Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/9ca58e-9e32-428f-8411-1aeb6a4e45ad/1/bMacPXAwzsGfj7ZuVDveZVlXCKI.mft
File: bMacPXAwzsGfj7ZuVDveZVlXCKI.mft (raw, json)
Hash identifier: DzQqJrloWFf0beRaLcmdibEVncyrH4Kbns09ZoQmApM=
Subject key identifier: 2F:78:F8:B5:39:03:B2:C1:65:05:AF:81:86:43:C7:B4:0E:5B:AC:85
Authority key identifier: 6C:C6:9C:3D:70:30:CE:C1:9F:8F:B6:6E:54:3B:DE:65:59:57:08:A2
Certificate issuer: /CN=6cc69c3d7030cec19f8fb66e543bde65595708a2
Certificate serial: 01974D7BF7110CDA16DAB517A030482F1B00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bMacPXAwzsGfj7ZuVDveZVlXCKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/9ca58e-9e32-428f-8411-1aeb6a4e45ad/1/bMacPXAwzsGfj7ZuVDveZVlXCKI.mft
Manifest number: 0679
Signing time: Sun 08 Jun 2025 03:00:59 +0000
Manifest this update: Sun 08 Jun 2025 03:00:59 +0000
Manifest next update: Mon 09 Jun 2025 03:00:59 +0000
Files and hashes: 1: LRy1Su2fWLwjRlXSpxKiN2HsmOE.roa (hash: VbIoxvhdv4Kz4zlYMs8a+1GTnDDa2PQSnpokMmTeNJI=)
2: MbTvipFbe-Fro7yGscX94j34OpQ.roa (hash: lGgg0U/FzBropaPivoqmUVqyNKPQ65NR2i0gu4fF2i0=)
3: bMacPXAwzsGfj7ZuVDveZVlXCKI.crl (hash: ZYYzpW1mAi92dJCbGFK9gILREOGQ2vhmk3DqxrI3mJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/9ca58e-9e32-428f-8411-1aeb6a4e45ad/1/bMacPXAwzsGfj7ZuVDveZVlXCKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/81/9ca58e-9e32-428f-8411-1aeb6a4e45ad/1/bMacPXAwzsGfj7ZuVDveZVlXCKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/bMacPXAwzsGfj7ZuVDveZVlXCKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:7b:f7:11:0c:da:16:da:b5:17:a0:30:48:2f:1b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cc69c3d7030cec19f8fb66e543bde65595708a2
Validity
Not Before: Jun 8 03:00:59 2025 GMT
Not After : Jun 9 03:00:59 2025 GMT
Subject: CN=2f78f8b53903b2c16505af818643c7b40e5bac85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f3:20:30:fe:2f:8f:3b:59:7d:66:ad:33:36:
e5:fb:3d:a4:b3:89:47:9e:2a:b0:09:9b:0b:43:03:
fb:0b:cf:65:54:66:85:a3:5a:66:86:c0:e5:c8:b5:
a7:dc:8e:53:5c:f9:3e:5e:ae:6d:66:22:d6:77:a1:
e0:fd:4f:66:ba:d2:b4:66:93:f6:9d:3d:01:8d:e4:
5d:5f:5b:77:26:60:a7:51:53:70:0c:8a:0a:7e:c2:
2c:ed:05:18:ee:f7:04:4d:c0:89:97:ed:01:8c:e9:
c3:6e:65:80:35:6f:67:c5:16:6a:2a:84:f9:d8:d3:
5c:ad:4c:11:0e:47:4c:02:f7:f4:27:86:4f:b8:34:
31:6f:10:47:7f:d0:12:f5:22:d9:18:25:92:14:3c:
33:92:46:f6:fa:23:13:c6:44:bb:d5:fa:e6:8f:af:
cd:dd:1b:20:4a:be:0c:e1:b9:b0:6b:d0:8c:b0:76:
27:19:b1:e7:55:bf:4b:1d:52:56:2d:0d:a4:a9:89:
cd:13:99:32:55:3b:a8:bd:c9:fa:69:ea:44:e7:a5:
27:ce:91:1f:9f:0b:b4:c9:3e:4b:fd:35:4e:e1:fc:
35:be:06:19:63:8b:01:ec:4f:99:47:40:e6:60:0d:
fe:6c:f9:f6:a8:9e:3d:df:98:31:55:32:0e:53:64:
d7:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:78:F8:B5:39:03:B2:C1:65:05:AF:81:86:43:C7:B4:0E:5B:AC:85
X509v3 Authority Key Identifier:
keyid:6C:C6:9C:3D:70:30:CE:C1:9F:8F:B6:6E:54:3B:DE:65:59:57:08:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMacPXAwzsGfj7ZuVDveZVlXCKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9ca58e-9e32-428f-8411-1aeb6a4e45ad/1/bMacPXAwzsGfj7ZuVDveZVlXCKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/9ca58e-9e32-428f-8411-1aeb6a4e45ad/1/bMacPXAwzsGfj7ZuVDveZVlXCKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:77:ba:fc:49:39:ff:f0:47:a7:1e:6d:47:41:5d:92:f4:b1:
d5:29:0d:bb:5a:96:0a:bd:70:df:c0:fa:12:7d:ef:75:36:22:
f7:8c:4c:2d:6e:31:91:68:f5:46:cd:3d:1d:b5:8c:03:44:6a:
07:a8:54:94:8e:3e:91:0e:00:5e:aa:98:50:23:d0:0c:cb:fa:
5f:45:53:19:0d:b0:88:59:ab:04:3a:76:cb:fb:5b:ce:cf:25:
b8:2a:be:a3:11:99:90:b0:67:2f:39:46:ce:a5:db:20:8e:41:
36:eb:0a:b2:c6:7e:4d:7f:9e:c1:bf:11:ab:03:1f:53:9b:e0:
1a:2f:2d:38:1e:52:97:10:f0:82:1f:5e:0f:c7:6a:00:95:31:
7a:44:a9:75:c7:a8:42:25:8e:c3:46:d1:b9:ef:55:f5:5d:25:
03:b1:a5:7c:b8:88:f3:95:44:24:e7:f1:35:55:33:08:42:31:
5c:2f:52:30:c1:00:81:b5:fc:cd:19:96:35:8a:29:21:49:48:
0f:ad:cb:dd:53:72:58:d7:dc:02:29:bc:62:11:c8:91:30:9f:
7e:14:34:d7:4e:d1:5b:32:eb:ec:01:e4:e8:a7:30:74:4b:3f:
43:8f:a5:1b:e6:89:94:fc:a6:d8:f3:6a:21:84:af:d7:ab:72:
4f:27:fe:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:26:55 2025 by rpki-client