Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/05e0ee-ae03-4124-b670-309b7b960d14/1/bz2JqB_CmfOcCS5PbQFzqanPvGU.mft
File: bz2JqB_CmfOcCS5PbQFzqanPvGU.mft (raw, json)
Hash identifier: 6CpIfNSYov+bssfK+DfzSL08/dvhWJlJTnK6/TJjgao=
Subject key identifier: FC:54:A8:51:24:51:5E:C7:26:C0:9B:96:29:E3:54:11:53:9C:12:69
Authority key identifier: 6F:3D:89:A8:1F:C2:99:F3:9C:09:2E:4F:6D:01:73:A9:A9:CF:BC:65
Certificate issuer: /CN=6f3d89a81fc299f39c092e4f6d0173a9a9cfbc65
Certificate serial: 01974666DA5032D495E0242E88FD93268536
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bz2JqB_CmfOcCS5PbQFzqanPvGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/05e0ee-ae03-4124-b670-309b7b960d14/1/bz2JqB_CmfOcCS5PbQFzqanPvGU.mft
Manifest number: 1581
Signing time: Fri 06 Jun 2025 18:00:35 +0000
Manifest this update: Fri 06 Jun 2025 18:00:35 +0000
Manifest next update: Sat 07 Jun 2025 18:00:35 +0000
Files and hashes: 1: _OBCt42Qgl4wI2H058mG4uDYUOw.roa (hash: jWbxYRFs270K2f9wkh6LdpAj2cDPsQg7s0mhGOvBxRQ=)
2: bz2JqB_CmfOcCS5PbQFzqanPvGU.crl (hash: byb+wu7inVKLgQHUEaJlK8abpNlQUPuiY7ssQUcWMoE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/05e0ee-ae03-4124-b670-309b7b960d14/1/bz2JqB_CmfOcCS5PbQFzqanPvGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/05e0ee-ae03-4124-b670-309b7b960d14/1/bz2JqB_CmfOcCS5PbQFzqanPvGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/bz2JqB_CmfOcCS5PbQFzqanPvGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:66:da:50:32:d4:95:e0:24:2e:88:fd:93:26:85:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f3d89a81fc299f39c092e4f6d0173a9a9cfbc65
Validity
Not Before: Jun 6 18:00:35 2025 GMT
Not After : Jun 7 18:00:35 2025 GMT
Subject: CN=fc54a85124515ec726c09b9629e35411539c1269
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:ab:f7:32:46:29:88:79:c9:79:33:26:d5:22:
2b:a1:d0:00:64:2f:0a:91:5a:11:07:9f:0c:73:ac:
f8:cf:6b:97:83:50:be:e4:05:5a:7a:ae:7f:f5:5a:
59:8e:88:7c:76:92:e4:5d:c0:29:2c:20:89:09:df:
a6:3a:e9:35:84:e5:0c:d4:7e:ab:42:6e:9b:4b:e0:
0b:d3:6b:f2:a4:f1:75:c7:f9:a3:c1:ad:21:b1:4f:
96:bf:8d:df:aa:80:8c:10:67:07:df:a3:0c:55:ef:
3d:90:0e:6a:10:2e:38:f0:0b:08:72:b1:e6:24:3f:
05:df:26:bf:4c:da:f6:9e:51:49:6b:3f:f9:aa:c7:
19:42:2c:7c:98:2f:49:01:05:de:70:d2:df:f9:3d:
bf:60:79:b3:8a:75:08:18:66:29:94:14:11:ca:57:
97:3d:47:e2:74:46:25:c6:4e:83:d6:1d:a9:90:f2:
7f:41:61:c5:4d:96:8d:38:a3:15:6b:02:ff:62:9a:
a0:37:fb:d7:2c:c4:11:9f:fc:52:ae:8e:b1:80:d3:
55:5c:8c:e0:2f:54:6d:1a:9c:8d:13:f0:f6:96:fe:
3f:12:82:1e:02:f2:8e:90:ce:06:a8:34:d8:2f:f2:
27:19:bd:04:b4:40:77:78:95:83:f5:3e:4e:f6:f4:
ee:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:54:A8:51:24:51:5E:C7:26:C0:9B:96:29:E3:54:11:53:9C:12:69
X509v3 Authority Key Identifier:
keyid:6F:3D:89:A8:1F:C2:99:F3:9C:09:2E:4F:6D:01:73:A9:A9:CF:BC:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bz2JqB_CmfOcCS5PbQFzqanPvGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/05e0ee-ae03-4124-b670-309b7b960d14/1/bz2JqB_CmfOcCS5PbQFzqanPvGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/05e0ee-ae03-4124-b670-309b7b960d14/1/bz2JqB_CmfOcCS5PbQFzqanPvGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:42:a6:01:84:69:76:16:d1:5c:7a:bf:51:12:b3:8b:6d:e9:
6f:3f:05:47:0f:e8:74:cc:ee:26:a1:a2:ef:7a:39:f4:78:7a:
9d:18:22:c8:c1:cb:b4:82:88:6e:67:cf:9d:8d:1f:d9:c6:50:
44:48:8e:da:84:20:22:28:b0:52:f3:0b:a4:10:4d:31:77:6a:
6f:3b:ac:91:8b:8a:74:e8:02:55:13:0b:55:b3:eb:82:95:71:
e1:ea:54:cd:34:52:3e:0f:88:62:d2:bc:2c:46:df:33:ea:33:
08:25:d4:7b:4c:f6:64:6d:af:a3:e7:63:49:e9:85:c4:fa:90:
0f:19:03:32:10:e4:ec:6c:2a:31:29:38:1c:4a:c0:b7:fc:24:
5f:8b:31:6e:a8:58:75:3e:00:e8:c9:63:70:91:4b:7b:ca:ae:
ad:9e:b6:1d:08:9c:75:e8:24:cc:38:36:e0:9b:df:91:68:dc:
7a:55:8d:0f:8b:a9:d5:ea:b9:1d:47:e8:49:d7:75:e8:b4:e0:
22:b2:4a:2b:61:e7:f4:da:dd:f1:c0:21:d0:5d:5f:47:2d:2c:
cb:df:cc:7a:7d:c9:ce:f0:27:79:b7:86:73:b5:ce:c0:4d:9d:
cb:78:2b:a7:86:37:3e:34:65:1c:fe:1f:14:0a:a1:c1:68:30:
42:12:6d:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:29:23 2025 by rpki-client