Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/e5dfe6-18bb-48a5-8622-59207d8420d0/1/bzycduKvxzzO28ngKS_7mfZec1I.mft
File: bzycduKvxzzO28ngKS_7mfZec1I.mft (raw, json)
Hash identifier: eZSSe2ZwBlsJ5jHwyuRCGXFCXwqs7MeJ3nN4Wogt1kw=
Subject key identifier: 6A:F8:8D:C4:17:76:50:55:E6:96:66:74:93:AB:A2:74:B4:35:C0:06
Authority key identifier: 6F:3C:9C:76:E2:AF:C7:3C:CE:DB:C9:E0:29:2F:FB:99:F6:5E:73:52
Certificate issuer: /CN=6f3c9c76e2afc73ccedbc9e0292ffb99f65e7352
Certificate serial: 0197530FB471578A5550C0B304754CA1D87C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bzycduKvxzzO28ngKS_7mfZec1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/e5dfe6-18bb-48a5-8622-59207d8420d0/1/bzycduKvxzzO28ngKS_7mfZec1I.mft
Manifest number: 0CDE
Signing time: Mon 09 Jun 2025 05:00:27 +0000
Manifest this update: Mon 09 Jun 2025 05:00:27 +0000
Manifest next update: Tue 10 Jun 2025 05:00:27 +0000
Files and hashes: 1: 0uWLA5mOdiy3OLJeZ1Ov94IOtqs.roa (hash: buxeJp/x66aw9yBb+1kLLqoKDBL9w3efxSEQZ/YnH08=)
2: bzycduKvxzzO28ngKS_7mfZec1I.crl (hash: IFBn7+NfomBB3rqqgQryA3Y28/peYLbkKHZQi7d6OVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/e5dfe6-18bb-48a5-8622-59207d8420d0/1/bzycduKvxzzO28ngKS_7mfZec1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/e5dfe6-18bb-48a5-8622-59207d8420d0/1/bzycduKvxzzO28ngKS_7mfZec1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/bzycduKvxzzO28ngKS_7mfZec1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:53:0f:b4:71:57:8a:55:50:c0:b3:04:75:4c:a1:d8:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f3c9c76e2afc73ccedbc9e0292ffb99f65e7352
Validity
Not Before: Jun 9 05:00:27 2025 GMT
Not After : Jun 10 05:00:27 2025 GMT
Subject: CN=6af88dc417765055e696667493aba274b435c006
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:fe:bf:1e:db:86:8d:6f:5a:8a:71:6a:0f:d9:
9e:9a:d7:5e:70:c3:bd:b8:38:77:21:48:50:89:71:
a9:aa:f8:35:99:77:18:e8:ba:1d:76:76:3c:c7:d2:
dd:a3:10:d1:b3:a0:96:86:19:85:1d:df:0c:2a:e9:
63:aa:cc:61:fb:46:f5:7b:a1:56:03:cc:cf:d3:bf:
68:e2:9a:54:21:8a:88:bc:93:55:91:c8:8a:84:6a:
a1:e4:a4:f3:c8:14:83:7d:27:91:24:01:7f:96:83:
e5:11:51:a9:40:74:24:cf:6e:ee:49:4e:fc:1d:97:
b2:79:9d:a0:90:83:a2:b3:94:c0:34:f0:6a:28:4c:
01:d4:a0:a0:10:ff:80:c1:f2:df:90:1d:7e:e1:83:
9a:84:6d:b8:e9:c4:e1:1b:46:07:97:93:2e:e4:b3:
1f:d1:a2:1d:8a:e7:d2:93:40:8d:a2:12:4f:48:43:
a0:8c:4c:76:53:74:52:75:4a:d3:e6:ed:de:c0:e5:
a9:f2:75:4e:62:5e:a8:a3:00:ad:63:c0:a5:dd:71:
f6:00:c4:a9:e4:7e:62:68:bf:ca:e8:de:8c:65:b5:
a4:6c:bc:3f:51:31:48:e6:ee:a3:24:d0:da:9d:91:
04:8a:c8:67:5a:01:c8:a0:ab:99:d5:e9:ac:56:53:
3b:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:F8:8D:C4:17:76:50:55:E6:96:66:74:93:AB:A2:74:B4:35:C0:06
X509v3 Authority Key Identifier:
keyid:6F:3C:9C:76:E2:AF:C7:3C:CE:DB:C9:E0:29:2F:FB:99:F6:5E:73:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bzycduKvxzzO28ngKS_7mfZec1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e5dfe6-18bb-48a5-8622-59207d8420d0/1/bzycduKvxzzO28ngKS_7mfZec1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e5dfe6-18bb-48a5-8622-59207d8420d0/1/bzycduKvxzzO28ngKS_7mfZec1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:cf:84:70:91:06:2f:66:00:cf:76:71:23:8b:20:5b:61:cf:
1f:4b:df:ca:ad:78:42:dc:7b:23:f9:21:40:2e:16:c5:0d:91:
fd:5a:8b:6f:e0:84:e7:f6:36:33:40:e0:07:c9:05:b8:16:f9:
ef:03:8e:32:7f:df:6d:cb:7c:84:a2:cd:93:c8:cd:a2:7c:d3:
b4:26:6c:25:67:33:a5:cf:e0:75:74:4d:c0:bb:82:04:9f:85:
e9:2f:fd:e0:c2:f3:27:29:84:e3:17:49:d7:1b:8a:17:51:91:
38:92:bf:81:77:88:35:28:0b:7f:79:b0:20:75:76:eb:7a:2e:
a5:f0:6d:ca:41:40:e0:89:bf:be:cb:ab:3d:4f:e3:36:93:0b:
0e:dc:f5:39:3a:9c:82:d2:89:51:d6:ee:32:94:36:11:7a:dd:
19:a5:a9:0c:ef:52:13:3b:60:c1:b3:19:e2:2f:a2:6d:89:42:
a4:11:42:31:fd:4e:e7:0c:ac:ea:eb:d0:ca:f9:e7:df:ed:a6:
eb:02:91:45:ac:2a:c3:ff:68:3e:c0:71:8b:07:fe:3a:63:05:
ca:b7:e3:10:73:2b:28:0f:6e:2c:8c:3d:1f:4b:72:11:f7:64:
ba:67:35:44:e6:cb:5e:be:19:18:c4:3b:06:d0:4b:4d:08:97:
ba:72:70:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 11:52:17 2025 by rpki-client