
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/bMI2cPl4nALYO6fC5-TG6e3lL3o.mft
File: bMI2cPl4nALYO6fC5-TG6e3lL3o.mft (raw, json)
Hash identifier: zdfWxVPZOmWdCM6e06lwkGLcsrSy3jTPtuto/sIGpY4=
Subject key identifier: C3:7C:04:32:4D:7C:8B:D5:59:9B:3B:ED:D7:CD:B3:9D:5C:E5:85:8C
Authority key identifier: 6C:C2:36:70:F9:78:9C:02:D8:3B:A7:C2:E7:E4:C6:E9:ED:E5:2F:7A
Certificate issuer: /CN=6cc23670f9789c02d83ba7c2e7e4c6e9ede52f7a
Certificate serial: 0197488C92F1780BDCCEE054FD4249756EE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bMI2cPl4nALYO6fC5-TG6e3lL3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/bMI2cPl4nALYO6fC5-TG6e3lL3o.mft
Manifest number: 0713
Signing time: Sat 07 Jun 2025 04:01:01 +0000
Manifest this update: Sat 07 Jun 2025 04:01:01 +0000
Manifest next update: Sun 08 Jun 2025 04:01:01 +0000
Files and hashes: 1: FN9RGBMyQ31Y_fViha13qkky7DI.roa (hash: gAmFRHmRCLI//ymFZDIrqygKx6kT7sxILKZQSxKuAic=)
2: Nbw4t5MC6gHkh4rPXeeWfUQIVkw.roa (hash: GCKq7nx6vmgGBar49yig7d/ID2EW6TSR2OyxNnCG15Q=)
3: bMI2cPl4nALYO6fC5-TG6e3lL3o.crl (hash: Vcyj0CfOMFK5JFqNWmEhxPBv1fHxOXkZskCSktdkiPI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/bMI2cPl4nALYO6fC5-TG6e3lL3o.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/bMI2cPl4nALYO6fC5-TG6e3lL3o.mft
rsync://rpki.ripe.net/repository/DEFAULT/bMI2cPl4nALYO6fC5-TG6e3lL3o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:92:f1:78:0b:dc:ce:e0:54:fd:42:49:75:6e:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cc23670f9789c02d83ba7c2e7e4c6e9ede52f7a
Validity
Not Before: Jun 7 04:01:01 2025 GMT
Not After : Jun 8 04:01:01 2025 GMT
Subject: CN=c37c04324d7c8bd5599b3bedd7cdb39d5ce5858c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:31:5f:fc:be:8f:96:3d:be:e2:88:6c:3c:ef:
8c:2f:e9:1e:19:5f:b7:db:4e:e0:23:e6:03:8d:59:
15:d9:cc:97:ba:e5:ad:7d:9c:25:96:e5:f7:0a:2e:
fd:00:42:d2:fd:63:f3:cd:d9:a7:54:56:1f:e0:4c:
04:57:52:53:4c:6a:f8:19:74:a2:b2:5c:fc:a4:48:
37:3b:13:a2:bd:b7:b7:de:0e:eb:cd:01:7c:e8:ac:
87:a2:27:34:05:be:ae:8a:c5:f3:1a:21:bf:46:f7:
f7:e1:ff:fe:f5:fc:ec:6c:bf:6a:20:41:2d:20:ec:
7a:c6:8e:a5:7e:af:77:0b:e7:20:fe:63:a6:2c:f3:
f5:ce:12:14:f8:1f:33:c1:20:20:93:eb:b9:a1:35:
76:f9:01:c8:bb:db:14:c4:22:d5:71:02:57:51:f0:
27:fc:3b:08:55:e4:35:18:1d:f4:6c:8b:57:d4:ae:
29:66:e9:29:31:7d:86:aa:ee:90:3d:6b:3a:57:a1:
f9:d6:11:49:a9:5b:4f:16:f1:72:0c:55:a6:3a:18:
93:1a:d7:db:17:39:9e:9f:b7:e8:db:4e:f0:c6:ff:
c9:63:10:59:b2:0f:4e:89:1e:e5:dc:42:fb:12:b2:
89:a2:aa:34:57:b9:8e:0a:c7:af:d8:df:a1:a1:ce:
ff:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:7C:04:32:4D:7C:8B:D5:59:9B:3B:ED:D7:CD:B3:9D:5C:E5:85:8C
X509v3 Authority Key Identifier:
keyid:6C:C2:36:70:F9:78:9C:02:D8:3B:A7:C2:E7:E4:C6:E9:ED:E5:2F:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMI2cPl4nALYO6fC5-TG6e3lL3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/bMI2cPl4nALYO6fC5-TG6e3lL3o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/bMI2cPl4nALYO6fC5-TG6e3lL3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:80:22:c7:27:2d:7c:05:e5:b5:a8:90:da:1b:a2:64:a5:a5:
5a:ea:da:39:08:41:14:93:93:2a:34:48:60:91:54:92:e5:fe:
57:b0:a2:ef:e6:ea:08:ff:99:fe:ef:1d:21:7b:1c:b7:b7:2c:
ff:1c:bb:00:74:43:d3:01:d2:c4:29:d4:e1:62:73:48:51:92:
fc:4b:1f:78:5a:3c:71:e8:00:38:16:59:47:31:66:2f:33:af:
48:02:48:4a:11:1f:dd:d8:8b:70:68:ea:24:8e:82:b9:7c:ce:
39:50:82:d9:df:89:e8:4e:2e:63:af:2b:35:8e:37:a5:4d:02:
70:c1:8c:50:5d:34:2e:0e:ff:55:5a:c9:ce:6e:d6:47:e2:a5:
ff:f5:e3:0a:f5:25:81:72:68:74:50:88:f0:82:e8:97:7a:12:
59:6d:45:7d:a3:f3:6f:ae:08:9e:8d:26:9a:5d:70:1e:00:b4:
f5:92:a0:7b:18:20:61:ce:6e:1a:f9:d9:7f:92:44:00:d7:5a:
5f:94:6c:3e:81:2e:bb:bd:49:fd:81:33:2e:a4:54:4e:a3:c0:
8b:7b:0b:c5:25:a1:eb:7e:21:32:4b:b4:1c:c2:d1:64:26:63:
f7:39:23:85:3f:95:df:c1:99:c5:94:ce:c9:61:af:9a:60:86:
3b:97:cc:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:01:20 2025 by rpki-client