Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.mft
File: v42FRzQuL8ns-t_O8Azyc--dbpA.mft (raw, json)
Hash identifier: 9MqrzshO0wyXc+jAJw9ZSym5azlGDe19YQ4XXF5ISbY=
Subject key identifier: 75:34:B7:11:E7:63:5C:F6:FC:3E:73:5F:CB:A5:B9:A5:7A:A7:FE:89
Authority key identifier: BF:8D:85:47:34:2E:2F:C9:EC:FA:DF:CE:F0:0C:F2:73:EF:9D:6E:90
Certificate issuer: /CN=bf8d8547342e2fc9ecfadfcef00cf273ef9d6e90
Certificate serial: 0197B8C61A5DE1EC08701ED0E5AD4B899159
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v42FRzQuL8ns-t_O8Azyc--dbpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.mft
Manifest number: 0316
Signing time: Sat 28 Jun 2025 23:01:19 +0000
Manifest this update: Sat 28 Jun 2025 23:01:19 +0000
Manifest next update: Sun 29 Jun 2025 23:01:19 +0000
Files and hashes: 1: fwI8WQwy5fbXMlIKzIdcXaYEMU0.roa (hash: bPDJhxbWV/nawvua5orm+AkfyQvA9xpKaA3uAdqYMPA=)
2: v42FRzQuL8ns-t_O8Azyc--dbpA.crl (hash: xyQ+LQvwBREsyvGWN1aV7yEDZuD9LLaXcJpr1Ax0xos=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.mft
rsync://rpki.ripe.net/repository/DEFAULT/v42FRzQuL8ns-t_O8Azyc--dbpA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 23:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:c6:1a:5d:e1:ec:08:70:1e:d0:e5:ad:4b:89:91:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf8d8547342e2fc9ecfadfcef00cf273ef9d6e90
Validity
Not Before: Jun 28 23:01:19 2025 GMT
Not After : Jun 29 23:01:19 2025 GMT
Subject: CN=7534b711e7635cf6fc3e735fcba5b9a57aa7fe89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c8:75:e6:be:47:a6:20:6c:9f:89:31:2c:04:
cb:5c:c6:fb:96:b9:06:cb:42:71:92:9b:ff:85:2a:
66:ca:a2:a5:63:72:c1:db:d6:84:6f:fe:82:a9:7c:
a1:77:c3:3f:04:61:bb:35:4e:d4:f0:7c:53:cf:41:
5a:4d:79:99:73:db:21:1d:95:96:2f:d0:79:d8:50:
2a:67:40:21:85:f1:e9:75:ac:6c:bf:97:79:78:e3:
1b:25:cf:0b:5a:ae:dd:96:b9:f6:0f:68:91:28:4a:
a2:d8:ac:73:cc:75:58:25:9a:33:02:22:3a:92:b7:
79:4a:e5:7a:6f:7e:04:0b:8e:24:ce:72:18:c7:99:
27:79:70:19:8d:96:dc:13:96:92:51:92:06:6b:8e:
b4:5d:f1:6d:89:41:7d:0c:4a:0e:f5:5e:b2:c9:97:
bb:5d:10:66:ad:96:03:58:cf:ca:c5:f6:a9:39:39:
ff:2d:af:9d:e3:99:03:52:dc:a2:8b:9f:ab:50:e8:
62:d0:9e:48:b0:2b:81:2d:51:9e:a8:24:02:f2:bd:
ff:95:49:9a:1d:cd:f4:e9:e9:5d:ac:36:f7:7c:72:
ef:85:c0:d6:4f:1f:0d:4f:6b:f8:25:eb:28:eb:27:
96:d3:2f:cf:a2:fd:ef:d1:3c:36:e0:b8:46:d3:04:
d5:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:34:B7:11:E7:63:5C:F6:FC:3E:73:5F:CB:A5:B9:A5:7A:A7:FE:89
X509v3 Authority Key Identifier:
keyid:BF:8D:85:47:34:2E:2F:C9:EC:FA:DF:CE:F0:0C:F2:73:EF:9D:6E:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v42FRzQuL8ns-t_O8Azyc--dbpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/b6f734-c655-43a1-9934-1e71930fcc0f/1/v42FRzQuL8ns-t_O8Azyc--dbpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:26:46:01:73:26:89:7c:6f:34:c6:e9:a5:d1:64:4d:9b:34:
64:a3:d5:c9:e3:cd:07:48:dd:b2:82:14:c2:57:0e:c6:03:25:
d8:e1:f1:46:5e:cf:c3:69:e1:fe:c0:25:66:80:2b:9e:0c:6d:
72:f4:8a:77:a0:dd:e1:6b:ca:84:fb:66:8d:88:a8:d4:7d:50:
2c:e9:23:c9:8e:c7:b2:da:68:f3:3c:36:83:20:1f:9c:03:ad:
e1:8f:8c:c5:1c:a3:be:60:23:ce:7a:97:f9:aa:61:b6:1e:33:
11:89:54:a5:3f:43:81:dc:55:02:36:19:76:52:a4:40:2b:af:
98:36:b6:6e:8f:e6:22:00:5c:e6:03:b9:51:11:d2:f5:cc:06:
7d:7f:06:05:7a:ef:4d:f5:61:6d:98:9e:bd:ea:07:dc:a3:c0:
72:c2:dc:8c:13:44:39:31:d2:8a:e3:68:bd:d2:f3:38:a6:b8:
79:a4:88:4f:04:d4:3b:a4:d7:49:9b:53:7e:5a:27:7c:00:08:
3f:f0:f8:1c:4b:82:85:b2:9f:be:5e:cb:c1:c9:9d:96:ca:05:
53:92:33:94:d5:75:1c:9b:d1:d4:d0:45:0b:5f:bb:90:73:15:
e9:0c:b0:d7:3a:08:e6:65:bc:8d:85:a7:4a:44:b9:55:23:5c:
a7:cd:62:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:41:44 2025 by rpki-client