Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.mft
File: BW9-bE0T7qHlvZ-XIdyM-zac2_4.mft (raw, json)
Hash identifier: 6CISb4vk0paFZOVL+TaDpumH79ovUDc9mZbRAfUJaN8=
Subject key identifier: B9:D8:0E:5C:06:C7:39:96:39:91:F7:E1:00:1B:0D:E6:4C:13:6D:06
Authority key identifier: 05:6F:7E:6C:4D:13:EE:A1:E5:BD:9F:97:21:DC:8C:FB:36:9C:DB:FE
Certificate issuer: /CN=056f7e6c4d13eea1e5bd9f9721dc8cfb369cdbfe
Certificate serial: 019768172E34490F12C5D0A7066BD644AB4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BW9-bE0T7qHlvZ-XIdyM-zac2_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.mft
Manifest number: 158D
Signing time: Fri 13 Jun 2025 07:00:38 +0000
Manifest this update: Fri 13 Jun 2025 07:00:38 +0000
Manifest next update: Sat 14 Jun 2025 07:00:38 +0000
Files and hashes: 1: BW9-bE0T7qHlvZ-XIdyM-zac2_4.crl (hash: p38dm+npEZBgQJqNtuYfk7NyzSZB7gYSkwu8NL8/n2g=)
2: ddJdWwJ-x_kxknxp8wqmg5-PURw.roa (hash: /8Ho4F9DZAAaxfNKmXvihlaELQ9Ew+7q5ew0DKDsGRY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.mft
rsync://rpki.ripe.net/repository/DEFAULT/BW9-bE0T7qHlvZ-XIdyM-zac2_4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 07:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:17:2e:34:49:0f:12:c5:d0:a7:06:6b:d6:44:ab:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=056f7e6c4d13eea1e5bd9f9721dc8cfb369cdbfe
Validity
Not Before: Jun 13 07:00:38 2025 GMT
Not After : Jun 14 07:00:38 2025 GMT
Subject: CN=b9d80e5c06c739963991f7e1001b0de64c136d06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:5b:c8:7b:4e:05:43:61:53:3e:5b:68:ce:31:
c2:23:b1:0b:f0:ed:2a:90:a4:3f:0c:b8:dd:d4:61:
c4:aa:2a:9f:39:85:9d:34:af:68:80:3d:08:91:f2:
19:37:ea:ea:3f:2b:38:25:24:88:44:dd:ea:81:e7:
fe:52:64:94:c0:56:0a:c4:fa:e3:c0:94:ff:76:86:
75:62:64:15:08:fa:64:a6:5c:00:8b:be:e6:9e:f4:
5f:bf:61:ea:34:67:52:12:21:fe:ce:09:b8:ba:50:
38:ae:98:f7:57:a6:e8:39:24:29:a1:e2:f0:4a:2c:
7f:f2:0d:81:50:4a:f1:4f:22:75:b9:2e:6b:c1:b6:
8b:4a:c3:ca:9f:7b:a8:0a:48:d0:e7:06:28:6e:48:
ce:99:42:af:32:d1:0f:fd:ba:76:a4:65:90:b9:77:
7f:a2:8b:ca:18:87:44:5d:bd:9b:9f:ba:ab:b7:25:
f4:83:95:2b:de:5c:d1:30:d0:ec:0c:f0:cb:54:02:
65:9b:98:7f:35:0c:79:46:ff:7a:6c:dd:6e:66:f2:
a1:a7:6c:ed:56:76:f1:ea:ac:fd:79:0f:70:d7:c0:
62:1e:56:d9:89:21:2c:c8:6c:18:dd:19:74:94:fe:
a6:98:1b:73:00:f3:c9:00:ec:2e:8f:7f:3c:fe:8e:
c4:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:D8:0E:5C:06:C7:39:96:39:91:F7:E1:00:1B:0D:E6:4C:13:6D:06
X509v3 Authority Key Identifier:
keyid:05:6F:7E:6C:4D:13:EE:A1:E5:BD:9F:97:21:DC:8C:FB:36:9C:DB:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BW9-bE0T7qHlvZ-XIdyM-zac2_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/3cdc3e-eeaf-4147-bb0f-873c189fc49f/1/BW9-bE0T7qHlvZ-XIdyM-zac2_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:a0:07:85:b5:62:ae:ff:d7:be:78:90:fc:4a:4f:25:82:0c:
e4:12:e1:33:55:3d:26:ee:04:fc:10:8e:19:0d:73:7f:f1:6d:
c8:c8:78:59:ce:3d:e3:02:57:f5:e3:a2:62:b1:3b:93:57:88:
64:07:81:6e:14:2e:ca:df:5b:01:1a:0f:b8:fd:6e:56:69:3a:
3d:a4:1c:32:8c:5d:d7:8e:b3:51:c2:d0:79:a2:5b:d0:66:b3:
46:b3:fd:0b:49:d0:20:3b:aa:79:bf:f6:d2:31:b8:0a:92:a7:
54:a8:bd:8e:9c:e8:35:22:24:9e:6d:8f:53:f8:e4:c9:99:26:
04:31:c9:61:f9:17:ed:49:3c:9b:4f:3a:00:11:7e:65:77:05:
06:20:13:5d:4d:c8:7d:b6:d5:e6:35:d4:fb:f5:5a:98:eb:71:
ef:de:7e:16:f3:7e:9f:bb:62:4c:8d:97:b9:86:98:66:0f:2b:
6b:6d:e7:85:93:5f:7a:4b:30:11:a2:bb:16:9b:c6:01:a9:62:
3b:a2:0d:57:c8:95:b0:64:9b:93:e7:06:9f:c6:bf:92:7a:56:
4b:80:ae:34:e6:59:c6:f3:19:51:72:c9:6d:d8:c7:cf:71:62:
7e:7c:21:7f:3e:c9:28:35:33:ce:d6:1c:e8:8f:59:d8:9f:5f:
d7:48:2f:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 14:53:24 2025 by rpki-client