Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/589eca-3f19-4e23-a3fb-3303f71622f9/1/bkBn13v-qZ3yXOXgipIT0RKAFM8.mft
File: bkBn13v-qZ3yXOXgipIT0RKAFM8.mft (raw, json)
Hash identifier: CioHKnfaIJM35+JCvWYysJ53H5SErPCWe8s7LRCSugo=
Subject key identifier: B3:0B:9D:83:F3:FB:B9:DC:5E:6E:79:34:12:D6:00:44:2E:0E:16:38
Authority key identifier: 6E:40:67:D7:7B:FE:A9:9D:F2:5C:E5:E0:8A:92:13:D1:12:80:14:CF
Certificate issuer: /CN=6e4067d77bfea99df25ce5e08a9213d1128014cf
Certificate serial: 0197B7EAC760D9F890D91A05A5605EB710DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bkBn13v-qZ3yXOXgipIT0RKAFM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/589eca-3f19-4e23-a3fb-3303f71622f9/1/bkBn13v-qZ3yXOXgipIT0RKAFM8.mft
Manifest number: 15BC
Signing time: Sat 28 Jun 2025 19:01:46 +0000
Manifest this update: Sat 28 Jun 2025 19:01:46 +0000
Manifest next update: Sun 29 Jun 2025 19:01:46 +0000
Files and hashes: 1: adNDLvUmYkNZRHIO-8EvQkOny3U.roa (hash: JFJ+lodVDeHLySNvitcsYBxq8cfuImJHPxEA0H+DjjY=)
2: bkBn13v-qZ3yXOXgipIT0RKAFM8.crl (hash: 5QgmzcdhWK4SFQmmdChJnkoFkG8hvaZm2lrNO2HJnUk=)
3: iktdBTw9X8o6AOOEkLAyuZNK_gg.roa (hash: 2nzjnmBtk5vklJiWyvmO30xEFTmYF5gvtQ11fyrTZUE=)
4: mQ9zePbKKPrER63rktmN5-Z8AoQ.roa (hash: qfFxiv4hVcYLNON7vIi9UIknKo4icjwq21EoSvpzScg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/589eca-3f19-4e23-a3fb-3303f71622f9/1/bkBn13v-qZ3yXOXgipIT0RKAFM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/589eca-3f19-4e23-a3fb-3303f71622f9/1/bkBn13v-qZ3yXOXgipIT0RKAFM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bkBn13v-qZ3yXOXgipIT0RKAFM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:c7:60:d9:f8:90:d9:1a:05:a5:60:5e:b7:10:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e4067d77bfea99df25ce5e08a9213d1128014cf
Validity
Not Before: Jun 28 19:01:46 2025 GMT
Not After : Jun 29 19:01:46 2025 GMT
Subject: CN=b30b9d83f3fbb9dc5e6e793412d600442e0e1638
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:32:b1:22:54:44:68:0b:0c:2b:c1:03:5e:28:
ef:67:51:29:21:65:0e:5a:57:ef:e5:90:67:2a:28:
cf:1d:36:89:ab:0e:a7:e1:1e:6f:87:9a:bc:f8:e3:
40:69:25:8c:31:eb:4c:57:b9:e2:36:ac:8a:20:52:
b7:20:6d:0a:18:ab:4f:03:de:0c:a0:27:3d:27:1b:
51:76:6d:66:cc:80:b3:9e:17:1b:1b:6f:6a:c9:58:
41:38:47:8a:5a:97:e4:16:4e:c4:69:91:e8:1f:17:
4a:e5:ff:bc:b8:7d:86:c7:04:07:bf:4d:d7:1a:29:
34:4b:de:00:d2:17:62:cc:5c:66:98:a7:2c:18:15:
c1:5c:2f:d1:e6:f8:7e:40:21:4f:a9:c5:89:0e:c8:
3e:92:e9:1a:8f:5e:c7:3a:cb:8f:70:6b:6b:54:e7:
97:9f:69:2a:28:f0:80:cd:1a:b3:c2:1d:bb:40:c1:
38:6b:cd:45:2e:39:47:e4:05:bf:2c:d1:0e:01:04:
8f:04:27:d5:d9:ae:2e:e3:ea:bc:12:a8:d5:9f:c6:
68:3a:e2:3b:a8:2c:76:8a:bf:21:f4:6e:f1:4b:19:
c0:03:39:78:76:38:62:e9:82:5b:7b:f6:ff:ce:45:
6c:21:59:1c:0f:27:1e:7f:96:4b:66:4c:60:03:d0:
d8:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:0B:9D:83:F3:FB:B9:DC:5E:6E:79:34:12:D6:00:44:2E:0E:16:38
X509v3 Authority Key Identifier:
keyid:6E:40:67:D7:7B:FE:A9:9D:F2:5C:E5:E0:8A:92:13:D1:12:80:14:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bkBn13v-qZ3yXOXgipIT0RKAFM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/589eca-3f19-4e23-a3fb-3303f71622f9/1/bkBn13v-qZ3yXOXgipIT0RKAFM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/589eca-3f19-4e23-a3fb-3303f71622f9/1/bkBn13v-qZ3yXOXgipIT0RKAFM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:68:6e:4c:9d:8c:4b:9d:fd:a1:a0:0e:6e:73:1c:f8:48:a8:
b6:6f:17:3d:2f:56:a4:07:2d:37:47:f5:8a:4f:39:7c:93:ff:
ca:1c:8a:21:b4:e9:0d:7a:4e:27:de:01:09:91:f4:03:47:be:
f4:7c:31:d7:fb:82:ab:c9:c0:ef:f9:46:b8:61:e4:d2:31:0b:
3a:5b:aa:07:86:9a:a8:12:99:23:5d:f4:3b:23:ec:15:23:77:
f6:f2:7c:6b:e0:46:e8:77:ba:6b:02:ea:d8:d6:5d:0a:de:78:
61:6a:2f:2c:1c:3c:64:e7:5f:f9:2a:a7:ee:ab:20:ea:74:43:
42:de:42:fd:b9:09:f3:15:65:01:f4:45:90:5a:d2:47:36:89:
a0:53:67:f5:00:48:f8:9e:6f:29:d0:b1:2f:1b:2b:1a:e9:2a:
96:3f:3f:da:3a:d5:06:fe:8a:a3:27:d4:2c:96:2b:5e:1b:d3:
d7:7c:e1:44:2d:65:b0:b9:77:78:a5:1b:59:1b:c0:2f:b1:d6:
b2:c9:87:7f:b2:37:25:5d:97:73:49:ea:47:c5:01:11:2b:bf:
f5:72:47:35:7f:8a:5b:13:bf:93:d2:d0:23:52:28:aa:2a:9f:
d2:00:c0:c7:79:4c:66:fb:a9:2f:67:ea:8a:fe:91:03:e9:5b:
7f:e6:a1:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:43:05 2025 by rpki-client