Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/dd7764-1a58-45e6-ad83-32a60912ef40/1/bG3bcucmgpjBcUWDExu-SuTvCRY.mft
File: bG3bcucmgpjBcUWDExu-SuTvCRY.mft (raw, json)
Hash identifier: DX7GCsnKweuLUj12hwYsW9EuH9kG8zRgq0IQndH85Vo=
Subject key identifier: AD:ED:B6:53:C4:43:7B:7D:AB:17:4C:C1:66:C5:BF:E3:8D:49:3E:3B
Authority key identifier: 6C:6D:DB:72:E7:26:82:98:C1:71:45:83:13:1B:BE:4A:E4:EF:09:16
Certificate issuer: /CN=6c6ddb72e7268298c1714583131bbe4ae4ef0916
Certificate serial: 019748FAA532396DF310FD7316B74DAF3710
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bG3bcucmgpjBcUWDExu-SuTvCRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/dd7764-1a58-45e6-ad83-32a60912ef40/1/bG3bcucmgpjBcUWDExu-SuTvCRY.mft
Manifest number: 09E0
Signing time: Sat 07 Jun 2025 06:01:15 +0000
Manifest this update: Sat 07 Jun 2025 06:01:15 +0000
Manifest next update: Sun 08 Jun 2025 06:01:15 +0000
Files and hashes: 1: 29nd_dOa0jOSjO-BSVNW7WFQmeU.roa (hash: PQzBa+M3c2965MBEIUlCwMA/PPxb1gOFyUG0cf3P01E=)
2: bG3bcucmgpjBcUWDExu-SuTvCRY.crl (hash: nw7UiQSXKruO/E/XuCvXGQ4kAwTyJOjJTqQy2+oxfnA=)
3: zSoruqrv0RMRlvtEdSofVrHKUNM.roa (hash: zchVE5WsD0we5YnngEjVpAF61yVGUwwg3Aq8gS0jfiI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/dd7764-1a58-45e6-ad83-32a60912ef40/1/bG3bcucmgpjBcUWDExu-SuTvCRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/dd7764-1a58-45e6-ad83-32a60912ef40/1/bG3bcucmgpjBcUWDExu-SuTvCRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bG3bcucmgpjBcUWDExu-SuTvCRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:a5:32:39:6d:f3:10:fd:73:16:b7:4d:af:37:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c6ddb72e7268298c1714583131bbe4ae4ef0916
Validity
Not Before: Jun 7 06:01:15 2025 GMT
Not After : Jun 8 06:01:15 2025 GMT
Subject: CN=adedb653c4437b7dab174cc166c5bfe38d493e3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:da:12:95:29:b9:12:d9:3c:f0:15:b3:8a:84:
41:83:b3:a9:3c:9a:22:17:84:0f:8d:8c:0a:d4:32:
a5:5b:2a:2f:64:44:c6:cb:96:a5:ca:bc:05:39:f6:
a1:4b:d0:e9:30:d7:95:d8:34:61:ea:b6:b9:50:ac:
73:d4:39:75:3b:cb:d8:64:42:34:26:bf:a3:44:f9:
d2:ef:b5:f1:dc:ea:ab:a8:14:88:9e:e5:a5:39:9b:
96:99:e3:01:2e:2d:9c:97:2d:f2:b9:64:23:0e:ec:
05:75:c5:a6:36:80:d8:4b:4e:ab:37:72:69:0f:1e:
3f:4e:28:6f:54:b5:bc:f8:bc:dd:6e:25:4e:4f:07:
45:a1:0d:39:dc:f1:05:e4:5c:c7:30:84:ff:c4:c7:
a7:c3:d5:e7:ea:3f:98:ef:4c:ff:24:c9:89:ab:bf:
de:d6:c9:fe:1d:0e:74:74:48:64:4a:ef:c4:76:11:
56:a2:80:bd:d4:d2:ee:73:73:5d:2a:ef:a4:87:8d:
bf:0a:52:12:37:31:f3:4a:e3:68:d6:93:3e:24:0a:
99:c0:49:e9:27:c4:84:66:d8:0d:04:c4:6c:e5:11:
a2:43:9e:cd:18:df:e6:ff:bd:56:70:86:cf:99:78:
a0:41:24:4b:13:4d:fc:74:07:6a:6a:0e:4f:d0:1e:
da:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:ED:B6:53:C4:43:7B:7D:AB:17:4C:C1:66:C5:BF:E3:8D:49:3E:3B
X509v3 Authority Key Identifier:
keyid:6C:6D:DB:72:E7:26:82:98:C1:71:45:83:13:1B:BE:4A:E4:EF:09:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bG3bcucmgpjBcUWDExu-SuTvCRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/dd7764-1a58-45e6-ad83-32a60912ef40/1/bG3bcucmgpjBcUWDExu-SuTvCRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/dd7764-1a58-45e6-ad83-32a60912ef40/1/bG3bcucmgpjBcUWDExu-SuTvCRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:d2:c3:c2:ad:c7:c6:19:a7:b1:87:59:42:d5:ee:71:dd:19:
36:78:e0:e7:d5:ea:b6:0a:27:9c:59:5d:c3:b8:24:f6:d8:b3:
34:d4:35:7e:03:34:cc:e2:f1:54:7a:0d:a5:8a:60:d0:41:59:
06:92:61:7b:46:c4:c0:e6:9a:d3:9e:c3:6b:05:93:db:cb:9d:
b3:66:26:8f:e0:fb:8b:88:d2:df:ad:cb:c3:6e:92:88:e5:14:
1f:8d:af:14:1c:d0:d0:b6:22:e3:8d:bb:73:2b:09:38:c8:01:
79:d2:6a:4b:d7:43:58:cc:31:f8:6b:c9:4f:54:5f:a1:8c:cf:
bf:75:4c:78:95:6c:00:72:dd:ae:da:b5:53:9f:8f:9c:af:5d:
f6:0a:ab:f0:83:81:30:8d:db:04:2a:64:4f:eb:c0:e4:78:f9:
74:83:48:fc:eb:f1:d8:86:c9:0b:e5:be:6c:57:65:9e:1a:de:
99:5f:96:36:a9:d1:9e:66:b5:13:15:b5:a4:26:a7:36:40:cc:
5d:81:99:9f:77:3d:ca:f8:f0:5c:8b:4f:5b:d1:1f:ae:36:21:
7f:ca:ad:d2:6e:08:7f:79:15:25:85:23:62:90:d6:9f:92:86:
02:75:61:49:16:e0:ed:d6:18:23:b3:27:48:73:bc:45:6b:d5:
fa:4d:f8:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:26:03 2025 by rpki-client