Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/cf0715-b993-4348-97e9-6ec982951cf7/1/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.mft
File: bPL7D6Ut4TwzZonPP0gp1jUGdQ8.mft (raw, json)
Hash identifier: uCIZXh95e35ffZszAvsk/X4nslD7PGCo0l290rMnMkM=
Subject key identifier: 1C:4E:0A:15:A1:96:D5:A7:AD:28:CA:A4:E5:EF:77:9F:53:4C:E9:66
Authority key identifier: 6C:F2:FB:0F:A5:2D:E1:3C:33:66:89:CF:3F:48:29:D6:35:06:75:0F
Certificate issuer: /CN=6cf2fb0fa52de13c336689cf3f4829d63506750f
Certificate serial: 0197383DFEBD6F83E5DF441EA42919C791B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/cf0715-b993-4348-97e9-6ec982951cf7/1/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.mft
Manifest number: 1573
Signing time: Wed 04 Jun 2025 00:01:16 +0000
Manifest this update: Wed 04 Jun 2025 00:01:16 +0000
Manifest next update: Thu 05 Jun 2025 00:01:16 +0000
Files and hashes: 1: 7vv8BVob_ZO7xZBFUxLEwiHRqsI.roa (hash: a9e9u4Kh69S/npnlVehDJcUBqvJOaHqrRNt0cx8h5Bs=)
2: bPL7D6Ut4TwzZonPP0gp1jUGdQ8.crl (hash: Cgi83tSfzx4CrFWR41NAkEpzeP5BxjYh3bgfRbHuDDU=)
3: cjqlxXd9d603JmJ-9nME9vd7MMs.roa (hash: k/vf9BXXM6xYOCcjVLyRSPCeCSgUP+JptIGKabcT1E8=)
4: hZzdEV89UIlpyAqq4Kc3si8CNoM.roa (hash: d1WlFoJHZ3C9ZD8ErKPK4CYZhKvTRioRSz/Q+loHQuE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/cf0715-b993-4348-97e9-6ec982951cf7/1/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/cf0715-b993-4348-97e9-6ec982951cf7/1/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:38:3d:fe:bd:6f:83:e5:df:44:1e:a4:29:19:c7:91:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cf2fb0fa52de13c336689cf3f4829d63506750f
Validity
Not Before: Jun 4 00:01:16 2025 GMT
Not After : Jun 5 00:01:16 2025 GMT
Subject: CN=1c4e0a15a196d5a7ad28caa4e5ef779f534ce966
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:95:b8:01:fb:82:42:f9:85:ab:4b:b5:a7:4c:
5b:3d:fe:5b:a6:2b:da:37:5b:11:5a:f6:63:8b:4c:
46:5f:6b:ca:d8:1f:b7:8a:7f:c4:a2:cd:e4:43:32:
33:da:b3:71:c3:e6:b3:84:4e:86:fb:72:4b:04:bf:
21:42:f3:53:a5:a1:3d:73:fc:6d:2e:b2:45:96:2e:
5a:e4:98:2c:bd:eb:e0:b0:89:13:c1:60:ce:c1:1f:
b6:40:14:89:03:8d:36:10:68:3d:96:00:84:49:b0:
f7:96:45:cf:0e:bf:b5:66:1d:ef:c3:cb:88:d2:3d:
88:2c:36:21:4c:91:3b:fa:8c:8f:a3:90:93:06:71:
c9:0b:86:bf:c8:a2:7a:06:88:a6:f7:05:c9:23:f9:
77:21:6d:a7:b1:36:3c:71:53:00:c8:e0:78:16:86:
74:2b:09:c3:38:e1:98:ad:31:78:61:30:a6:2e:f8:
41:69:e1:8b:ff:82:93:dc:3b:cb:65:0b:5a:36:56:
83:70:81:41:c8:65:af:0b:64:54:bc:45:27:64:6d:
54:4e:0f:92:f0:d8:48:31:97:eb:2a:80:18:15:b1:
6d:05:64:65:d6:2b:50:50:69:94:ff:fd:03:54:7e:
19:77:8e:21:6c:39:cb:53:b6:be:a5:7b:b0:61:d3:
92:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:4E:0A:15:A1:96:D5:A7:AD:28:CA:A4:E5:EF:77:9F:53:4C:E9:66
X509v3 Authority Key Identifier:
keyid:6C:F2:FB:0F:A5:2D:E1:3C:33:66:89:CF:3F:48:29:D6:35:06:75:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cf0715-b993-4348-97e9-6ec982951cf7/1/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/cf0715-b993-4348-97e9-6ec982951cf7/1/bPL7D6Ut4TwzZonPP0gp1jUGdQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:19:9c:fd:70:47:31:c6:a5:2c:64:73:cc:8f:91:27:44:6a:
f5:9c:8f:31:46:a4:d8:c7:78:54:10:4a:85:7f:11:54:ea:e6:
cf:b5:31:93:bc:be:36:66:a9:71:50:24:76:7c:70:4f:09:5c:
54:3c:bc:20:af:2b:35:2d:2a:7b:71:d4:a9:0f:10:c0:ca:97:
06:8c:84:05:5d:d0:c9:8a:90:28:9d:61:e9:d1:3b:82:57:7e:
c7:e6:26:b2:0c:93:d8:b8:5f:c3:3f:64:91:e2:d6:ca:66:0c:
88:d8:29:e7:5f:f4:c3:34:9a:b7:84:8f:b9:e6:58:9a:43:e2:
84:56:2a:3f:ab:a4:e5:fc:db:af:a3:28:e6:43:28:ac:01:e6:
50:02:5a:d4:6a:6e:d4:da:0d:bd:c0:63:1e:17:a1:b9:06:0b:
8c:42:7c:1c:10:e3:2f:59:b7:c6:c9:b5:07:81:fe:22:e6:55:
6a:8b:2b:2c:ae:19:1c:c3:98:9a:fe:03:d6:86:72:bf:3c:20:
2b:4f:a6:aa:52:fe:67:f4:d0:3a:33:7d:c3:08:1a:1c:60:3b:
df:60:f9:0a:b5:c4:65:41:18:93:c6:a9:57:80:6b:d7:fd:4e:
1a:84:f8:33:53:93:1e:c4:d0:09:f1:d5:4d:e4:ac:b5:73:e6:
52:a9:a4:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 10:53:16 2025 by rpki-client