Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/c6e217-03ff-4396-adfe-255f0c51bbe0/1/BDaS8qHRvHb_f50pCRvtoIt7yWw.mft
File: BDaS8qHRvHb_f50pCRvtoIt7yWw.mft (raw, json)
Hash identifier: ds+SItYTheXHPuIMi6kTNVgERTQvANqRaevt1QR65L8=
Subject key identifier: 6E:92:04:B2:5F:CE:27:04:65:C8:76:7E:9C:31:C0:32:7E:FC:FC:EC
Authority key identifier: 04:36:92:F2:A1:D1:BC:76:FF:7F:9D:29:09:1B:ED:A0:8B:7B:C9:6C
Certificate issuer: /CN=043692f2a1d1bc76ff7f9d29091beda08b7bc96c
Certificate serial: 0197462FEBB781F4D27E3BCDDD761382469D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BDaS8qHRvHb_f50pCRvtoIt7yWw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/c6e217-03ff-4396-adfe-255f0c51bbe0/1/BDaS8qHRvHb_f50pCRvtoIt7yWw.mft
Manifest number: 157B
Signing time: Fri 06 Jun 2025 17:00:34 +0000
Manifest this update: Fri 06 Jun 2025 17:00:34 +0000
Manifest next update: Sat 07 Jun 2025 17:00:34 +0000
Files and hashes: 1: BDaS8qHRvHb_f50pCRvtoIt7yWw.crl (hash: ZiguApIYeFUhGxdnUScw5fvYO6o1oU4us5KWKJywzqY=)
2: F5ASQ_x2NzqLG2YPK-IJMnC68oA.roa (hash: rL17KB2ZeYz5uA3Maczd8dyCWpJw7h3YziKqc9PF9RM=)
3: fKRgm3J38CdqPYWraPnwaBHZfSw.roa (hash: faZcv/HNNKoTcf9eyD+mOEilysgTYS2fYEJ0tHKXiUk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/c6e217-03ff-4396-adfe-255f0c51bbe0/1/BDaS8qHRvHb_f50pCRvtoIt7yWw.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/c6e217-03ff-4396-adfe-255f0c51bbe0/1/BDaS8qHRvHb_f50pCRvtoIt7yWw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BDaS8qHRvHb_f50pCRvtoIt7yWw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:2f:eb:b7:81:f4:d2:7e:3b:cd:dd:76:13:82:46:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=043692f2a1d1bc76ff7f9d29091beda08b7bc96c
Validity
Not Before: Jun 6 17:00:34 2025 GMT
Not After : Jun 7 17:00:34 2025 GMT
Subject: CN=6e9204b25fce270465c8767e9c31c0327efcfcec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:af:ab:3a:ca:2b:37:23:2d:b9:70:ad:c0:ff:
af:0c:35:38:cd:60:f7:d8:f7:b7:b7:53:b2:96:f9:
4f:fc:d8:43:55:87:19:01:f9:2c:29:01:1d:7f:9c:
02:ee:13:a6:0e:a5:45:c2:fb:f4:10:c7:9f:29:c7:
2b:27:a1:8c:6a:99:e1:4c:a6:21:fa:4d:a6:27:e5:
13:f3:3b:cb:17:ca:5a:b3:fe:bb:e1:b0:b6:79:19:
74:97:7d:15:7c:5d:41:ef:23:64:bd:40:62:3a:b0:
9e:da:a3:6d:0f:0a:db:c7:b2:c2:f0:b3:df:49:19:
34:22:7f:10:90:66:75:14:38:00:77:90:b8:0f:3b:
70:b3:ca:b8:5c:8c:bb:3e:b5:8b:6c:e9:77:5b:19:
d0:6b:fd:45:3a:41:93:3d:5e:4e:1c:0b:41:87:c8:
1d:9d:44:ee:5d:90:e1:d8:06:1f:ce:4a:63:e8:ac:
a8:48:ea:2f:23:66:cf:1b:91:44:0e:78:5e:3e:3d:
3f:06:e1:6d:6e:4b:6c:cf:66:b1:93:31:b1:0b:59:
8b:a1:69:0a:52:e6:a5:5e:e5:c4:8e:42:04:29:a7:
c3:c8:e7:e4:32:cf:db:4d:7c:76:18:95:71:2c:50:
f0:7c:67:98:48:70:bb:18:ca:39:20:b1:ac:dd:c2:
ba:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:92:04:B2:5F:CE:27:04:65:C8:76:7E:9C:31:C0:32:7E:FC:FC:EC
X509v3 Authority Key Identifier:
keyid:04:36:92:F2:A1:D1:BC:76:FF:7F:9D:29:09:1B:ED:A0:8B:7B:C9:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BDaS8qHRvHb_f50pCRvtoIt7yWw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c6e217-03ff-4396-adfe-255f0c51bbe0/1/BDaS8qHRvHb_f50pCRvtoIt7yWw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c6e217-03ff-4396-adfe-255f0c51bbe0/1/BDaS8qHRvHb_f50pCRvtoIt7yWw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:69:00:15:04:75:be:c2:fa:0c:61:37:ab:f3:28:0f:d7:cb:
bf:6c:32:a6:13:dc:d9:ab:77:5f:d0:48:e1:60:b2:fd:c1:2d:
10:a1:74:d8:6d:a7:b3:ff:a6:80:74:31:62:97:46:dd:47:c1:
f2:8c:3c:05:18:c4:8e:c3:b5:12:2d:22:37:de:e6:2f:70:e0:
24:20:bc:54:b7:0a:b4:19:1e:af:04:8e:52:8e:3d:42:de:7d:
07:dc:bb:2c:cf:1d:0f:ca:9d:84:b2:6d:98:67:e2:bf:03:65:
04:c7:57:9e:c6:0a:08:2b:e2:b2:54:cd:dc:39:61:b4:fa:d7:
1e:40:ed:f0:cb:7d:68:1b:a5:c7:ff:01:f8:57:90:21:23:ce:
51:ac:19:27:96:d0:b6:4b:aa:90:35:d4:cc:78:d3:f6:b6:59:
b3:b3:98:f4:f7:32:d9:41:c6:09:91:d5:87:75:5e:c8:b2:8a:
e3:0e:7e:1b:cb:cc:13:e2:1a:e0:26:93:de:83:fa:04:9d:30:
80:9e:62:e6:53:eb:e2:46:1b:d5:35:a3:d4:36:cb:c4:a4:6f:
87:74:ce:88:15:34:b0:a8:2c:3b:f6:4c:d7:fe:6c:33:f0:6a:
54:1c:4a:b4:36:cf:85:ad:52:b3:53:7f:13:d7:42:7e:77:5f:
93:90:48:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:13:31 2025 by rpki-client