Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/c978db-6569-4544-8197-ce6b7c9d559b/1/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.mft
File: bS9Y5jbYux3RA5bIJE3BGSFeeRQ.mft (raw, json)
Hash identifier: Zq6JqyojE4g1/m0UQPKZGwSAdjV2jCxTIyQVnsqqr/M=
Subject key identifier: 3F:6E:3B:1B:E2:99:69:92:E1:4B:95:56:CF:FD:9D:39:6E:00:D5:94
Authority key identifier: 6D:2F:58:E6:36:D8:BB:1D:D1:03:96:C8:24:4D:C1:19:21:5E:79:14
Certificate issuer: /CN=6d2f58e636d8bb1dd10396c8244dc119215e7914
Certificate serial: 019749D58AF51D7F72A32A335AD14ADEC6E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/c978db-6569-4544-8197-ce6b7c9d559b/1/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.mft
Manifest number: 1276
Signing time: Sat 07 Jun 2025 10:00:20 +0000
Manifest this update: Sat 07 Jun 2025 10:00:20 +0000
Manifest next update: Sun 08 Jun 2025 10:00:20 +0000
Files and hashes: 1: HlthH4j3pMmbo-FQP8AAkjQIPT4.roa (hash: 6d+RLZMl6NuFQdB3HSTDyU49VQw+vA1/721iQn3fpGo=)
2: bS9Y5jbYux3RA5bIJE3BGSFeeRQ.crl (hash: 6bmoR50ZzrqzIUYQQbgUPrP2OZadrROzQ1ax6YXDJ7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/c978db-6569-4544-8197-ce6b7c9d559b/1/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/c978db-6569-4544-8197-ce6b7c9d559b/1/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d5:8a:f5:1d:7f:72:a3:2a:33:5a:d1:4a:de:c6:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d2f58e636d8bb1dd10396c8244dc119215e7914
Validity
Not Before: Jun 7 10:00:20 2025 GMT
Not After : Jun 8 10:00:20 2025 GMT
Subject: CN=3f6e3b1be2996992e14b9556cffd9d396e00d594
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:25:d2:85:ca:b7:6e:df:83:bb:f7:e9:6d:91:
30:dc:bf:20:40:9f:6d:32:f1:5d:a6:12:fd:41:96:
2e:41:04:ee:27:aa:7c:62:51:8d:4f:d7:34:b2:37:
d2:e6:d2:b7:30:8c:8a:12:df:4f:3c:03:97:71:86:
f4:76:88:4e:aa:c3:60:13:62:44:3e:db:9e:64:d1:
b8:15:2e:b3:f8:18:f3:06:b8:26:03:74:51:25:d0:
9b:37:31:fe:27:29:5b:bb:5d:9e:02:c3:af:9e:f5:
a1:67:05:e5:dc:a4:ac:27:43:6d:d6:38:dd:6c:47:
a0:64:51:87:6d:f2:26:a8:ba:cb:d2:a9:88:0a:3d:
76:bd:0d:66:32:27:10:57:fb:f8:ce:89:bd:a8:b4:
ee:1a:76:67:74:69:d9:32:34:b3:15:5a:01:4a:c6:
8c:9d:72:99:82:ac:0d:80:d9:58:91:21:b9:8e:ab:
5d:52:5a:da:1b:67:c7:5b:f3:4b:c9:a2:a9:66:d8:
d3:5e:b8:7a:55:96:19:e5:5f:9e:89:01:6c:29:7e:
75:1e:cf:6a:e0:d6:86:1f:e1:5f:eb:ae:09:17:21:
49:e1:e8:6b:3b:97:58:80:9d:4a:f9:e0:5f:56:bc:
d7:30:76:9f:81:b4:a3:62:82:b4:90:aa:ce:61:e3:
b4:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:6E:3B:1B:E2:99:69:92:E1:4B:95:56:CF:FD:9D:39:6E:00:D5:94
X509v3 Authority Key Identifier:
keyid:6D:2F:58:E6:36:D8:BB:1D:D1:03:96:C8:24:4D:C1:19:21:5E:79:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c978db-6569-4544-8197-ce6b7c9d559b/1/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/c978db-6569-4544-8197-ce6b7c9d559b/1/bS9Y5jbYux3RA5bIJE3BGSFeeRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:24:5b:6f:1d:54:fe:c3:7f:37:36:d5:cb:e8:f9:6c:b6:60:
f6:9f:aa:4a:a4:52:e2:02:44:a1:2e:79:e8:11:48:03:53:52:
3e:10:d5:94:26:31:01:34:32:69:69:c3:1f:dd:71:f1:76:2c:
93:8c:a6:41:97:1e:ef:f8:99:c1:1a:68:d1:f7:72:aa:08:98:
93:1f:e5:c5:d6:f0:16:ba:69:a1:b8:0b:1f:dc:9d:e1:48:24:
df:c0:4a:b2:58:03:53:f0:09:31:05:0d:aa:46:21:ad:1b:ae:
4c:0b:9d:0b:5f:14:7d:31:17:f0:ee:74:78:ba:31:fe:bc:eb:
58:d7:ce:1f:35:0f:6e:a9:87:5f:b7:fd:cf:66:c7:1f:b2:0b:
f3:94:aa:1e:69:db:91:b2:6a:03:37:0a:82:e3:1d:64:7f:64:
5e:3b:f6:14:29:c2:06:3c:94:7a:c0:da:39:4b:5a:b6:3c:87:
dc:c4:e6:e6:66:bc:1a:04:2f:12:1c:05:da:34:7a:fe:cd:85:
f9:94:53:04:76:32:ac:ad:5b:88:27:13:f6:c3:4c:a7:87:ad:
d9:b6:dd:e7:c8:0c:7a:d0:7f:dd:25:51:e1:89:56:8d:42:bb:
2b:df:74:bb:8b:5a:7c:fd:38:c3:17:24:34:0a:96:b3:2d:70:
08:98:54:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:36:40 2025 by rpki-client