Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/a2c386-d5e9-4ad9-938a-0d1d174c4351/1/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.mft
File: bBp2F5Xw9mv_JHi0aM3g2FHtGIc.mft (raw, json)
Hash identifier: THXAqnN6tg3TDxTwt+v3Auc6gXCfWcTJN2HCVagP3B0=
Subject key identifier: DF:5B:73:24:E4:81:C5:89:C3:B0:0D:71:9F:82:E8:16:5D:2E:9D:74
Authority key identifier: 6C:1A:76:17:95:F0:F6:6B:FF:24:78:B4:68:CD:E0:D8:51:ED:18:87
Certificate issuer: /CN=6c1a761795f0f66bff2478b468cde0d851ed1887
Certificate serial: 0197B6A0DEEE8FB63E7BD39263E0986A54BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a2c386-d5e9-4ad9-938a-0d1d174c4351/1/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.mft
Manifest number: 0BBD
Signing time: Sat 28 Jun 2025 13:01:25 +0000
Manifest this update: Sat 28 Jun 2025 13:01:25 +0000
Manifest next update: Sun 29 Jun 2025 13:01:25 +0000
Files and hashes: 1: 2yP7wLJMuWi-DdvVYt0iPnrDkx4.roa (hash: tlC/Cdti9DOTrW2vJ3/LMhMeuxhFOtOxFl2p6304PGs=)
2: bBp2F5Xw9mv_JHi0aM3g2FHtGIc.crl (hash: vqTEphATF5BwsdDf2QHlJnwWcWDOUlhojxXxRRbFrT8=)
3: yizlH9bVBZ4r4iRvvbJ2VP3ozzg.roa (hash: r5Y34WQoYI5TwsCESbJ739CvzI3jr7yM4zMajr00BD4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/a2c386-d5e9-4ad9-938a-0d1d174c4351/1/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/a2c386-d5e9-4ad9-938a-0d1d174c4351/1/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.mft
rsync://rpki.ripe.net/repository/DEFAULT/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:de:ee:8f:b6:3e:7b:d3:92:63:e0:98:6a:54:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c1a761795f0f66bff2478b468cde0d851ed1887
Validity
Not Before: Jun 28 13:01:25 2025 GMT
Not After : Jun 29 13:01:25 2025 GMT
Subject: CN=df5b7324e481c589c3b00d719f82e8165d2e9d74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:e8:61:56:9c:a2:45:be:14:65:25:82:d5:c3:
e6:41:28:ff:3f:5f:34:16:8c:43:89:da:e7:ad:92:
da:64:5a:57:7c:1a:0e:4a:fc:44:62:5f:53:ec:5b:
4b:ff:80:12:f2:02:2f:ec:b8:0a:97:4d:83:14:25:
13:ba:aa:b2:41:2a:aa:15:8f:13:69:c1:8b:62:69:
4e:9e:fe:b5:cd:3e:81:a0:67:f7:d5:f5:5c:8d:44:
7d:ee:a3:58:e0:d5:47:9d:e3:9c:1c:1c:4c:32:be:
62:cd:43:b0:f5:25:af:0f:f1:aa:81:bf:66:bd:2c:
b6:4b:19:8e:fb:bd:14:50:a1:aa:44:01:48:31:6d:
f4:ee:0f:1c:33:aa:62:e9:49:fb:60:e7:c9:d6:fe:
a4:69:bf:bc:6d:22:fc:95:ec:89:a2:10:07:24:91:
15:f8:d2:22:87:30:68:0b:e1:80:50:30:83:bd:61:
36:6b:4e:71:84:6f:41:d2:b5:7c:a6:b8:b9:88:9b:
84:ae:06:bf:98:14:c1:3f:53:86:80:5e:27:58:b9:
ce:f7:50:84:69:c0:18:9a:b4:c2:8e:37:20:85:d8:
bb:88:b9:ed:8a:db:6d:eb:bb:48:1e:45:ed:c4:b8:
cc:b9:31:2c:7b:34:30:22:a6:a0:26:67:80:fa:5b:
93:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:5B:73:24:E4:81:C5:89:C3:B0:0D:71:9F:82:E8:16:5D:2E:9D:74
X509v3 Authority Key Identifier:
keyid:6C:1A:76:17:95:F0:F6:6B:FF:24:78:B4:68:CD:E0:D8:51:ED:18:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a2c386-d5e9-4ad9-938a-0d1d174c4351/1/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a2c386-d5e9-4ad9-938a-0d1d174c4351/1/bBp2F5Xw9mv_JHi0aM3g2FHtGIc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:79:10:e7:63:7b:b3:fd:47:69:81:6b:a0:14:13:64:54:01:
ce:c4:3b:35:09:97:8e:8d:83:09:36:c7:d3:22:c8:da:d7:18:
8c:04:82:f5:56:96:e3:fa:01:88:12:fe:c6:2b:18:5e:65:9b:
f0:0c:7c:e2:6a:75:43:2f:ce:57:7b:17:a9:96:dd:0a:de:09:
2c:39:8f:f3:a4:61:c3:a0:1c:e6:7d:30:24:3e:c5:15:3c:2a:
e5:aa:f7:1c:72:fd:cd:4e:d5:9d:13:60:26:e2:e5:68:24:13:
54:c1:49:25:12:55:cc:af:46:66:d8:c7:86:f5:51:da:d5:7f:
29:9f:ca:4f:2d:f8:cd:de:b3:5b:6f:a1:88:72:01:0d:c6:35:
1d:01:47:c7:fa:21:93:77:f9:bc:c1:8f:5f:10:ad:d1:e6:26:
38:9a:f6:98:68:68:f6:0f:b7:22:30:b2:22:12:eb:ea:24:26:
d5:a6:07:0f:6b:5b:7b:c4:fb:93:af:0e:c6:ce:09:fe:4d:87:
65:51:bf:d4:5e:4e:ca:64:58:53:89:4f:d9:1d:8d:d4:b3:10:
da:c5:27:82:f5:01:e4:7b:97:53:5f:6e:fa:94:ff:64:86:10:
b7:52:c5:6b:97:da:72:02:61:61:85:76:7a:ef:19:d9:b2:36:
9c:d3:0d:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:43:30 2025 by rpki-client