Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/05881c-2aa5-42e4-84b8-7ac3ca1f357d/1/bkCd70qKicqI9XGCxS7W1w-5GXY.mft
File: bkCd70qKicqI9XGCxS7W1w-5GXY.mft (raw, json)
Hash identifier: Jl4yKn4PQ7bPEX1U88/S53A61oyJlxg4uKdZK+uSeGc=
Subject key identifier: 43:A2:65:FC:AA:62:F4:0C:6F:4E:69:BE:44:AE:AD:15:B6:CE:23:27
Authority key identifier: 6E:40:9D:EF:4A:8A:89:CA:88:F5:71:82:C5:2E:D6:D7:0F:B9:19:76
Certificate issuer: /CN=6e409def4a8a89ca88f57182c52ed6d70fb91976
Certificate serial: 019748551D0A3C7B5287D771E5584FD75306
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bkCd70qKicqI9XGCxS7W1w-5GXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/05881c-2aa5-42e4-84b8-7ac3ca1f357d/1/bkCd70qKicqI9XGCxS7W1w-5GXY.mft
Manifest number: 157C
Signing time: Sat 07 Jun 2025 03:00:26 +0000
Manifest this update: Sat 07 Jun 2025 03:00:26 +0000
Manifest next update: Sun 08 Jun 2025 03:00:26 +0000
Files and hashes: 1: 1-OsNCAIB8BtnJpCmSk5vs9AfqRw.roa (hash: rov7VSnSSae/bJ4kPmKmJWJ9MKvyKBsrk/qcPi6/iFE=)
2: 9J9PrXmCNB--oR4MRGOzZcKbWlw.roa (hash: 8ukYcG1/HqvKX0B3kiFSlIN1cfw+XxyIB9UHL+2qKP8=)
3: bkCd70qKicqI9XGCxS7W1w-5GXY.crl (hash: 5kImSW2LokCk1p+Y8vXVtpeBRceIBzDWQS+FB/Czkr4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/05881c-2aa5-42e4-84b8-7ac3ca1f357d/1/bkCd70qKicqI9XGCxS7W1w-5GXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/05881c-2aa5-42e4-84b8-7ac3ca1f357d/1/bkCd70qKicqI9XGCxS7W1w-5GXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bkCd70qKicqI9XGCxS7W1w-5GXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:55:1d:0a:3c:7b:52:87:d7:71:e5:58:4f:d7:53:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e409def4a8a89ca88f57182c52ed6d70fb91976
Validity
Not Before: Jun 7 03:00:26 2025 GMT
Not After : Jun 8 03:00:26 2025 GMT
Subject: CN=43a265fcaa62f40c6f4e69be44aead15b6ce2327
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:93:47:3a:02:c8:db:26:b0:ae:62:e9:17:72:
36:69:eb:04:18:a2:1c:d1:82:36:6f:62:b7:70:3f:
f4:2b:47:63:c7:42:59:68:0d:9e:db:9b:db:a8:d6:
81:e7:ee:15:aa:7e:3f:6a:b6:b7:a5:86:0a:34:75:
6a:20:18:8c:d5:00:c8:0e:f0:74:c5:7a:53:dc:a0:
9e:05:ef:32:e7:85:c1:3a:7b:ab:80:d0:dd:ee:8d:
46:ab:4e:26:69:76:3c:ca:f1:03:0e:f9:b5:76:0e:
ef:6b:1e:cc:86:52:b5:ab:57:67:00:24:00:43:36:
2b:4c:e3:68:45:d2:e7:52:0e:bb:85:41:85:1d:39:
26:b9:78:8c:71:df:e0:71:50:e6:bd:68:cf:3a:36:
3a:69:8a:5a:ab:5e:62:6a:b6:21:b2:59:c9:3a:33:
f4:ea:9c:44:87:59:99:29:0b:c0:48:a6:e1:b3:70:
43:47:1d:e7:13:c0:7d:19:55:a7:7c:89:ee:17:97:
49:74:c0:31:08:8b:91:41:4c:49:ec:ed:69:09:5f:
e1:e8:b2:bd:14:55:2f:87:23:4d:f5:7c:c2:53:d3:
06:ad:e2:d3:b8:8c:c9:e2:94:90:bb:05:be:e1:d8:
18:37:c6:38:56:a3:82:47:de:27:f4:0a:3f:e5:df:
89:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:A2:65:FC:AA:62:F4:0C:6F:4E:69:BE:44:AE:AD:15:B6:CE:23:27
X509v3 Authority Key Identifier:
keyid:6E:40:9D:EF:4A:8A:89:CA:88:F5:71:82:C5:2E:D6:D7:0F:B9:19:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bkCd70qKicqI9XGCxS7W1w-5GXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/05881c-2aa5-42e4-84b8-7ac3ca1f357d/1/bkCd70qKicqI9XGCxS7W1w-5GXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/05881c-2aa5-42e4-84b8-7ac3ca1f357d/1/bkCd70qKicqI9XGCxS7W1w-5GXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:c0:2c:c5:2a:a1:dc:42:05:38:c8:e9:92:dc:3a:f2:a0:04:
99:95:72:5c:41:f5:98:af:e8:e7:9a:09:d2:54:72:24:b6:68:
d5:91:1d:e0:35:c6:57:0e:fb:9d:35:9e:0a:ec:ce:c5:82:df:
8e:dd:2e:80:be:da:c3:ea:1c:87:d7:b4:a7:ed:e1:e6:40:a4:
f9:09:3e:dc:dc:12:4d:ff:24:bd:ac:e1:ce:b4:88:4c:c0:38:
d0:f1:ba:56:5a:45:4e:6b:c3:14:75:52:98:4f:4f:37:0a:0c:
6d:5f:93:7d:08:0e:cb:cc:f0:a2:55:c3:a7:f8:6b:b8:32:6b:
1c:88:d4:cd:cc:24:0e:b4:f7:5b:f0:e9:4f:66:a8:1f:b4:ae:
dc:a0:08:ac:c7:27:03:aa:2d:03:98:03:c1:e8:7d:3d:4a:0e:
b1:a6:40:26:49:b7:3b:f5:39:c2:99:7d:2f:8a:e1:3c:62:ce:
67:50:de:f7:15:47:79:ee:a4:ee:10:ce:dc:77:65:15:c9:40:
88:6f:61:87:01:76:20:28:2d:ad:e1:15:06:c4:09:ad:10:8f:
5b:b6:f9:50:0d:79:cb:7a:20:3d:44:53:88:1a:4a:ac:ae:18:
86:d0:86:a1:3e:05:56:88:55:75:9b:ed:76:ab:aa:96:01:a1:
6c:c5:81:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:24:04 2025 by rpki-client