Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/344e2c-1c56-43ab-8108-eaf68b59e599/1/bP02Bzbx-myXcPy0i-WUvmCeWz4.mft
File: bP02Bzbx-myXcPy0i-WUvmCeWz4.mft (raw, json)
Hash identifier: 9aCgpik3Zp60LTKQTLX0xKP9frKfFLNgQsGLNIGVMmc=
Subject key identifier: 9D:16:40:47:FF:2A:F9:81:C9:36:2B:BD:B1:CE:CE:DC:54:2F:2B:A4
Authority key identifier: 6C:FD:36:07:36:F1:FA:6C:97:70:FC:B4:8B:E5:94:BE:60:9E:5B:3E
Certificate issuer: /CN=6cfd360736f1fa6c9770fcb48be594be609e5b3e
Certificate serial: 01974A7B25D08340D42C2AB726F9EB47AAE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bP02Bzbx-myXcPy0i-WUvmCeWz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/344e2c-1c56-43ab-8108-eaf68b59e599/1/bP02Bzbx-myXcPy0i-WUvmCeWz4.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 13:01:13 +0000
Manifest this update: Sat 07 Jun 2025 13:01:13 +0000
Manifest next update: Sun 08 Jun 2025 13:01:13 +0000
Files and hashes: 1: DC68jaJzKs4sWOyzS3O5wTgtZNE.roa (hash: 1O1Vjs/w38AlpgFvrtScFHTsBaANSIlvVfPi7Rtab9k=)
2: Pp9dfiM_MT5SdF1T82CtQd0OZJw.roa (hash: h3fdCt6Okubry0k+FISuRK++uR3zvuFiodlZnV6ykfI=)
3: bP02Bzbx-myXcPy0i-WUvmCeWz4.crl (hash: 6HlQ6tP0vghF6ePM3McpLvUnXBtrwGWfnzYzytuS50g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/344e2c-1c56-43ab-8108-eaf68b59e599/1/bP02Bzbx-myXcPy0i-WUvmCeWz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/344e2c-1c56-43ab-8108-eaf68b59e599/1/bP02Bzbx-myXcPy0i-WUvmCeWz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/bP02Bzbx-myXcPy0i-WUvmCeWz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 13:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7b:25:d0:83:40:d4:2c:2a:b7:26:f9:eb:47:aa:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cfd360736f1fa6c9770fcb48be594be609e5b3e
Validity
Not Before: Jun 7 13:01:13 2025 GMT
Not After : Jun 8 13:01:13 2025 GMT
Subject: CN=9d164047ff2af981c9362bbdb1cecedc542f2ba4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:09:16:a3:55:4d:b1:7c:7f:86:38:de:c6:4f:
4d:ab:3d:70:07:4c:ef:d6:7f:94:4f:0b:8f:86:a4:
94:ec:a8:30:bb:3a:7e:b5:fa:08:ea:6b:29:88:f7:
aa:76:42:20:04:ea:9b:95:51:e8:20:db:5f:0f:9b:
90:cb:85:1b:22:03:50:71:94:fc:c0:82:ff:31:b6:
30:0a:ed:3d:b2:5d:46:e8:9e:4e:23:f5:e4:64:8b:
ba:c5:53:1d:c5:c8:78:76:97:e4:fc:4a:25:fc:72:
47:64:ac:45:08:aa:f7:98:36:98:fb:cb:9a:8c:0e:
fa:68:0f:68:1a:50:24:a2:cb:c9:36:8c:db:75:86:
5c:bf:bb:39:0e:62:cd:a1:ca:a1:76:f6:40:97:19:
e8:91:68:4d:5b:88:b8:08:9b:4a:f2:06:dc:85:60:
73:fa:b9:d4:60:2f:ed:26:93:c8:36:bb:b0:8a:d7:
de:49:63:5d:4b:f0:a8:a6:bb:62:76:94:91:30:a8:
5b:13:4f:60:9b:ae:d1:9e:1c:af:f3:81:d7:d9:0b:
10:fd:39:f3:1b:ef:01:fc:91:5e:23:16:05:e8:41:
12:f4:76:c9:6c:d6:87:05:57:ac:d1:5b:c3:5c:1a:
d2:6c:ae:d9:b5:b7:01:23:70:47:8f:e4:6b:b7:86:
f7:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:16:40:47:FF:2A:F9:81:C9:36:2B:BD:B1:CE:CE:DC:54:2F:2B:A4
X509v3 Authority Key Identifier:
keyid:6C:FD:36:07:36:F1:FA:6C:97:70:FC:B4:8B:E5:94:BE:60:9E:5B:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bP02Bzbx-myXcPy0i-WUvmCeWz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/344e2c-1c56-43ab-8108-eaf68b59e599/1/bP02Bzbx-myXcPy0i-WUvmCeWz4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/344e2c-1c56-43ab-8108-eaf68b59e599/1/bP02Bzbx-myXcPy0i-WUvmCeWz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:6c:2a:07:ea:9c:82:94:37:d0:55:b4:5f:7d:94:ba:4c:c5:
52:47:b1:e4:0b:10:d4:b7:f0:00:37:50:10:b8:d9:91:ec:a8:
f5:e6:a5:86:46:c2:a5:e9:a9:5f:85:9b:d2:92:5d:98:46:da:
c9:d5:f7:80:7f:b2:e5:dc:2c:27:4f:16:80:75:4c:4f:a1:10:
ef:f3:86:4f:15:e0:ff:94:6b:87:ef:a2:2f:77:f8:57:97:3f:
5b:8c:1d:8a:b3:12:02:52:90:50:61:61:20:1e:15:96:0a:48:
3c:12:4f:c2:0c:fe:df:1f:1b:bd:68:ee:2d:91:bc:96:d7:d8:
20:7d:d4:f1:ed:34:27:7d:d9:59:3a:fa:b8:7a:3a:ae:71:8a:
65:c2:d4:fb:20:f2:79:3a:65:94:28:31:08:c6:59:5e:01:bf:
3e:b7:76:e7:3c:5b:54:a3:c2:4b:60:69:23:1b:76:d1:94:73:
5e:b2:dc:35:29:cd:f3:df:a6:33:e8:e4:a4:a4:b0:13:eb:3a:
f2:13:a4:50:17:ad:a9:4c:e9:da:4c:00:8e:90:c4:83:28:99:
0f:6e:8a:c9:e6:21:84:b5:88:78:2f:26:d1:33:7f:7e:1d:48:
55:3a:cc:c7:53:c1:60:68:94:b8:c1:98:82:e7:04:6c:87:75:
89:79:e9:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:29:45 2025 by rpki-client