Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.mft
File: bsJOKsnNUzmWUVkM85Gta78bPiY.mft (raw, json)
Hash identifier: SC8FSDKAJsXmJiyUNx/Xi3OABAwvxQL23xzoUH3WU1k=
Subject key identifier: C7:A6:7B:D9:0E:43:A6:AB:FA:56:B0:82:AF:5E:86:78:35:5F:56:56
Authority key identifier: 6E:C2:4E:2A:C9:CD:53:39:96:51:59:0C:F3:91:AD:6B:BF:1B:3E:26
Certificate issuer: /CN=6ec24e2ac9cd53399651590cf391ad6bbf1b3e26
Certificate serial: 0197B7B3254FB1C7F245B446B52F07087EAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bsJOKsnNUzmWUVkM85Gta78bPiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.mft
Manifest number: 071E
Signing time: Sat 28 Jun 2025 18:01:00 +0000
Manifest this update: Sat 28 Jun 2025 18:01:00 +0000
Manifest next update: Sun 29 Jun 2025 18:01:00 +0000
Files and hashes: 1: JztZZ5jdsYiJwH6r3ruJ841yjPA.roa (hash: fWtXOGVQeuynraDkbnyZnR91bHF3bELX/gnfpid099o=)
2: bsJOKsnNUzmWUVkM85Gta78bPiY.crl (hash: ThEoSLilf+TmSeDIfxHNnzuWXhXzqSDvAFHw7ElnEO8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bsJOKsnNUzmWUVkM85Gta78bPiY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:25:4f:b1:c7:f2:45:b4:46:b5:2f:07:08:7e:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ec24e2ac9cd53399651590cf391ad6bbf1b3e26
Validity
Not Before: Jun 28 18:01:00 2025 GMT
Not After : Jun 29 18:01:00 2025 GMT
Subject: CN=c7a67bd90e43a6abfa56b082af5e8678355f5656
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:c7:aa:ce:3f:c4:a0:28:0f:61:45:66:5b:8f:
b8:20:63:dc:2c:12:27:70:04:c1:c6:ac:b9:6e:62:
09:24:e7:16:4e:ba:d7:29:d3:dc:bf:c5:b1:84:b7:
8e:02:4b:54:c3:91:2a:e1:0d:83:49:37:ed:27:b5:
c7:07:e1:fc:69:38:50:32:b7:9f:4f:15:ac:6f:33:
70:62:37:61:d4:d0:a3:52:f8:24:f4:2e:04:8f:b5:
b0:2e:bc:c9:39:a3:a6:0b:32:51:c5:28:73:8d:53:
d5:f8:2c:ce:d3:46:c0:03:21:72:4a:6b:15:de:20:
bf:6b:68:aa:12:64:a8:b3:de:d2:78:7b:ed:ae:7f:
8a:73:d3:cb:00:49:89:83:25:28:47:b9:6d:6f:cb:
ac:76:a3:de:a7:fe:95:7c:ce:f0:f2:ad:e5:e1:03:
a8:80:d9:a9:b1:50:3d:a5:89:a1:98:15:b7:d8:62:
be:ce:14:65:31:db:c4:6a:fc:7e:bb:69:96:ff:b4:
0c:5a:e5:7d:0a:27:cf:37:9b:b4:d9:8f:77:5e:2b:
2c:d6:0b:50:77:5a:1b:0a:36:9f:b4:3d:2b:2d:94:
9a:f2:8f:df:40:bf:c8:16:c8:8c:5a:08:68:58:0f:
fc:1b:c6:86:30:18:e5:00:39:43:ab:0b:0b:b2:d4:
82:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:A6:7B:D9:0E:43:A6:AB:FA:56:B0:82:AF:5E:86:78:35:5F:56:56
X509v3 Authority Key Identifier:
keyid:6E:C2:4E:2A:C9:CD:53:39:96:51:59:0C:F3:91:AD:6B:BF:1B:3E:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bsJOKsnNUzmWUVkM85Gta78bPiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/c1f962-88d6-4642-a2d3-7a7473c545b1/1/bsJOKsnNUzmWUVkM85Gta78bPiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:24:40:3d:c8:5f:37:52:bd:44:1c:c0:56:ba:e2:ea:7e:35:
9c:3e:1c:c8:aa:45:4e:ec:60:b4:00:c8:f5:a9:2c:1a:92:f3:
19:ef:ea:30:f0:02:67:9a:19:f5:b3:73:3f:8c:56:99:cc:6f:
c3:80:60:fb:b0:14:c0:50:c5:c2:9f:a2:7e:ab:77:d9:d8:68:
83:f4:fd:41:86:c6:a6:9e:d8:09:ea:c9:d5:39:c5:8c:39:a6:
6f:fa:7e:8d:fe:d9:dc:c5:b8:82:e5:6f:79:80:47:10:ff:55:
ac:c5:19:7a:5a:3b:64:49:c4:d6:b1:bf:35:96:7a:c8:cc:de:
90:e8:ae:2e:87:10:9b:ee:a0:27:79:1d:05:e6:01:62:5b:7b:
a7:0f:0e:58:b9:26:b9:6c:94:db:bb:11:f7:16:3d:da:c0:8e:
09:18:11:d8:d2:1c:bf:14:02:2d:6c:1f:d8:20:61:be:11:3a:
c1:72:bb:54:12:12:18:d9:e0:59:83:be:50:f2:43:36:35:bb:
2c:e7:a3:11:1f:42:20:dd:29:13:ed:af:d7:2c:84:10:92:8b:
0f:6d:5f:b1:b9:07:b3:5f:10:07:8d:10:49:72:da:20:31:7d:
a7:b2:4e:3b:66:10:8d:c6:c4:80:2b:dd:6c:90:0f:38:24:5d:
2b:c2:a8:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:04:35 2025 by rpki-client