Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.mft
File: bS1XQJK6k5ov_3GqH46O2WFTCzA.mft (raw, json)
Hash identifier: +Na57knREohu/aVgK3X48HKA3/9twW3+5KBBvadQPWE=
Subject key identifier: CF:26:AD:33:54:07:37:CB:41:3D:CF:67:19:10:89:DE:40:15:46:A1
Authority key identifier: 6D:2D:57:40:92:BA:93:9A:2F:FF:71:AA:1F:8E:8E:D9:61:53:0B:30
Certificate issuer: /CN=6d2d574092ba939a2fff71aa1f8e8ed961530b30
Certificate serial: 019748F9FF148F95BD78E89BC3DB920F07C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bS1XQJK6k5ov_3GqH46O2WFTCzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.mft
Manifest number: 09FC
Signing time: Sat 07 Jun 2025 06:00:32 +0000
Manifest this update: Sat 07 Jun 2025 06:00:32 +0000
Manifest next update: Sun 08 Jun 2025 06:00:32 +0000
Files and hashes: 1: LMR5H8XxQ22Qwh4Rqkz4ubSlo54.roa (hash: ZUDk4H2waEP/HdlHdhHpF+TAjFZSo3z48LNa4UDsM8c=)
2: bS1XQJK6k5ov_3GqH46O2WFTCzA.crl (hash: Gt1/I4KSFZByLuYNCpszT7z2hVY/rw7eTWhShFIpfFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bS1XQJK6k5ov_3GqH46O2WFTCzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:f9:ff:14:8f:95:bd:78:e8:9b:c3:db:92:0f:07:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d2d574092ba939a2fff71aa1f8e8ed961530b30
Validity
Not Before: Jun 7 06:00:32 2025 GMT
Not After : Jun 8 06:00:32 2025 GMT
Subject: CN=cf26ad33540737cb413dcf67191089de401546a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:46:25:f8:52:f4:9c:7a:3d:77:f7:e6:5d:9d:
13:13:3a:e3:a4:de:8c:24:52:80:fd:df:82:7e:48:
ac:e3:e1:28:e9:95:c8:d7:c1:de:aa:f3:4a:27:50:
6b:ba:aa:07:d5:cc:e1:23:12:21:a1:2e:66:7e:17:
1c:f5:d0:83:d5:e6:d3:54:89:5a:8e:4a:d8:60:5c:
8a:75:f7:f3:26:e3:7b:96:c9:5a:fc:94:22:02:43:
bd:66:16:47:07:9f:d7:6d:ca:96:47:2a:28:6b:76:
39:3c:b8:5b:46:2c:fb:26:27:c8:8b:ad:60:1d:f3:
65:ed:53:80:d3:81:1c:64:64:c6:f3:97:e1:fc:1c:
08:d9:9c:eb:fc:40:ed:bd:92:0c:60:cd:73:69:78:
4f:8e:c7:37:2f:b4:e2:52:6b:65:4c:30:0c:94:c1:
7b:30:91:e6:28:08:5a:5e:47:9b:a0:89:68:1a:6b:
30:70:57:5d:79:34:44:b8:1d:e6:91:76:ff:ce:e5:
2e:39:1c:58:40:92:c4:ec:5a:5d:c2:52:57:49:c3:
7d:90:8c:d4:bc:9f:62:bb:5b:7d:b1:0f:56:d4:9e:
5d:4f:97:bc:aa:66:8f:c2:2e:ca:eb:35:3c:41:6f:
10:a1:a1:e1:21:cd:85:8e:6e:6f:1d:bb:0d:cf:1d:
1b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:26:AD:33:54:07:37:CB:41:3D:CF:67:19:10:89:DE:40:15:46:A1
X509v3 Authority Key Identifier:
keyid:6D:2D:57:40:92:BA:93:9A:2F:FF:71:AA:1F:8E:8E:D9:61:53:0B:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bS1XQJK6k5ov_3GqH46O2WFTCzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/597cc3-3611-4628-bd7c-dbad1f4a4123/1/bS1XQJK6k5ov_3GqH46O2WFTCzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:9a:30:a4:bc:85:0a:08:5c:18:66:ac:c6:7b:b8:e9:34:e4:
7f:3b:b4:d4:7a:18:b2:f9:55:36:70:33:fb:5b:78:03:1a:de:
0a:d1:ce:2f:16:92:29:92:e6:65:a5:6d:fc:a1:36:6d:3a:a7:
17:df:23:e5:7d:24:57:e9:10:2c:65:62:bb:ad:87:f8:5d:de:
b2:f9:32:cb:43:f1:2e:1a:33:33:da:72:e1:8f:4c:ba:1c:a5:
80:bf:a8:9d:fb:8e:d3:83:35:bf:4d:04:36:06:65:f6:ba:94:
ef:38:f5:ce:0f:9c:b3:0c:06:1d:fc:55:54:31:26:7b:4c:a9:
f3:f1:2f:77:08:76:8a:6e:87:86:f6:2a:30:6c:5d:56:c7:00:
b4:61:d6:20:c0:05:a9:d3:11:28:13:4a:c7:bb:6f:e0:ce:24:
af:25:dd:0f:f9:f8:ec:b8:03:a2:b4:a8:32:fc:10:e9:8e:1a:
5f:62:0c:e9:c0:0a:88:85:dc:e1:2a:d7:b5:51:fe:d5:0b:f4:
01:1c:7a:af:e6:3d:5a:42:cc:47:ca:45:73:35:19:28:8b:05:
d8:f4:47:53:c2:eb:14:73:29:c1:6a:9d:42:05:8f:47:d1:70:
b5:8e:40:48:db:d3:18:d8:d9:7e:a9:3e:83:f1:e4:f2:b6:4d:
1c:49:cb:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 11:32:56 2025 by rpki-client