Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/f1c375-41da-4ea6-acd1-09bc92d4ed96/1/bd1C_9t-gncCPxAZtVT-sZ9cPyM.mft
File: bd1C_9t-gncCPxAZtVT-sZ9cPyM.mft (raw, json)
Hash identifier: ct1n+s5/XKCvsGkOfdsVqgIZlpKGhEKS2fvGW+IehWU=
Subject key identifier: 4E:21:DF:AD:70:79:F6:24:76:19:1E:90:42:4B:AD:E6:22:60:6E:03
Authority key identifier: 6D:DD:42:FF:DB:7E:82:77:02:3F:10:19:B5:54:FE:B1:9F:5C:3F:23
Certificate issuer: /CN=6ddd42ffdb7e8277023f1019b554feb19f5c3f23
Certificate serial: 0197488D3D8A58EB7538626CF3BD4F976EB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bd1C_9t-gncCPxAZtVT-sZ9cPyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/f1c375-41da-4ea6-acd1-09bc92d4ed96/1/bd1C_9t-gncCPxAZtVT-sZ9cPyM.mft
Manifest number: 03F3
Signing time: Sat 07 Jun 2025 04:01:45 +0000
Manifest this update: Sat 07 Jun 2025 04:01:45 +0000
Manifest next update: Sun 08 Jun 2025 04:01:45 +0000
Files and hashes: 1: KNlHZhzvj3c5evx_WYZ3PPymDMg.roa (hash: VIooQbblCXzCvlc89EdzqvODc1G/is8eypm36M8wtX0=)
2: bd1C_9t-gncCPxAZtVT-sZ9cPyM.crl (hash: vMCT4u9iKt1Bs+TXbVODqCoCsFoijeiLtwYdCdbKxmg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/f1c375-41da-4ea6-acd1-09bc92d4ed96/1/bd1C_9t-gncCPxAZtVT-sZ9cPyM.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/f1c375-41da-4ea6-acd1-09bc92d4ed96/1/bd1C_9t-gncCPxAZtVT-sZ9cPyM.mft
rsync://rpki.ripe.net/repository/DEFAULT/bd1C_9t-gncCPxAZtVT-sZ9cPyM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8d:3d:8a:58:eb:75:38:62:6c:f3:bd:4f:97:6e:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddd42ffdb7e8277023f1019b554feb19f5c3f23
Validity
Not Before: Jun 7 04:01:45 2025 GMT
Not After : Jun 8 04:01:45 2025 GMT
Subject: CN=4e21dfad7079f62476191e90424bade622606e03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0b:42:2d:c4:d7:a5:6e:27:58:a5:f7:3d:24:
86:cd:ac:68:77:59:7f:11:ce:7d:e1:8a:31:86:9c:
eb:f4:ed:5e:f5:17:25:9a:d9:6a:df:e4:f7:db:df:
a2:1b:47:56:e0:50:46:ee:5c:3b:3d:5d:22:52:31:
34:42:47:6e:e1:45:1a:ce:be:f9:5f:b1:7d:37:d4:
ce:04:d2:9d:1c:86:03:12:c7:7f:29:b3:b5:11:72:
30:7a:b7:f9:ad:1e:eb:d5:2b:22:03:49:9d:e0:e7:
19:67:91:38:f4:2c:4f:19:af:00:85:dc:11:4c:ff:
0c:ea:b8:c2:a2:f4:0c:e9:42:dc:39:35:07:99:37:
9f:29:f9:f6:e8:0b:dd:ce:24:f5:be:68:df:b1:4e:
7e:02:f2:d7:19:51:1d:3c:01:98:e4:f1:90:5c:b1:
34:eb:b4:16:3e:c8:e1:1b:76:1f:e3:df:4a:e5:be:
9e:84:0d:d2:da:ae:d6:29:93:e7:e7:33:35:a1:0a:
c9:ee:de:80:49:84:f7:4f:80:6a:0f:25:d1:39:1b:
f2:4a:73:69:fa:75:b4:87:70:28:4d:fb:09:36:6e:
33:f2:27:98:3d:fb:c7:38:16:28:67:24:7c:02:c3:
36:97:6d:f8:bc:8d:41:4e:cc:89:59:2d:c0:56:9c:
cd:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:21:DF:AD:70:79:F6:24:76:19:1E:90:42:4B:AD:E6:22:60:6E:03
X509v3 Authority Key Identifier:
keyid:6D:DD:42:FF:DB:7E:82:77:02:3F:10:19:B5:54:FE:B1:9F:5C:3F:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd1C_9t-gncCPxAZtVT-sZ9cPyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f1c375-41da-4ea6-acd1-09bc92d4ed96/1/bd1C_9t-gncCPxAZtVT-sZ9cPyM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f1c375-41da-4ea6-acd1-09bc92d4ed96/1/bd1C_9t-gncCPxAZtVT-sZ9cPyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:49:33:29:3f:3d:ef:bf:98:fa:c5:01:4b:63:5a:6a:ba:6e:
b1:10:b5:a0:7e:05:f8:98:9b:7f:51:1b:ab:ef:d7:94:aa:62:
52:66:b1:11:f3:dd:2f:78:23:49:eb:18:f9:cd:f2:83:65:b9:
2e:76:0a:4d:4a:97:2f:04:ef:5c:01:ea:9c:85:9e:59:a5:c2:
82:32:5b:33:03:fd:02:60:89:27:dc:a6:5e:95:f8:93:95:f5:
4f:9e:21:b5:0e:56:d4:d5:09:1a:43:34:5a:24:48:fc:07:92:
79:5f:0c:96:43:d7:0c:04:e0:37:84:91:e4:8f:12:de:32:86:
86:66:46:4a:e7:a5:e8:61:3f:a3:a1:9d:2c:3d:19:f5:a7:43:
20:c5:30:33:12:1c:e7:92:f4:18:39:db:5a:9d:90:b1:63:3d:
ce:0c:77:5b:08:94:57:a2:38:76:b1:59:d8:00:7e:9d:02:2d:
44:80:d6:42:22:22:1f:12:11:a3:c3:fb:69:55:eb:db:6b:74:
d6:89:fa:e9:cd:16:9a:70:96:fd:9d:61:c2:25:12:af:3e:38:
e1:fb:ab:05:f2:18:81:8f:63:1a:5b:ea:c3:f2:3b:fd:ff:51:
e0:d3:63:5f:d0:fa:4b:fa:f0:58:a4:94:b6:7c:ba:12:6f:8b:
f6:b3:ec:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:02:05 2025 by rpki-client