Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/1b4bdf-67ad-4f0e-81ed-9e5c85af93a5/1/bTZfDZvuSEwIXPP-M4rQNcP5hHk.mft
File: bTZfDZvuSEwIXPP-M4rQNcP5hHk.mft (raw, json)
Hash identifier: lC/xPKNoM+pC5jHOb5aM25yA/AGk0F8r//+HBaq4hGY=
Subject key identifier: 14:86:B9:D3:33:23:19:A2:52:30:C3:F2:21:55:72:DC:34:E0:91:5A
Authority key identifier: 6D:36:5F:0D:9B:EE:48:4C:08:5C:F3:FE:33:8A:D0:35:C3:F9:84:79
Certificate issuer: /CN=6d365f0d9bee484c085cf3fe338ad035c3f98479
Certificate serial: 0197474314092638E035C3974FFFDD980610
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bTZfDZvuSEwIXPP-M4rQNcP5hHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/1b4bdf-67ad-4f0e-81ed-9e5c85af93a5/1/bTZfDZvuSEwIXPP-M4rQNcP5hHk.mft
Manifest number: 0534
Signing time: Fri 06 Jun 2025 22:01:07 +0000
Manifest this update: Fri 06 Jun 2025 22:01:07 +0000
Manifest next update: Sat 07 Jun 2025 22:01:07 +0000
Files and hashes: 1: bTZfDZvuSEwIXPP-M4rQNcP5hHk.crl (hash: TSCEznzuCVQrLjRysulznWSMrGWQpHzm32K2SEvYics=)
2: kepUhm0anFry8RwMMkqJayre0fg.roa (hash: HEBHciDc0e+f+TYCTKlbfrh1hJ9IXR8LLwkK0vX0JYA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/1b4bdf-67ad-4f0e-81ed-9e5c85af93a5/1/bTZfDZvuSEwIXPP-M4rQNcP5hHk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/1b4bdf-67ad-4f0e-81ed-9e5c85af93a5/1/bTZfDZvuSEwIXPP-M4rQNcP5hHk.mft
rsync://rpki.ripe.net/repository/DEFAULT/bTZfDZvuSEwIXPP-M4rQNcP5hHk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:43:14:09:26:38:e0:35:c3:97:4f:ff:dd:98:06:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d365f0d9bee484c085cf3fe338ad035c3f98479
Validity
Not Before: Jun 6 22:01:07 2025 GMT
Not After : Jun 7 22:01:07 2025 GMT
Subject: CN=1486b9d3332319a25230c3f2215572dc34e0915a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:ad:00:b5:45:b5:45:ef:ae:31:ec:eb:02:6d:
bb:d3:49:e4:e9:3e:cb:39:5f:3c:c5:fc:50:a7:65:
30:ec:c1:16:58:d3:79:d9:da:c1:cb:6a:e9:0f:71:
6d:2a:90:f5:00:9b:a9:4c:7c:03:01:92:e5:e5:19:
5f:19:14:24:75:bd:79:cf:c7:ab:57:0f:5a:27:d8:
89:b3:68:8e:9b:fc:00:18:94:0e:4e:59:5e:6d:3f:
e3:04:f7:96:df:09:8b:a2:cc:47:69:53:0d:36:bf:
3e:48:f3:1b:02:3b:0b:19:0a:c5:e5:bd:f4:dd:44:
fd:fa:be:28:b4:32:f3:81:4a:59:c1:5c:73:5d:81:
78:6d:58:87:b1:34:a1:bd:d3:8c:59:50:26:ee:b4:
d1:7f:c2:8c:36:af:7a:6b:e1:1b:05:51:4c:f5:90:
f5:06:96:55:8f:9c:51:fd:66:20:e9:bf:2a:ff:a7:
39:06:7c:b3:ba:8a:09:e6:ce:0d:91:9e:bb:f0:bc:
9a:d2:53:1e:39:3e:62:9b:a2:40:68:5b:a3:10:13:
c0:04:67:3a:6d:2c:32:c7:80:99:51:57:58:54:98:
b7:a4:c4:1d:14:27:b1:30:9c:13:ba:94:d0:5d:de:
24:f0:30:94:29:37:3c:85:e9:16:dc:49:37:1f:36:
0c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:86:B9:D3:33:23:19:A2:52:30:C3:F2:21:55:72:DC:34:E0:91:5A
X509v3 Authority Key Identifier:
keyid:6D:36:5F:0D:9B:EE:48:4C:08:5C:F3:FE:33:8A:D0:35:C3:F9:84:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bTZfDZvuSEwIXPP-M4rQNcP5hHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1b4bdf-67ad-4f0e-81ed-9e5c85af93a5/1/bTZfDZvuSEwIXPP-M4rQNcP5hHk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1b4bdf-67ad-4f0e-81ed-9e5c85af93a5/1/bTZfDZvuSEwIXPP-M4rQNcP5hHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:94:9b:d6:fa:f6:6f:22:2a:08:56:77:88:f2:2f:1b:b3:56:
94:9d:7a:61:b9:83:2b:c9:e0:51:2d:1a:84:d2:c9:c4:1c:04:
3b:a8:63:6d:74:40:06:de:92:68:88:07:11:0d:80:50:e4:d7:
09:93:6d:cb:61:5e:96:fe:bb:14:54:da:fb:89:f6:ae:d4:89:
57:90:48:60:7e:77:3e:44:a4:7a:fe:b5:42:e6:f6:77:92:b3:
69:63:64:c6:4f:63:e4:f9:c0:7f:df:03:76:e7:6d:9e:fa:f1:
53:60:1c:6d:39:ab:69:82:19:a0:e9:72:c2:5d:ea:72:3b:0b:
88:01:2e:b1:71:6b:3b:da:1e:67:14:3d:1b:cd:8c:c1:4b:fb:
ed:c4:e5:aa:be:3b:00:78:6b:cc:c2:09:44:ac:86:83:8f:a6:
c2:02:07:9e:cf:9b:99:e8:1b:c1:bc:e6:a1:3e:b6:83:b0:7d:
bd:b9:b4:80:ae:89:ef:ae:e7:4c:17:9b:ef:e3:e0:df:6a:6b:
7d:d4:5b:cc:a5:d5:2a:42:de:8c:7d:32:4b:ff:f2:35:45:93:
3a:e7:bb:23:ba:5d:c1:a8:7a:15:d2:64:84:72:77:db:a0:1f:
c5:fd:16:52:97:91:2a:b7:7b:46:f4:a3:fb:ed:20:f7:6e:87:
9b:fa:42:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:26:29 2025 by rpki-client