:4b:22:
3b:f6:f9:86:99:85:fe:a1:59:1f:54:9f:d0:7c:91:09:88:6f:
e9:e8:b1:bc:b1:b2:6d:51:ad:52:07:05:4f:f5:0e:41:b0:13:
88:ce:74:98:30:0d:84:0a:ee:eb:27:78:59:4e:73:27:7e:15:
71:ee:93:88:d5:a1:a8:7f:97:4c:f5:db:34:8b:65:a5:ce:73:
12:a8:a1:1e:1d:2a:10:5b:5f:b4:2d:f9:89:ed:cb:74:b7:b0:
34:e4:9f:46:6a:0f:d8:80:9a:c2:ac:8b:a7:8c:be:55:c4:7f:
bc:d0:67:63:07:b0:10:b9:07:f9:39:85:c3:00:ea:1d:43:64:
a8:e6:e4:a4:15:08:c9:18:08:1c:84:fa:de:fd:b7:2b:ce:2f:
42:cd:93:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:01:27 2025 by rpki-client