Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/896a48-dca4-4d23-8f07-8754a1c9060b/1/b-4n1ZTdsvCcjLWSRYAcmvWjTCI.mft
File: b-4n1ZTdsvCcjLWSRYAcmvWjTCI.mft (raw, json)
Hash identifier: D0Vxtse8Jcsn2ILR0GUT/ADQRNuI+lpjn5wGDh4Btpo=
Subject key identifier: 76:B9:A0:0F:52:AD:98:B4:E6:DB:4A:32:F4:12:5E:57:05:72:A8:92
Authority key identifier: 6F:EE:27:D5:94:DD:B2:F0:9C:8C:B5:92:45:80:1C:9A:F5:A3:4C:22
Certificate issuer: /CN=6fee27d594ddb2f09c8cb59245801c9af5a34c22
Certificate serial: 0197488C6B840504F234AE616A249DD7D705
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b-4n1ZTdsvCcjLWSRYAcmvWjTCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/896a48-dca4-4d23-8f07-8754a1c9060b/1/b-4n1ZTdsvCcjLWSRYAcmvWjTCI.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 04:00:51 +0000
Manifest this update: Sat 07 Jun 2025 04:00:51 +0000
Manifest next update: Sun 08 Jun 2025 04:00:51 +0000
Files and hashes: 1: b-4n1ZTdsvCcjLWSRYAcmvWjTCI.crl (hash: NI1luLr8Xb4vHdDpDWCY3neKaZ9nJcGewLdZ1gXXIwk=)
2: pBaxgCqTyeze3hcIp2M83HQrP4U.roa (hash: MsncevRB1zh5gU5+B31LnCwg/AwVLsxlHu2XQLm34Hs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/896a48-dca4-4d23-8f07-8754a1c9060b/1/b-4n1ZTdsvCcjLWSRYAcmvWjTCI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/896a48-dca4-4d23-8f07-8754a1c9060b/1/b-4n1ZTdsvCcjLWSRYAcmvWjTCI.mft
rsync://rpki.ripe.net/repository/DEFAULT/b-4n1ZTdsvCcjLWSRYAcmvWjTCI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:6b:84:05:04:f2:34:ae:61:6a:24:9d:d7:d7:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fee27d594ddb2f09c8cb59245801c9af5a34c22
Validity
Not Before: Jun 7 04:00:51 2025 GMT
Not After : Jun 8 04:00:51 2025 GMT
Subject: CN=76b9a00f52ad98b4e6db4a32f4125e570572a892
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d7:48:02:e2:52:e5:86:c0:a2:36:af:13:c9:
92:d7:f4:d0:4b:ce:48:fc:02:0a:13:65:e0:73:c1:
54:8c:6a:f8:a8:c9:62:87:5c:fa:73:e6:41:82:08:
31:44:33:a8:b1:62:f2:50:f5:16:71:2c:23:c6:fb:
d1:05:5d:c1:af:9e:9d:14:a9:6e:a3:d1:3d:7f:a4:
43:b6:5d:b1:5e:5c:a0:c4:13:62:75:e1:db:6e:5f:
07:35:00:9b:a2:00:8d:26:ea:41:37:55:d7:ce:8d:
3f:3b:cd:8d:d8:fd:09:bf:0c:8a:c6:4a:6b:d3:0d:
9a:d1:86:ec:c6:23:27:3f:cc:34:20:54:5e:eb:1e:
b5:21:ed:ed:23:8d:c4:35:4d:34:d0:8d:7a:9b:6c:
df:ec:fa:6b:63:a8:21:bc:e3:1f:b7:3b:bc:0a:70:
77:82:65:3a:80:de:08:19:4f:e7:dc:fd:47:ea:40:
5c:d4:d3:c2:05:36:58:27:49:6a:27:fe:51:0f:4d:
18:40:c2:f1:32:a9:38:95:23:c6:a1:c1:b5:74:26:
e6:68:8b:51:9e:0b:15:fd:24:99:c5:4f:be:4d:90:
49:ea:ef:ec:87:9e:5b:df:66:17:1b:32:00:9b:68:
72:5e:84:9e:b9:60:39:d7:a7:2e:c6:e2:2f:aa:bf:
94:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:B9:A0:0F:52:AD:98:B4:E6:DB:4A:32:F4:12:5E:57:05:72:A8:92
X509v3 Authority Key Identifier:
keyid:6F:EE:27:D5:94:DD:B2:F0:9C:8C:B5:92:45:80:1C:9A:F5:A3:4C:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b-4n1ZTdsvCcjLWSRYAcmvWjTCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/896a48-dca4-4d23-8f07-8754a1c9060b/1/b-4n1ZTdsvCcjLWSRYAcmvWjTCI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/896a48-dca4-4d23-8f07-8754a1c9060b/1/b-4n1ZTdsvCcjLWSRYAcmvWjTCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:42:37:aa:4a:5a:09:33:b1:4f:d2:3e:6f:d8:22:cf:01:02:
19:d4:dc:5a:03:88:92:b7:ed:6b:d9:0e:7c:63:3c:b5:9f:48:
0e:81:b6:85:34:f0:67:5a:dc:cd:84:1c:93:dc:69:24:34:2c:
4c:57:e0:bc:f0:61:48:fe:f1:84:f1:c5:fe:41:89:2a:3e:f8:
33:9f:ae:18:28:d2:56:41:c1:d7:94:95:fd:ae:77:8c:cf:02:
25:aa:55:2d:27:de:c0:b1:9b:ad:25:16:3e:86:80:72:24:cd:
de:f5:d4:41:9c:6b:bd:64:28:6f:d1:fb:8e:e6:f4:3b:f7:dd:
14:94:5d:d5:d4:05:04:8d:5e:fc:33:d7:27:0f:3a:43:8b:69:
4e:27:0d:09:65:d6:78:c2:94:74:e5:b7:39:fa:fc:64:17:4d:
7c:24:ba:b0:48:d6:a4:d2:dd:75:cb:99:3a:89:cc:76:a4:2e:
ec:03:9b:0d:6e:33:f0:2f:3f:90:25:2b:9f:f9:4c:75:a6:c8:
d5:5f:eb:8e:76:17:27:57:53:1d:36:1d:1d:e2:7d:e9:a8:64:
93:1b:6f:cf:90:b9:ad:b5:cc:71:f2:e6:ef:97:f9:5d:75:e8:
96:55:3e:0d:a7:66:49:29:a8:4f:64:94:63:30:8d:4d:b4:41:
f4:a3:c5:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:57:41 2025 by rpki-client