Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/316c8f-5e36-471f-9555-f6297a77a37b/1/bd2PHjjJH1sXw9GnI05JyccNwyQ.mft
File: bd2PHjjJH1sXw9GnI05JyccNwyQ.mft (raw, json)
Hash identifier: S+Bk2LNhgjzTs2pxHHu416+TBlu/oFTsxYC2dSoov7k=
Subject key identifier: FC:20:6C:CF:8A:5D:80:FE:21:27:30:3B:0A:7C:4D:9B:73:F2:06:E0
Authority key identifier: 6D:DD:8F:1E:38:C9:1F:5B:17:C3:D1:A7:23:4E:49:C9:C7:0D:C3:24
Certificate issuer: /CN=6ddd8f1e38c91f5b17c3d1a7234e49c9c70dc324
Certificate serial: 019751FD8CCAC002B3910FC3B271A191AFCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bd2PHjjJH1sXw9GnI05JyccNwyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/316c8f-5e36-471f-9555-f6297a77a37b/1/bd2PHjjJH1sXw9GnI05JyccNwyQ.mft
Manifest number: 1582
Signing time: Mon 09 Jun 2025 00:01:00 +0000
Manifest this update: Mon 09 Jun 2025 00:01:00 +0000
Manifest next update: Tue 10 Jun 2025 00:01:00 +0000
Files and hashes: 1: BKts92Cgp762t7JNofBM7L5uftM.roa (hash: WTNLkBIvgvxJFEXIWZr47BOElViaMRJym9HooD5Dr3Q=)
2: bd2PHjjJH1sXw9GnI05JyccNwyQ.crl (hash: W5Xr8QHw9Q3M0WJPKjImwx+fDuvQOSdPi2y11Io7/Jo=)
3: jypSqMvt2NprsB0DoEFG-cYXk3g.roa (hash: 20GE86V+BpBjF8cWsWZrxYRlzb0k0GNnTKWyu1nZsto=)
4: z53iYrx_shu0WdCaV4v6ZXfJyfA.roa (hash: ySckjx3fnBbjiCnJf7c10h+wH/jcKQr5e8Rmhk0EXE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/316c8f-5e36-471f-9555-f6297a77a37b/1/bd2PHjjJH1sXw9GnI05JyccNwyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/316c8f-5e36-471f-9555-f6297a77a37b/1/bd2PHjjJH1sXw9GnI05JyccNwyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/bd2PHjjJH1sXw9GnI05JyccNwyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 00:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:fd:8c:ca:c0:02:b3:91:0f:c3:b2:71:a1:91:af:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddd8f1e38c91f5b17c3d1a7234e49c9c70dc324
Validity
Not Before: Jun 9 00:01:00 2025 GMT
Not After : Jun 10 00:01:00 2025 GMT
Subject: CN=fc206ccf8a5d80fe2127303b0a7c4d9b73f206e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:04:01:de:a9:ba:77:92:9f:30:ff:0a:68:0b:
e5:0e:67:14:b5:c4:ef:71:b9:be:86:b7:3a:c3:5f:
05:45:64:51:62:ad:d3:b0:82:93:e7:24:bb:03:58:
db:7b:77:a0:a1:c8:75:d7:20:29:ac:3d:ab:63:96:
b9:d7:e4:86:2a:ea:94:92:3d:bd:de:39:47:64:14:
a4:6b:7a:44:57:bf:05:ed:bc:db:d2:e8:3b:45:82:
b4:5e:bc:33:58:2d:8d:11:01:83:52:2d:56:0a:3e:
a2:2a:df:ed:ff:cf:d0:d2:4b:a4:4e:27:b7:a4:2a:
e1:7e:de:e9:00:81:a9:76:92:0a:8f:87:87:ba:a9:
5b:7f:46:d5:d0:80:fc:ec:5a:10:24:3a:e4:60:69:
3c:e9:71:2d:0d:15:c8:62:2b:66:0e:4b:81:00:cb:
db:47:0e:bb:62:c5:a9:0a:77:7c:a7:d6:5c:df:c7:
5a:6b:c8:4f:04:30:25:fc:94:7c:7e:59:40:b9:9e:
3f:58:df:ff:cf:7c:9a:f3:ce:21:17:12:67:fd:d4:
76:17:1f:d5:53:d2:da:38:fe:15:13:e0:25:6b:ae:
a6:82:54:de:5e:fa:71:0b:b4:4b:40:3a:06:ec:ba:
1b:ed:e4:e3:68:b5:42:80:16:1a:f5:6c:4c:9d:c0:
9a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:20:6C:CF:8A:5D:80:FE:21:27:30:3B:0A:7C:4D:9B:73:F2:06:E0
X509v3 Authority Key Identifier:
keyid:6D:DD:8F:1E:38:C9:1F:5B:17:C3:D1:A7:23:4E:49:C9:C7:0D:C3:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd2PHjjJH1sXw9GnI05JyccNwyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/316c8f-5e36-471f-9555-f6297a77a37b/1/bd2PHjjJH1sXw9GnI05JyccNwyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/316c8f-5e36-471f-9555-f6297a77a37b/1/bd2PHjjJH1sXw9GnI05JyccNwyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:d6:03:bc:d7:81:46:e1:f7:74:51:4d:9c:b1:7a:2b:28:b0:
4c:45:f6:01:46:41:cc:1d:b7:d0:f6:08:25:0f:bf:36:21:37:
3b:81:02:da:de:ca:03:0a:03:00:e7:60:4e:81:4c:e4:75:ea:
23:6d:9e:9d:03:63:18:cf:6a:30:8c:81:39:f8:ed:93:9a:6c:
67:04:40:b4:97:e7:f9:5a:3c:da:3d:10:80:40:79:d5:64:30:
42:bb:e5:db:db:c8:5c:59:7a:b2:ea:19:e4:0d:05:e0:fd:1c:
dc:55:ac:ed:cd:4c:c7:44:ba:15:de:d7:c5:99:6d:63:3e:0c:
6c:77:76:ba:bf:81:9c:8c:38:1e:34:46:40:0f:89:5e:4d:e9:
07:12:ed:f7:b9:84:73:cc:7d:10:d4:f6:16:53:86:87:6a:6c:
8b:f2:8f:4f:fa:a1:99:4c:80:5a:2f:b5:56:f0:36:66:60:0a:
50:4e:f8:97:a7:95:34:7a:db:69:5f:79:2d:f0:0a:df:04:e9:
bb:62:63:fd:bb:ed:e8:77:03:d3:98:08:c7:e6:58:29:a6:e0:
5f:9b:99:2a:89:8d:ec:54:14:f9:9c:32:97:4e:f8:b8:63:55:
f7:ce:d6:f1:6a:1a:1e:5e:4b:93:a9:69:35:ff:18:8a:5b:8e:
7f:c5:d8:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 08:50:58 2025 by rpki-client