Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/42f54b-57c0-424a-acf5-4dd4d0f53849/1/bn8ivutSxuUaJCKxORQu6gP7XU0.mft
File: bn8ivutSxuUaJCKxORQu6gP7XU0.mft (raw, json)
Hash identifier: JWILdxvWFY7zmweFbhyDxwEe4iHphEm+CfJ4QPqDSbE=
Subject key identifier: 99:6B:2A:9A:1B:73:5F:6E:BD:85:0C:A6:81:8B:32:5D:85:24:2C:D0
Authority key identifier: 6E:7F:22:BE:EB:52:C6:E5:1A:24:22:B1:39:14:2E:EA:03:FB:5D:4D
Certificate issuer: /CN=6e7f22beeb52c6e51a2422b139142eea03fb5d4d
Certificate serial: 01974D0E244FBD54EDD60D2805D4D4B1221B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bn8ivutSxuUaJCKxORQu6gP7XU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/42f54b-57c0-424a-acf5-4dd4d0f53849/1/bn8ivutSxuUaJCKxORQu6gP7XU0.mft
Manifest number: 157D
Signing time: Sun 08 Jun 2025 01:01:01 +0000
Manifest this update: Sun 08 Jun 2025 01:01:01 +0000
Manifest next update: Mon 09 Jun 2025 01:01:01 +0000
Files and hashes: 1: bn8ivutSxuUaJCKxORQu6gP7XU0.crl (hash: m1I42Xk2zXY22I4zE1pL33S0xom3W5VvBkxtBZHmIk0=)
2: z4IVFfra9dO93PZl7xdhmVhqzoE.roa (hash: 90ivV2dV0BSclFTId5ah7Fo9mKfLvO9taEvtncU7b/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/42f54b-57c0-424a-acf5-4dd4d0f53849/1/bn8ivutSxuUaJCKxORQu6gP7XU0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/42f54b-57c0-424a-acf5-4dd4d0f53849/1/bn8ivutSxuUaJCKxORQu6gP7XU0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bn8ivutSxuUaJCKxORQu6gP7XU0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 01:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:0e:24:4f:bd:54:ed:d6:0d:28:05:d4:d4:b1:22:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e7f22beeb52c6e51a2422b139142eea03fb5d4d
Validity
Not Before: Jun 8 01:01:01 2025 GMT
Not After : Jun 9 01:01:01 2025 GMT
Subject: CN=996b2a9a1b735f6ebd850ca6818b325d85242cd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:67:39:2d:11:80:d3:d0:49:7f:84:a0:61:20:
ea:a6:43:c2:60:9e:a6:bb:d3:44:7b:47:11:da:39:
2f:a8:8b:dd:81:51:60:af:53:ba:02:63:1d:f2:95:
a8:f7:51:7f:47:ec:43:4b:4a:69:b7:2e:01:fc:be:
0e:22:d6:58:d2:77:bc:20:96:17:e2:d9:7e:02:41:
71:0b:9b:a9:eb:1b:fb:2a:a0:2b:f4:7e:9d:b9:83:
3e:d7:ef:b9:0a:92:1d:00:1a:21:1d:2f:70:f6:75:
78:c4:75:03:d4:f0:fe:7c:a1:66:da:28:2e:68:fc:
62:f0:17:96:02:db:09:56:1c:83:dc:a2:dd:b2:1a:
fc:f5:d9:c4:76:a4:15:88:21:c7:6e:86:85:51:e8:
f1:cc:1f:94:3a:b5:67:80:3c:05:62:f2:64:39:4f:
cb:2d:fe:d5:d8:e2:d5:8a:7f:41:8a:d3:e5:32:ae:
8a:0c:9a:70:0a:1d:11:63:ec:33:55:6e:17:ee:a7:
72:81:f6:3c:99:75:01:bc:56:3d:18:c6:f8:cf:63:
1d:cc:1d:dd:ee:a7:18:03:e4:43:2c:8e:c6:48:81:
da:84:e3:57:30:e5:63:3a:f0:be:f3:d4:19:0c:63:
c2:f8:17:36:42:8c:40:88:07:a3:04:f8:7e:81:6c:
9b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:6B:2A:9A:1B:73:5F:6E:BD:85:0C:A6:81:8B:32:5D:85:24:2C:D0
X509v3 Authority Key Identifier:
keyid:6E:7F:22:BE:EB:52:C6:E5:1A:24:22:B1:39:14:2E:EA:03:FB:5D:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bn8ivutSxuUaJCKxORQu6gP7XU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/42f54b-57c0-424a-acf5-4dd4d0f53849/1/bn8ivutSxuUaJCKxORQu6gP7XU0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/42f54b-57c0-424a-acf5-4dd4d0f53849/1/bn8ivutSxuUaJCKxORQu6gP7XU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:65:88:6c:c5:3c:d1:81:66:19:76:39:12:d6:2b:e5:ae:b8:
45:cb:aa:92:e5:ea:22:44:4b:a4:98:37:2f:f0:0a:a5:20:54:
b3:af:93:b1:c3:b6:e1:20:78:a4:af:52:37:1f:ad:30:8c:54:
fa:6b:2c:85:00:83:4f:d5:13:97:c8:69:b1:89:dc:df:6a:a1:
56:61:97:6d:a2:83:85:14:69:4d:5e:33:12:69:ee:18:f5:dc:
c1:6e:7d:47:30:85:8a:9d:55:d2:84:33:9f:09:e8:fc:7a:45:
62:1f:e5:79:6e:0a:af:b0:1f:c6:d9:0b:eb:7f:50:90:3e:fb:
ca:8b:f6:ef:89:42:01:f8:ae:61:21:2b:8a:af:14:a1:94:b8:
05:e8:42:54:ff:60:f4:25:16:63:5c:4b:5e:26:84:d3:79:c7:
20:23:ba:bb:5d:e9:94:3b:07:f9:c0:6b:6e:a5:94:d7:38:98:
68:2e:50:a2:9b:45:df:8e:e2:2e:11:b3:ec:7b:ee:34:78:0e:
7b:ab:8f:f0:ea:12:96:a3:49:0b:e7:9b:2a:3b:b4:f6:81:62:
5a:75:e3:1c:af:39:96:67:69:a8:f5:1c:a2:6b:b7:6a:33:7a:
77:f2:8c:f4:cb:52:d1:42:a5:ec:3f:c0:b5:3e:b4:b9:4e:35:
71:72:9b:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:08:15 2025 by rpki-client