Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/d57810-446f-4cf5-bf50-20222a04d353/1/bjw2OogPxx8yLRcPdH7FKiqcwNU.mft
File: bjw2OogPxx8yLRcPdH7FKiqcwNU.mft (raw, json)
Hash identifier: Cbp7iIRPsJt911v626+VqS6Z4EDUI73w5tNFdSh/RAU=
Subject key identifier: AE:44:CA:8B:B9:BB:E0:96:37:20:AA:F7:13:27:72:1E:47:DF:07:5A
Authority key identifier: 6E:3C:36:3A:88:0F:C7:1F:32:2D:17:0F:74:7E:C5:2A:2A:9C:C0:D5
Certificate issuer: /CN=6e3c363a880fc71f322d170f747ec52a2a9cc0d5
Certificate serial: 0197518F44712690189BBAD5D1A5FB5228E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bjw2OogPxx8yLRcPdH7FKiqcwNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/d57810-446f-4cf5-bf50-20222a04d353/1/bjw2OogPxx8yLRcPdH7FKiqcwNU.mft
Manifest number: 0D95
Signing time: Sun 08 Jun 2025 22:00:32 +0000
Manifest this update: Sun 08 Jun 2025 22:00:32 +0000
Manifest next update: Mon 09 Jun 2025 22:00:32 +0000
Files and hashes: 1: bPY9ahZxxt2lvVyVwzqBcjtryAE.roa (hash: gG0UZlZzIEWrBdANAlshbEpSDSiGqX3YZm/S5ZOuqaw=)
2: bjw2OogPxx8yLRcPdH7FKiqcwNU.crl (hash: UlU6OpyegKBSJzUVYIPYSBMrIjzfIw39JrpVNe9Vaus=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/d57810-446f-4cf5-bf50-20222a04d353/1/bjw2OogPxx8yLRcPdH7FKiqcwNU.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/d57810-446f-4cf5-bf50-20222a04d353/1/bjw2OogPxx8yLRcPdH7FKiqcwNU.mft
rsync://rpki.ripe.net/repository/DEFAULT/bjw2OogPxx8yLRcPdH7FKiqcwNU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:8f:44:71:26:90:18:9b:ba:d5:d1:a5:fb:52:28:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e3c363a880fc71f322d170f747ec52a2a9cc0d5
Validity
Not Before: Jun 8 22:00:32 2025 GMT
Not After : Jun 9 22:00:32 2025 GMT
Subject: CN=ae44ca8bb9bbe0963720aaf71327721e47df075a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:75:f5:ad:63:a2:46:9a:4c:d5:87:8e:99:be:
0c:7f:18:e4:8f:db:b0:df:79:8d:45:86:06:c4:9f:
c5:31:52:cc:24:d1:b7:4b:5e:b1:03:bc:fe:6c:c5:
4f:1d:f9:b0:0d:bd:82:77:02:bb:16:be:b5:4d:01:
88:65:ce:f3:a1:6b:91:39:8f:3e:4b:c4:8d:aa:ed:
2a:fc:d6:4c:b7:55:35:ba:ce:e6:75:24:e4:c8:db:
bc:eb:54:ba:59:69:09:b7:b9:4e:97:32:98:8c:a5:
84:e9:b9:c6:03:77:ef:b4:e7:f4:bb:f0:e0:ef:74:
35:0e:6c:46:52:50:92:af:4c:4e:0b:8d:6f:3b:1d:
03:09:b6:72:7b:ac:72:47:43:aa:c5:9d:7c:14:c9:
61:73:2e:73:d6:1e:6e:0a:c5:38:69:6e:16:99:14:
49:00:a2:f9:35:df:41:ca:e8:9c:70:27:03:52:72:
b1:69:06:05:6b:d6:cf:9d:58:03:18:e2:3d:78:5a:
d4:e8:18:8f:32:7e:bc:98:81:3c:15:a8:58:df:ca:
b0:08:bd:ec:b9:68:b4:f5:82:7b:d5:98:a7:03:61:
2b:d9:a0:eb:d2:5a:96:72:7f:6d:b9:22:a2:55:59:
9a:b8:5e:f4:d9:75:a4:1d:8b:9d:28:38:63:18:6f:
37:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:44:CA:8B:B9:BB:E0:96:37:20:AA:F7:13:27:72:1E:47:DF:07:5A
X509v3 Authority Key Identifier:
keyid:6E:3C:36:3A:88:0F:C7:1F:32:2D:17:0F:74:7E:C5:2A:2A:9C:C0:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bjw2OogPxx8yLRcPdH7FKiqcwNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/d57810-446f-4cf5-bf50-20222a04d353/1/bjw2OogPxx8yLRcPdH7FKiqcwNU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/d57810-446f-4cf5-bf50-20222a04d353/1/bjw2OogPxx8yLRcPdH7FKiqcwNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:8a:61:ac:fe:3d:bf:c7:7b:7d:94:27:08:5e:7b:e1:99:7a:
3b:dd:73:f8:0a:79:c1:ea:c5:16:10:e8:a9:05:76:11:a2:29:
93:17:d7:65:ef:86:1f:d2:1c:20:a1:f3:ab:3f:7e:c2:21:4b:
8e:d4:f5:62:53:c8:08:91:8f:41:82:b6:ff:2c:22:ab:2a:f3:
74:63:f3:f2:4d:d1:a2:c0:e5:69:81:83:89:7e:19:c3:e8:54:
80:87:e2:6a:17:2b:7f:34:66:e0:1a:0a:7e:5e:07:a2:77:6b:
3f:97:86:a2:8a:b5:9c:73:e6:59:68:6a:ab:10:e9:34:36:f9:
6c:7f:68:f0:3f:8c:c9:d2:99:89:dc:04:8a:34:5e:9e:b4:c7:
ce:cf:ef:09:2f:b5:9e:a6:69:a5:30:64:4c:27:08:66:5a:bb:
b1:55:1a:aa:5b:ca:ec:77:fd:cf:77:89:95:ec:6a:18:02:31:
e5:b0:fa:b1:7f:96:f4:ca:a2:25:27:a8:92:26:72:9b:ec:70:
fa:58:75:1c:a5:9b:49:ca:33:3b:e5:53:13:2a:29:b3:3b:fa:
4f:65:a9:33:28:95:62:de:ee:6d:26:d7:35:7a:92:ea:57:90:
a6:84:5d:bf:27:00:38:3d:a8:3d:17:00:fe:0b:eb:a1:71:2a:
81:2f:c5:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:37:43 2025 by rpki-client