Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/B0rSOkz6MbbVXryhbF0UxAS6bK0.mft
File: B0rSOkz6MbbVXryhbF0UxAS6bK0.mft (raw, json)
Hash identifier: wAyafguo1B75xTAZ9htzS1603DYFjRBZSshMUSt006g=
Subject key identifier: 3E:C2:D3:7E:21:A2:7E:CA:13:6D:B4:B8:91:DA:6E:54:44:AC:22:73
Authority key identifier: 07:4A:D2:3A:4C:FA:31:B6:D5:5E:BC:A1:6C:5D:14:C4:04:BA:6C:AD
Certificate issuer: /CN=074ad23a4cfa31b6d55ebca16c5d14c404ba6cad
Certificate serial: 0197B77CABDBEE1A55221C076277E5C197F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B0rSOkz6MbbVXryhbF0UxAS6bK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/B0rSOkz6MbbVXryhbF0UxAS6bK0.mft
Manifest number: 104A
Signing time: Sat 28 Jun 2025 17:01:30 +0000
Manifest this update: Sat 28 Jun 2025 17:01:30 +0000
Manifest next update: Sun 29 Jun 2025 17:01:30 +0000
Files and hashes: 1: B0rSOkz6MbbVXryhbF0UxAS6bK0.crl (hash: MN1IM7za4lA5DRVV3BgTWR1Ye7b13FYlVyxh/FWIiR8=)
2: by6raZCZNNtEi9tbGKEvnYOsqYE.roa (hash: aOGc7df3nlEJOygOWFL3hI418E+YoyI9nyziWKFPXfY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/B0rSOkz6MbbVXryhbF0UxAS6bK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/B0rSOkz6MbbVXryhbF0UxAS6bK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/B0rSOkz6MbbVXryhbF0UxAS6bK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:ab:db:ee:1a:55:22:1c:07:62:77:e5:c1:97:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=074ad23a4cfa31b6d55ebca16c5d14c404ba6cad
Validity
Not Before: Jun 28 17:01:30 2025 GMT
Not After : Jun 29 17:01:30 2025 GMT
Subject: CN=3ec2d37e21a27eca136db4b891da6e5444ac2273
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:8e:b4:20:65:e1:85:f4:a5:e9:87:0b:57:59:
7d:4a:14:d5:35:45:00:71:6d:bb:f1:69:1d:8d:ec:
62:2b:c1:4d:fa:74:eb:90:4f:83:39:95:07:23:30:
02:c1:e2:4a:d5:4f:eb:7f:71:5a:66:15:f6:99:ec:
b4:d8:1e:c0:1a:68:73:60:d3:95:7f:e7:5d:2e:ad:
29:d1:29:e8:bd:9d:99:43:74:69:f6:4e:f7:74:10:
9a:44:7c:85:c3:31:1a:4e:15:73:6d:37:c2:a2:d6:
8d:47:76:fd:37:48:c2:cb:44:c0:71:7c:f2:1a:11:
e6:e8:4d:82:18:e2:0a:27:2e:2d:9d:7f:d5:fb:46:
b9:4e:ba:30:83:01:aa:fd:16:fe:6c:5c:8a:e1:e4:
71:f8:3b:64:a2:f7:a3:0a:b3:bb:17:0b:b2:94:db:
95:cc:4d:77:6d:7f:67:8b:76:bd:7e:48:8f:8b:25:
0d:2b:ec:9d:db:2f:ea:4a:a2:31:86:ce:ab:2b:51:
39:79:29:23:2c:44:be:d8:86:25:14:56:40:b7:3d:
f1:a3:e8:24:0e:47:ee:8d:c5:67:30:9e:ff:e6:f4:
2f:f9:f1:5d:ac:72:ab:5e:97:be:7b:61:e3:ac:7f:
11:48:76:75:b9:23:b6:48:ca:bf:c9:86:e3:27:3e:
b8:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:C2:D3:7E:21:A2:7E:CA:13:6D:B4:B8:91:DA:6E:54:44:AC:22:73
X509v3 Authority Key Identifier:
keyid:07:4A:D2:3A:4C:FA:31:B6:D5:5E:BC:A1:6C:5D:14:C4:04:BA:6C:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B0rSOkz6MbbVXryhbF0UxAS6bK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/B0rSOkz6MbbVXryhbF0UxAS6bK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/bd3a46-727b-476c-a789-c8c991cd89d5/1/B0rSOkz6MbbVXryhbF0UxAS6bK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:cb:3c:35:81:68:61:44:a0:b0:70:e2:54:87:aa:1d:22:88:
4c:4b:db:57:5d:de:b8:7d:f7:4d:50:4f:57:5a:9b:e4:ab:e6:
fc:c9:7a:ff:10:4e:b8:b8:51:29:3a:67:73:e3:95:47:e3:1d:
b2:c0:e3:cc:2e:50:3d:99:15:68:87:52:36:4b:c1:c8:99:80:
20:54:ff:4b:bb:72:a1:fe:6d:49:68:8e:78:42:3f:9e:bd:f8:
8d:64:da:79:fb:1c:28:bb:ab:5c:b3:bd:4a:a4:ba:cc:01:e0:
b5:f0:91:c0:57:6a:22:83:d7:89:0e:86:56:d1:13:18:7f:1f:
3f:8c:4f:71:fb:b3:c4:df:9d:0d:05:b6:88:ac:d2:88:92:a7:
7b:87:a2:46:0e:4e:91:21:e8:2f:78:08:1d:3c:d8:68:b1:73:
cd:b2:0a:ba:c4:13:78:f1:2a:02:a3:e5:e1:44:a5:4e:0e:4f:
2f:05:81:a5:e3:f0:d7:9f:ba:a8:17:dc:b8:02:34:26:3d:3a:
44:20:5d:6b:59:56:3d:9e:65:a7:cd:62:a3:65:4c:22:98:0b:
59:d1:c2:77:6a:6e:95:68:a4:f3:9d:7b:92:98:28:f7:f4:74:
aa:0e:f6:c7:73:d5:d1:e3:ca:79:8e:71:6d:1a:7e:ca:ec:09:
7a:93:df:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:19:31 2025 by rpki-client