Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.mft
File: B9CN-Lx6OD6XbbsD0qDrn-DXhuc.mft (raw, json)
Hash identifier: AKu0JMQNyKUjc0nG2RJhjJw5n/zjMX87IXzM8uaLly4=
Subject key identifier: 23:77:20:1B:A8:C8:36:48:0C:2D:8F:DD:DE:1F:EB:78:56:10:81:20
Authority key identifier: 07:D0:8D:F8:BC:7A:38:3E:97:6D:BB:03:D2:A0:EB:9F:E0:D7:86:E7
Certificate issuer: /CN=07d08df8bc7a383e976dbb03d2a0eb9fe0d786e7
Certificate serial: 0197B6325BD58FD11F8E7A087921DE140831
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 11:00:42 +0000
Manifest this update: Sat 28 Jun 2025 11:00:42 +0000
Manifest next update: Sun 29 Jun 2025 11:00:42 +0000
Files and hashes: 1: B9CN-Lx6OD6XbbsD0qDrn-DXhuc.crl (hash: oS9CnhsrWxumddzFVknrWLg8OmYbRK66Qp4dpyi5jbc=)
2: bOCBzzRvzuJPuu-j2dvPA0mnOUw.roa (hash: InvZiY5TCPmmHvBaq4Cag3h3swbwKMBYSgXMQxCeJZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:5b:d5:8f:d1:1f:8e:7a:08:79:21:de:14:08:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07d08df8bc7a383e976dbb03d2a0eb9fe0d786e7
Validity
Not Before: Jun 28 11:00:42 2025 GMT
Not After : Jun 29 11:00:42 2025 GMT
Subject: CN=2377201ba8c836480c2d8fddde1feb7856108120
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ef:ee:2f:a9:5a:ff:72:fb:fe:e4:e8:39:21:
7b:e3:93:50:59:39:b0:5e:d8:06:f9:bd:c2:7d:9d:
f5:ed:28:47:0a:fe:9d:e5:ec:56:25:0e:77:79:34:
8b:b0:6d:36:9b:1c:89:e9:f3:f5:25:7f:cd:b7:cb:
67:a8:f5:75:6b:a9:4c:87:6a:d6:ee:08:e9:69:38:
e9:03:63:79:66:29:f3:be:9c:bb:a0:af:5c:46:5b:
57:8e:81:94:a8:c5:9a:c7:a0:1e:e7:f4:95:1f:19:
0b:ef:c4:cd:30:a7:c4:c0:f9:19:95:02:7d:2e:35:
95:48:18:5d:00:77:3e:41:16:3d:e2:fd:c3:92:75:
da:8c:b4:98:e3:b2:4f:ab:8a:76:5a:9f:26:01:27:
68:4e:a1:fd:ab:6d:ad:d3:84:c8:73:81:40:12:e8:
21:87:f3:b3:81:f7:62:4a:f5:18:50:79:cc:71:d1:
9e:62:9f:56:2c:59:ca:e5:74:c3:c9:2b:6a:3f:3b:
56:ac:8f:e1:71:d7:e3:12:fa:e2:60:20:df:f6:3d:
70:1d:fe:b1:24:ac:c7:da:4e:81:c1:ee:10:88:62:
b4:00:48:cb:60:77:27:aa:fa:36:af:3c:88:e5:0e:
93:ab:b9:ad:49:64:9a:56:79:50:fb:14:aa:ae:42:
11:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:77:20:1B:A8:C8:36:48:0C:2D:8F:DD:DE:1F:EB:78:56:10:81:20
X509v3 Authority Key Identifier:
keyid:07:D0:8D:F8:BC:7A:38:3E:97:6D:BB:03:D2:A0:EB:9F:E0:D7:86:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:3c:40:e2:48:df:8f:58:b4:fd:23:5e:99:f5:6b:98:51:8c:
30:49:b0:64:e7:dc:16:08:29:52:ca:e4:3f:62:a1:05:59:c8:
11:50:78:7f:57:37:45:d8:e4:6b:a3:41:7e:66:80:58:1b:ec:
51:f8:2b:19:ad:66:00:8f:27:05:d0:e3:b0:d1:15:32:3c:e5:
63:f1:94:d2:a9:81:59:d7:6d:23:5c:1f:bd:ac:ec:f2:52:8e:
15:ae:d3:93:57:97:3c:88:1e:f9:0b:d8:de:bb:f9:91:84:b2:
64:f0:59:7f:a8:ec:09:6b:c4:62:b2:98:9e:b0:c9:01:52:b2:
26:c4:85:4f:bf:49:fd:ac:32:3c:d7:52:dc:0d:03:8c:33:f6:
44:4e:9d:19:d9:cd:8a:75:f7:a6:84:af:64:e8:5d:3e:7a:32:
c9:80:6c:e7:40:be:60:37:f1:d2:c3:00:4c:1d:13:df:cc:11:
ca:a6:c4:13:f2:d5:80:f9:9d:ad:39:0e:61:b3:20:e6:3f:09:
ac:21:12:64:f6:e6:1e:12:29:62:e4:9d:9f:12:6c:18:66:9a:
2d:41:7a:87:c2:23:5f:23:3c:1e:05:38:bd:14:f5:0c:d8:58:
8c:3e:00:74:87:e4:b3:2f:d3:d9:1e:42:7a:87:05:eb:d5:13:
1f:91:cf:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:02:10 2025 by rpki-client