Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/06803f-dd2e-4fd1-9a7f-bbf826aa67c0/1/bnED-oWs7FfEZIWRzD5Bzff-45c.mft
File: bnED-oWs7FfEZIWRzD5Bzff-45c.mft (raw, json)
Hash identifier: 5zd/Ku/1J6Ru3TGDIHZD10VB7qusBWyFYQ1jpzi67qo=
Subject key identifier: 08:3F:99:65:66:B9:0D:BA:C4:14:10:6F:22:63:6C:92:0C:2C:5D:BE
Authority key identifier: 6E:71:03:FA:85:AC:EC:57:C4:64:85:91:CC:3E:41:CD:F7:FE:E3:97
Certificate issuer: /CN=6e7103fa85acec57c4648591cc3e41cdf7fee397
Certificate serial: 01974A0CCB26A42FBCEB14E756B84135A247
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bnED-oWs7FfEZIWRzD5Bzff-45c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/06803f-dd2e-4fd1-9a7f-bbf826aa67c0/1/bnED-oWs7FfEZIWRzD5Bzff-45c.mft
Manifest number: 0D31
Signing time: Sat 07 Jun 2025 11:00:41 +0000
Manifest this update: Sat 07 Jun 2025 11:00:41 +0000
Manifest next update: Sun 08 Jun 2025 11:00:41 +0000
Files and hashes: 1: Q75VcKpJN1_xp-QM_NM8W4Tp-04.roa (hash: Wt2+g51E+wWSkSdRcanf7BFfmX/qewZOJ77oXxIMQTM=)
2: bnED-oWs7FfEZIWRzD5Bzff-45c.crl (hash: noLevPIPrSGWllDoOSfdy3V1raa/FXoVmmoibKgWKWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/06803f-dd2e-4fd1-9a7f-bbf826aa67c0/1/bnED-oWs7FfEZIWRzD5Bzff-45c.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/06803f-dd2e-4fd1-9a7f-bbf826aa67c0/1/bnED-oWs7FfEZIWRzD5Bzff-45c.mft
rsync://rpki.ripe.net/repository/DEFAULT/bnED-oWs7FfEZIWRzD5Bzff-45c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:0c:cb:26:a4:2f:bc:eb:14:e7:56:b8:41:35:a2:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e7103fa85acec57c4648591cc3e41cdf7fee397
Validity
Not Before: Jun 7 11:00:41 2025 GMT
Not After : Jun 8 11:00:41 2025 GMT
Subject: CN=083f996566b90dbac414106f22636c920c2c5dbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:b0:e2:81:98:42:48:30:a7:a1:73:d7:5c:1d:
8a:72:90:a2:16:94:aa:68:52:28:df:f1:53:ad:0c:
54:f0:de:21:4f:75:8d:ed:9f:52:45:b7:4e:e6:08:
f0:bf:a4:0a:d3:e2:c5:1c:d5:e1:dc:23:62:c9:63:
f6:53:df:43:80:14:6c:e7:29:f0:fe:64:2d:5a:5b:
96:b4:2d:df:62:8a:95:9a:50:f3:8d:46:d7:1a:6a:
10:ca:8e:b9:aa:7b:c1:e4:3d:03:b3:fc:33:2a:c2:
cc:e7:0a:23:95:be:91:85:8d:01:a7:ab:b1:cc:61:
c0:61:0f:15:3c:51:58:ea:86:c7:ef:04:52:cb:fc:
49:9f:70:ef:83:bb:e0:db:f5:da:e0:17:a4:1c:98:
9e:93:fb:de:87:8a:f1:c8:dc:1c:a3:64:14:cd:f6:
f3:c0:c4:67:fa:40:15:a4:d7:f8:e6:ef:ce:e8:2a:
c8:f4:1a:72:4e:2b:df:1f:5f:a2:22:c6:58:6c:cb:
df:46:39:f3:d4:e1:78:f0:f1:8f:4d:04:f5:92:6c:
78:16:db:62:84:d0:c1:7a:a5:0f:1d:6a:2e:b8:74:
07:0d:05:c6:c8:80:98:d0:81:18:7e:d6:50:e0:23:
33:a2:9d:4f:55:1d:8b:00:ef:07:f2:73:34:b1:b0:
d6:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:3F:99:65:66:B9:0D:BA:C4:14:10:6F:22:63:6C:92:0C:2C:5D:BE
X509v3 Authority Key Identifier:
keyid:6E:71:03:FA:85:AC:EC:57:C4:64:85:91:CC:3E:41:CD:F7:FE:E3:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bnED-oWs7FfEZIWRzD5Bzff-45c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/06803f-dd2e-4fd1-9a7f-bbf826aa67c0/1/bnED-oWs7FfEZIWRzD5Bzff-45c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/06803f-dd2e-4fd1-9a7f-bbf826aa67c0/1/bnED-oWs7FfEZIWRzD5Bzff-45c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:da:f4:a2:68:1a:f9:29:7f:52:ea:c1:19:88:92:34:ac:f7:
21:24:94:08:93:bb:f1:aa:bd:06:5e:a9:31:3e:12:ac:18:a4:
7a:f9:48:63:37:a5:e2:d1:c4:ff:6a:f8:8e:7e:d3:ba:67:ab:
e3:32:05:bd:8d:4a:c8:45:10:5a:b2:76:99:9a:8a:66:2c:5b:
03:88:ca:30:e0:ba:a8:6f:94:7e:30:a0:10:a2:e7:cc:53:a1:
c3:2b:31:95:f0:ca:82:c1:fe:d8:c0:21:e6:bf:21:93:91:b1:
a1:5b:b4:ce:53:1c:13:ca:33:4a:b1:2d:d8:51:70:26:cc:e4:
51:04:7d:64:de:41:40:3e:e3:46:89:78:83:bd:20:9d:37:c5:
8b:6a:ba:f3:a8:95:e8:10:07:b9:60:bc:74:4a:31:fe:8e:f6:
04:b6:c6:90:1b:07:44:d6:bc:bd:01:2d:55:f6:50:4d:a2:78:
bc:41:f5:37:33:8f:b7:59:81:c6:26:f2:b2:95:08:93:46:2b:
9c:d3:72:2d:fa:9f:0c:cf:b6:fe:87:bd:6b:d5:c1:42:61:3a:
eb:92:d1:67:51:96:dc:a8:66:84:dd:62:c9:ec:9e:ae:a1:d6:
5c:08:90:21:b5:cd:7d:c8:d1:a4:70:ce:4a:1c:b6:f1:f7:fd:
55:e0:48:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:34:28 2025 by rpki-client