Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/ffc3c6-f64f-4090-8292-e95e2d3d23e0/1/bZOet0q7zSInwhkqoqN-bcuJjlM.mft
File: bZOet0q7zSInwhkqoqN-bcuJjlM.mft (raw, json)
Hash identifier: tU2Mrw9p7e2xJJjAcx3uEknRf/x84OqlBFEzkxDnvHI=
Subject key identifier: A3:17:CE:25:93:81:16:1B:34:7B:A1:38:3C:0F:A6:97:32:19:D4:B2
Authority key identifier: 6D:93:9E:B7:4A:BB:CD:22:27:C2:19:2A:A2:A3:7E:6D:CB:89:8E:53
Certificate issuer: /CN=6d939eb74abbcd2227c2192aa2a37e6dcb898e53
Certificate serial: 01974B56D3DB7318A31FB93A9CD9CA975FEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bZOet0q7zSInwhkqoqN-bcuJjlM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/ffc3c6-f64f-4090-8292-e95e2d3d23e0/1/bZOet0q7zSInwhkqoqN-bcuJjlM.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 17:01:10 +0000
Manifest this update: Sat 07 Jun 2025 17:01:10 +0000
Manifest next update: Sun 08 Jun 2025 17:01:10 +0000
Files and hashes: 1: O1oreHXoGfE0x_DduepnzXbv1jQ.roa (hash: YJRrGXYLhqb/8S1lAURaXg16hfYVh9EAfo6ckQiEqy0=)
2: bZOet0q7zSInwhkqoqN-bcuJjlM.crl (hash: ieq1IDZ//+4svj9vo0sxbbkaUhDC/xha0VaZ9I3JLKE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/ffc3c6-f64f-4090-8292-e95e2d3d23e0/1/bZOet0q7zSInwhkqoqN-bcuJjlM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/ffc3c6-f64f-4090-8292-e95e2d3d23e0/1/bZOet0q7zSInwhkqoqN-bcuJjlM.mft
rsync://rpki.ripe.net/repository/DEFAULT/bZOet0q7zSInwhkqoqN-bcuJjlM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:56:d3:db:73:18:a3:1f:b9:3a:9c:d9:ca:97:5f:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d939eb74abbcd2227c2192aa2a37e6dcb898e53
Validity
Not Before: Jun 7 17:01:10 2025 GMT
Not After : Jun 8 17:01:10 2025 GMT
Subject: CN=a317ce259381161b347ba1383c0fa6973219d4b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:15:dd:43:3b:ab:6f:d6:1f:ab:a6:8d:b4:18:
e5:4c:fe:7e:6d:a6:e0:6f:7d:ab:26:70:bc:d7:36:
59:bc:50:28:49:70:67:08:94:94:54:2f:c1:ec:bf:
cb:16:6f:60:1f:d5:55:b1:af:1b:a4:18:ed:7b:fc:
9f:16:fc:23:ef:9a:2c:9f:74:19:70:77:fc:2c:a0:
6c:ce:e7:85:68:b0:5e:00:d2:5f:ed:2e:5a:b3:f2:
f3:b6:6a:26:ce:e0:23:b0:2a:47:74:15:a8:18:3c:
92:1c:b2:37:57:21:be:f9:95:19:ed:62:51:a0:bf:
69:cd:a6:c9:79:3a:12:37:b0:b8:a2:3a:dd:48:08:
f7:bc:54:cb:30:b1:5a:94:8f:a6:79:53:d5:aa:20:
5b:bf:fe:47:d5:3b:04:64:8c:db:70:77:a3:18:94:
30:88:e4:9e:6e:fe:e5:df:ef:bb:0b:43:69:3b:81:
44:ff:30:2b:57:66:9c:71:50:ed:a3:df:98:c9:58:
db:a7:f3:72:11:ab:be:d1:41:36:b8:e0:1a:78:fe:
63:a6:fa:08:49:97:be:28:c1:ab:65:06:f2:90:8c:
12:fe:51:16:96:84:19:37:99:ae:ce:26:11:c5:57:
57:49:c0:8e:ee:4d:0f:09:10:c5:c2:1d:d1:b0:38:
1b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:17:CE:25:93:81:16:1B:34:7B:A1:38:3C:0F:A6:97:32:19:D4:B2
X509v3 Authority Key Identifier:
keyid:6D:93:9E:B7:4A:BB:CD:22:27:C2:19:2A:A2:A3:7E:6D:CB:89:8E:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bZOet0q7zSInwhkqoqN-bcuJjlM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/ffc3c6-f64f-4090-8292-e95e2d3d23e0/1/bZOet0q7zSInwhkqoqN-bcuJjlM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/ffc3c6-f64f-4090-8292-e95e2d3d23e0/1/bZOet0q7zSInwhkqoqN-bcuJjlM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:68:45:0a:97:e4:b1:5b:5d:07:ad:b8:65:dd:c5:60:93:6b:
43:62:d8:eb:ac:4f:93:99:a8:95:5a:2b:84:4e:63:a5:13:af:
6f:10:34:16:4d:a6:c8:9f:36:04:dc:8a:35:d8:22:55:9d:1e:
ea:9c:cd:89:54:fd:62:c3:7e:03:bc:54:e8:b8:9f:d5:cf:c1:
63:7f:c2:64:16:ec:03:16:89:30:b1:4e:94:66:4d:02:ec:ea:
dd:b1:77:bb:fa:22:98:48:47:95:56:c7:32:8b:3d:a9:2c:7c:
7c:96:e8:63:f8:7a:79:2b:e5:d4:e2:d8:25:ec:39:15:3b:ec:
45:35:87:c6:f4:60:3a:8c:f4:8f:95:6a:0e:c9:d2:39:e0:6b:
e9:70:71:a4:b0:45:3d:96:9a:bb:c0:5c:d9:67:f2:9d:bd:af:
cf:e5:da:be:03:b1:e9:5e:51:15:e8:46:ae:93:14:10:0f:1e:
a5:6f:a1:6d:79:15:c2:e7:55:57:46:87:70:9c:e5:96:df:19:
95:88:65:cd:e0:6e:95:cf:36:ae:c1:83:96:6e:be:97:29:fa:
d2:ea:84:97:db:d2:36:5c:33:ef:e3:4c:8c:ca:ae:ec:4e:37:
4f:2a:1b:50:02:0a:14:31:bd:39:ab:2f:d9:ad:1c:51:7f:fd:
23:c8:c8:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:03:11 2025 by rpki-client