Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/e73436-2251-49b4-b357-984c957a353e/1/b027wGlmny5-iCL2OY9rNsRJNFw.mft
File: b027wGlmny5-iCL2OY9rNsRJNFw.mft (raw, json)
Hash identifier: H+DpzdOjnIfOGOBDdIgsiOP4Dvd02HrqHxSyOe7E930=
Subject key identifier: B8:CF:22:F5:5E:4F:BF:53:59:42:6D:92:FF:EE:1A:87:C9:22:45:29
Authority key identifier: 6F:4D:BB:C0:69:66:9F:2E:7E:88:22:F6:39:8F:6B:36:C4:49:34:5C
Certificate issuer: /CN=6f4dbbc069669f2e7e8822f6398f6b36c449345c
Certificate serial: 0197B7EA52615C5DC3A5748B9B6CA16B5FAD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b027wGlmny5-iCL2OY9rNsRJNFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/e73436-2251-49b4-b357-984c957a353e/1/b027wGlmny5-iCL2OY9rNsRJNFw.mft
Manifest number: 13C2
Signing time: Sat 28 Jun 2025 19:01:16 +0000
Manifest this update: Sat 28 Jun 2025 19:01:16 +0000
Manifest next update: Sun 29 Jun 2025 19:01:16 +0000
Files and hashes: 1: b027wGlmny5-iCL2OY9rNsRJNFw.crl (hash: 5/GqOhvSa3wif7ws4vXUJrv8nIXtXD5KU3Lctx4ej+c=)
2: iG5MloBb0rNBUXMwGnMdFUHFQBI.roa (hash: /505m7zfXiVDkYV7zSm4uW5ug6R08YZLzHTRAa/aV2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/e73436-2251-49b4-b357-984c957a353e/1/b027wGlmny5-iCL2OY9rNsRJNFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/e73436-2251-49b4-b357-984c957a353e/1/b027wGlmny5-iCL2OY9rNsRJNFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/b027wGlmny5-iCL2OY9rNsRJNFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:52:61:5c:5d:c3:a5:74:8b:9b:6c:a1:6b:5f:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f4dbbc069669f2e7e8822f6398f6b36c449345c
Validity
Not Before: Jun 28 19:01:16 2025 GMT
Not After : Jun 29 19:01:16 2025 GMT
Subject: CN=b8cf22f55e4fbf5359426d92ffee1a87c9224529
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7e:26:04:30:c1:ba:8f:f6:ec:6f:10:94:55:
f2:a8:1c:7a:74:d3:99:56:24:25:f0:8d:9c:6b:7a:
1f:cf:69:f1:33:39:9e:25:cf:0c:91:df:68:ee:23:
df:bf:74:3d:eb:b6:66:7c:47:f0:72:0c:12:0b:ad:
ec:6e:95:7e:34:76:6f:64:89:11:25:31:87:ee:21:
04:05:86:c4:07:ca:ee:7a:90:56:d4:9e:51:64:90:
a4:24:24:15:45:b4:af:69:7f:84:ef:6b:93:24:18:
71:80:43:32:67:91:2e:4a:b5:bc:80:1f:93:2c:03:
4f:53:72:04:30:94:8a:48:ff:d3:e5:fe:f2:97:3d:
aa:69:73:f1:d3:26:4a:5e:16:86:51:6f:30:bf:f9:
fe:fb:64:02:41:07:47:e6:3d:6b:46:98:04:ef:e2:
19:87:6d:15:52:1d:dc:fe:bb:d3:30:c2:4a:7e:c5:
19:8d:c9:8b:f3:8a:fc:c8:74:0c:d7:83:20:88:80:
12:91:30:73:51:c1:ce:d1:1c:64:da:a7:49:1c:eb:
2a:60:14:86:8c:97:33:62:b6:8b:47:5d:5c:ed:f9:
d4:08:9d:f7:95:72:92:a7:97:df:d8:1b:48:a1:5e:
eb:bc:b1:87:1f:51:20:65:f9:51:9c:fa:8e:80:95:
0b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:CF:22:F5:5E:4F:BF:53:59:42:6D:92:FF:EE:1A:87:C9:22:45:29
X509v3 Authority Key Identifier:
keyid:6F:4D:BB:C0:69:66:9F:2E:7E:88:22:F6:39:8F:6B:36:C4:49:34:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b027wGlmny5-iCL2OY9rNsRJNFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/e73436-2251-49b4-b357-984c957a353e/1/b027wGlmny5-iCL2OY9rNsRJNFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/e73436-2251-49b4-b357-984c957a353e/1/b027wGlmny5-iCL2OY9rNsRJNFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:8d:bb:db:9e:6a:29:cc:3a:fc:4f:43:70:cb:3f:a8:4b:d8:
2c:78:45:e0:ac:19:6e:c1:74:2e:67:f8:65:4b:80:c9:f3:2e:
ff:dd:0a:df:a4:d0:b1:d4:f2:67:84:86:48:d3:89:14:12:47:
08:48:6b:67:a8:42:ef:f5:77:44:c8:01:76:58:41:d0:28:1f:
d1:b3:7e:55:65:6a:74:61:2c:17:ad:98:cb:8e:38:38:0b:5a:
8b:13:04:67:df:9c:b2:1d:d5:18:b9:f1:71:6a:e8:3c:13:e8:
21:95:8a:b5:02:bf:a8:06:11:c9:a8:6b:4c:71:e7:dd:ed:6f:
4a:ab:5a:1d:91:d1:31:18:cc:77:40:2e:4d:07:bb:fe:e4:d7:
8c:f7:99:d5:03:19:95:15:71:21:6f:4f:de:97:18:36:3b:ef:
b2:9d:03:ef:f8:82:d8:4f:06:97:15:d6:db:b9:9a:1f:55:1c:
a9:65:b1:04:89:4b:3f:6b:bc:c3:a6:f5:78:32:57:8f:3b:e6:
9a:36:e7:d7:62:36:01:6e:8a:42:4b:43:b2:1c:14:eb:0f:4e:
52:33:bd:07:15:ff:ea:9c:4c:ab:73:c3:45:4b:8b:60:a2:11:
ec:47:13:52:85:99:8a:2f:9c:e8:8b:9e:55:b4:62:99:08:40:
8b:39:bc:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:46:51 2025 by rpki-client