Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/642ab3-9c72-4b6f-8772-d52f4228f8b3/1/BAxkI-mAsol2Wq2SQjX0bS4gwBw.mft
File: BAxkI-mAsol2Wq2SQjX0bS4gwBw.mft (raw, json)
Hash identifier: ZnzfgezcKl5GrtNlCwLd1GMknmtykmUlVTyo1PQ9zrs=
Subject key identifier: A6:D7:21:62:14:48:C6:1A:18:86:A0:D4:E0:32:19:FD:09:A2:24:15
Authority key identifier: 04:0C:64:23:E9:80:B2:89:76:5A:AD:92:42:35:F4:6D:2E:20:C0:1C
Certificate issuer: /CN=040c6423e980b289765aad924235f46d2e20c01c
Certificate serial: 019755A3549EBA50103C607D6142A7AAE213
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BAxkI-mAsol2Wq2SQjX0bS4gwBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/642ab3-9c72-4b6f-8772-d52f4228f8b3/1/BAxkI-mAsol2Wq2SQjX0bS4gwBw.mft
Manifest number: 060D
Signing time: Mon 09 Jun 2025 17:00:56 +0000
Manifest this update: Mon 09 Jun 2025 17:00:56 +0000
Manifest next update: Tue 10 Jun 2025 17:00:56 +0000
Files and hashes: 1: BAxkI-mAsol2Wq2SQjX0bS4gwBw.crl (hash: xTMYMP4Vk2cX73+B290a23E3+k3hj+0Cphr5YE1cK+4=)
2: M8AiCxgMSSUgBuVdFRu7pkvGtCo.roa (hash: pnvkZHQqProNXp2Y06uxspQQFP7772iRU8HPzD5Li1A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/642ab3-9c72-4b6f-8772-d52f4228f8b3/1/BAxkI-mAsol2Wq2SQjX0bS4gwBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/642ab3-9c72-4b6f-8772-d52f4228f8b3/1/BAxkI-mAsol2Wq2SQjX0bS4gwBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BAxkI-mAsol2Wq2SQjX0bS4gwBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:55:a3:54:9e:ba:50:10:3c:60:7d:61:42:a7:aa:e2:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=040c6423e980b289765aad924235f46d2e20c01c
Validity
Not Before: Jun 9 17:00:56 2025 GMT
Not After : Jun 10 17:00:56 2025 GMT
Subject: CN=a6d721621448c61a1886a0d4e03219fd09a22415
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:6a:70:cc:99:83:3a:20:ad:03:f2:71:b3:6e:
21:86:3c:bc:6f:e2:aa:b3:fb:8f:1e:1d:04:19:b2:
d3:bc:03:67:cd:27:5a:08:0e:e1:47:98:a3:79:3a:
a5:5a:dc:19:29:d2:4c:e4:02:61:21:45:46:67:9b:
6c:bf:54:69:af:d4:f2:32:bc:c4:f0:49:4d:eb:40:
39:16:91:6c:c7:bb:09:7d:f3:21:de:1a:f4:b9:12:
da:bc:28:ac:64:71:80:2b:2f:ee:d6:f2:6f:0e:dc:
9c:9c:df:fb:34:17:62:6d:cc:6a:46:62:4b:aa:cf:
07:4b:67:00:c8:f9:bb:ee:60:73:e1:a0:65:e0:53:
d0:ef:4e:f5:13:e7:38:b3:e2:b1:60:87:81:78:9f:
3d:78:f5:7f:f0:13:4d:7c:dd:b5:ef:f8:84:19:a9:
91:fa:f2:52:f6:a8:74:c7:87:55:3a:03:5c:85:04:
c0:de:4d:67:b4:f1:01:7a:bf:a3:70:88:a9:2e:59:
36:c4:78:60:2d:44:ce:cc:bb:67:2d:e5:6a:56:1f:
6b:5a:c1:0c:7f:f3:c6:e5:98:65:7b:99:d5:e5:a2:
87:22:cc:96:82:0c:4c:c9:93:22:b7:6e:ef:82:7e:
ff:30:16:67:5a:9e:e6:16:ee:18:da:ff:11:99:fc:
1f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:D7:21:62:14:48:C6:1A:18:86:A0:D4:E0:32:19:FD:09:A2:24:15
X509v3 Authority Key Identifier:
keyid:04:0C:64:23:E9:80:B2:89:76:5A:AD:92:42:35:F4:6D:2E:20:C0:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BAxkI-mAsol2Wq2SQjX0bS4gwBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/642ab3-9c72-4b6f-8772-d52f4228f8b3/1/BAxkI-mAsol2Wq2SQjX0bS4gwBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/642ab3-9c72-4b6f-8772-d52f4228f8b3/1/BAxkI-mAsol2Wq2SQjX0bS4gwBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:8c:60:f9:19:b4:e6:02:d7:8c:0f:3c:e7:68:8c:f8:4b:23:
09:46:0f:0c:37:a1:0a:7a:d2:a4:4f:37:43:cf:a9:76:55:ba:
37:19:cc:f8:80:59:e1:99:7b:39:47:75:4b:1b:0a:02:5a:ee:
c6:6c:7a:d5:ef:d8:f4:77:d6:32:82:a5:4a:82:01:f4:fc:d9:
f2:81:7b:e5:bd:e6:b6:8d:b8:ec:b1:86:72:e7:70:5e:d8:63:
8f:76:03:f9:ca:5b:55:44:21:e0:88:b5:bf:7e:6c:46:65:05:
46:55:82:c6:02:02:6a:a3:c7:c2:24:7a:b7:f7:97:c3:e7:b3:
95:3e:1b:03:b7:88:cf:5b:d6:be:40:d0:92:24:ef:2d:e0:39:
9e:87:a7:80:1c:94:c8:ac:69:94:2f:b9:0a:56:c5:21:37:00:
64:fa:16:0e:48:93:1a:02:05:77:48:9b:f1:ac:f5:99:de:4c:
1d:02:be:e3:5c:39:52:a5:c0:2d:28:5e:8a:b7:3c:4e:36:35:
72:29:09:aa:e7:7c:10:b5:4f:e4:a0:74:43:e0:d6:24:0a:a2:
cb:b7:ad:7c:eb:40:5d:73:a9:75:c5:1a:74:08:af:63:22:01:
f7:53:96:99:17:7a:ff:6d:fb:36:be:f1:6c:6b:18:4e:b3:4b:
72:ec:38:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 00:01:50 2025 by rpki-client