Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft
File: bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft (raw, json)
Hash identifier: ucKu/j4zAvo5dJQz/Imk1mQsRAUs+gFvEl0rKJ2ozOc=
Subject key identifier: 1B:41:DE:3B:49:53:AF:73:66:87:AE:21:5B:AA:A0:F0:B5:C6:36:13
Authority key identifier: 6C:32:50:A5:C1:BD:AB:74:B1:BD:23:C0:1C:54:A8:D7:0B:6D:EF:20
Certificate issuer: /CN=6c3250a5c1bdab74b1bd23c01c54a8d70b6def20
Certificate serial: 01976772A8418DFBD98DC19EC78AEC3C1C6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bDJQpcG9q3SxvSPAHFSo1wtt7yA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft
Manifest number: 0D8D
Signing time: Fri 13 Jun 2025 04:00:56 +0000
Manifest this update: Fri 13 Jun 2025 04:00:56 +0000
Manifest next update: Sat 14 Jun 2025 04:00:56 +0000
Files and hashes: 1: E4Z3vbTECoIeWAX-nTU7dyjahu0.roa (hash: GRl1qEVfqwDbxNSFnBtUIIbDFbsrhFOvP3cHyBgF290=)
2: NOxJnoU4lwihn16i4CMOYrsiBKg.roa (hash: 5FYdl3/DrqY2o6XapqngUb5quoQMLJ6ufA49O6K0iqA=)
3: TRLssSByve8p7zVYSOimtplK7a0.roa (hash: 8S+o32DqiKQ6FrfFZueA3QrWJ407pI0AN9h5W+tL+lE=)
4: XBbWlDtkaQ_YQj-lOcFRZsR4QS4.roa (hash: pp7r6Abd9Ss2uZLn9bwC0PyAqi0RWKysnSc/agfhI6A=)
5: bDJQpcG9q3SxvSPAHFSo1wtt7yA.crl (hash: udI0ZeO4H3LzJD541PtVAe+5RzdlyEW82rmwJyKmx0Q=)
6: efbfkOdYHKxxnHQ3MrY1EfrtYow.roa (hash: YV9ND6Bmrzln21tu47CU3mbzCUoN6XuUoWHbkz/nF7M=)
7: ywz51nx2Az2FIOdnvxmxOqpSYZc.roa (hash: ywhzW4X8gfJWs3Te7uv4qk5K0NbexGMZNrN76iHRuoY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft
rsync://rpki.ripe.net/repository/DEFAULT/bDJQpcG9q3SxvSPAHFSo1wtt7yA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 04:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:67:72:a8:41:8d:fb:d9:8d:c1:9e:c7:8a:ec:3c:1c:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c3250a5c1bdab74b1bd23c01c54a8d70b6def20
Validity
Not Before: Jun 13 04:00:56 2025 GMT
Not After : Jun 14 04:00:56 2025 GMT
Subject: CN=1b41de3b4953af736687ae215baaa0f0b5c63613
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:58:ad:4e:95:47:e9:ed:dd:bc:ae:66:01:4c:
07:b9:25:ee:ce:79:00:fc:92:b8:58:bb:8a:31:44:
64:c7:58:6d:92:09:68:34:bb:cb:0b:ac:d6:be:e6:
07:65:64:f0:b4:03:98:ed:79:70:32:77:d7:74:d3:
ea:76:1f:5c:86:f7:d2:ff:c5:43:ce:fa:73:2d:dd:
c4:ce:69:b0:50:c9:81:ef:a3:e0:8c:d2:0c:00:aa:
7e:72:93:41:56:87:cd:84:51:19:a4:82:95:d0:e2:
93:12:c5:56:c2:cb:15:99:d8:cf:f2:21:f3:80:45:
c2:87:de:86:a4:a0:8e:c1:a9:dc:45:52:34:6c:1e:
95:54:30:bd:ec:68:72:66:e5:7c:9c:ab:0b:64:d2:
b5:09:64:a0:88:36:34:69:c7:fa:41:36:76:aa:33:
69:57:00:9a:cd:2c:65:19:be:dc:02:cb:a7:b3:33:
bd:ff:90:26:0b:d3:1a:f1:9c:b3:35:a7:e9:f1:18:
24:30:85:1c:ab:91:42:3c:c9:29:61:2e:30:69:b3:
44:9a:ae:33:25:24:be:b3:0c:29:05:80:34:72:e5:
e4:c2:cb:8e:63:17:31:2c:13:10:3b:aa:4e:06:19:
29:a0:f1:b4:a5:79:dc:50:9f:c8:12:06:46:ad:02:
9a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:41:DE:3B:49:53:AF:73:66:87:AE:21:5B:AA:A0:F0:B5:C6:36:13
X509v3 Authority Key Identifier:
keyid:6C:32:50:A5:C1:BD:AB:74:B1:BD:23:C0:1C:54:A8:D7:0B:6D:EF:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bDJQpcG9q3SxvSPAHFSo1wtt7yA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:3c:69:3f:79:13:a1:54:50:f4:41:12:f1:78:32:ff:05:ba:
ed:e3:f7:7c:41:d2:25:c9:ed:12:f8:e6:78:57:f4:d6:e5:7e:
a7:92:bf:e3:e8:8c:9e:64:0c:c5:0e:1d:68:17:b7:15:cf:fb:
10:3b:a2:6e:da:4e:d1:49:41:7d:33:c0:30:9c:3d:1d:b0:2f:
8e:53:66:88:06:0e:be:3c:49:75:1a:f7:c7:49:e6:db:91:b0:
9c:ee:2c:f8:f1:1c:f4:f9:ef:a9:15:42:4d:ba:18:ad:8e:5e:
61:90:26:fa:9e:9c:08:0a:ad:e4:7c:bc:36:54:c8:d3:82:ed:
ab:5d:92:46:da:6e:d8:2a:51:2b:35:56:19:aa:5f:16:84:6e:
ea:56:a8:7f:bf:bd:45:99:85:b2:d7:88:38:0d:40:31:72:ec:
55:20:b0:f6:18:86:62:73:7e:64:2d:9e:14:82:fb:57:6b:1d:
33:a8:f2:2f:d6:27:8c:d9:03:d9:c6:df:ce:63:a2:92:1a:e4:
ef:b8:8e:51:26:63:2d:e1:1b:53:68:85:00:06:c3:b9:ba:ab:
93:e5:d0:65:75:92:d2:4d:c2:cd:bb:eb:6f:07:19:de:ae:a1:
42:0c:26:52:35:de:6f:10:3d:02:d2:71:9e:c8:a1:79:68:16:
5b:06:6c:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 14:54:56 2025 by rpki-client