Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/bKlE6qnH9tRXQG8ULG4oz1rMasg.mft
File: bKlE6qnH9tRXQG8ULG4oz1rMasg.mft (raw, json)
Hash identifier: L5lvkY7fgIHfjLgzPfv7lA3vUw815ZdjKuVnPaHDImc=
Subject key identifier: A2:6E:AD:2D:F5:3F:32:E6:62:97:86:11:4F:AF:3F:68:A9:27:0E:D4
Authority key identifier: 6C:A9:44:EA:A9:C7:F6:D4:57:40:6F:14:2C:6E:28:CF:5A:CC:6A:C8
Certificate issuer: /CN=6ca944eaa9c7f6d457406f142c6e28cf5acc6ac8
Certificate serial: 0197B8FD4E6B0F9B958CA43442E4CABCB5CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bKlE6qnH9tRXQG8ULG4oz1rMasg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/bKlE6qnH9tRXQG8ULG4oz1rMasg.mft
Manifest number: 0B80
Signing time: Sun 29 Jun 2025 00:01:37 +0000
Manifest this update: Sun 29 Jun 2025 00:01:37 +0000
Manifest next update: Mon 30 Jun 2025 00:01:37 +0000
Files and hashes: 1: U_3B74ujhAJrCWsRNX6BqqwgnVw.roa (hash: t7MohkwWoi0EopfC0Tnorl6v62Y4aRFAg2yz8Q6y9x8=)
2: bKlE6qnH9tRXQG8ULG4oz1rMasg.crl (hash: YENYKmjnRUJLAfJC9rreSP00c6FrunQ5gqi02aecZZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/bKlE6qnH9tRXQG8ULG4oz1rMasg.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/bKlE6qnH9tRXQG8ULG4oz1rMasg.mft
rsync://rpki.ripe.net/repository/DEFAULT/bKlE6qnH9tRXQG8ULG4oz1rMasg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:fd:4e:6b:0f:9b:95:8c:a4:34:42:e4:ca:bc:b5:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ca944eaa9c7f6d457406f142c6e28cf5acc6ac8
Validity
Not Before: Jun 29 00:01:37 2025 GMT
Not After : Jun 30 00:01:37 2025 GMT
Subject: CN=a26ead2df53f32e6629786114faf3f68a9270ed4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a4:11:ec:3c:e7:8d:ce:2d:49:87:10:91:6e:
93:de:69:bf:31:3b:80:fc:df:49:57:ad:58:93:a6:
00:a5:ab:78:d4:7a:e2:a2:b7:4b:04:15:39:16:32:
d8:e8:38:ce:c8:50:55:18:49:64:49:43:ae:13:c5:
3c:d4:91:88:db:ab:0e:82:c5:d6:59:86:de:00:00:
81:8c:d1:34:b4:9e:ba:67:f6:26:1d:75:90:f8:0f:
99:12:02:dd:c0:1b:63:ac:30:78:9d:d5:46:3a:20:
29:db:67:82:79:3b:00:32:4f:ea:e8:27:73:d9:de:
f5:02:23:4a:b9:3d:14:74:dc:68:8b:da:ef:db:5b:
55:52:d5:64:1c:dd:6e:47:a2:46:dd:cf:45:cc:7c:
e4:f9:43:9c:62:af:fd:ac:97:0d:d3:ce:1e:33:08:
0b:50:7e:f0:88:fc:b2:00:4e:10:cd:e4:db:cd:b6:
8e:69:a5:8c:43:d1:6f:44:e5:13:bd:45:06:ec:c5:
18:1a:68:ee:ac:4f:3f:c3:27:eb:65:06:23:30:a4:
f9:a4:39:25:fe:62:33:16:e6:5f:18:74:4e:51:ac:
8f:a3:a6:dc:b4:82:a8:e0:db:53:b6:c5:06:71:ce:
ed:0f:d6:34:4a:f8:57:7e:fe:3e:df:55:14:b9:15:
d8:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:6E:AD:2D:F5:3F:32:E6:62:97:86:11:4F:AF:3F:68:A9:27:0E:D4
X509v3 Authority Key Identifier:
keyid:6C:A9:44:EA:A9:C7:F6:D4:57:40:6F:14:2C:6E:28:CF:5A:CC:6A:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bKlE6qnH9tRXQG8ULG4oz1rMasg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/bKlE6qnH9tRXQG8ULG4oz1rMasg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/0edc0b-7ebb-470a-b056-3de44fc8b3b5/1/bKlE6qnH9tRXQG8ULG4oz1rMasg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:c4:53:29:ea:c7:61:52:4c:36:10:2b:2b:0f:33:ce:63:62:
20:21:16:20:98:43:65:cc:fa:4a:17:7f:e6:a2:48:2b:1c:b9:
04:0a:07:40:9f:8a:ce:3d:3b:63:79:70:46:d3:da:af:f8:93:
91:e4:78:30:1c:2d:5e:4b:7c:a0:67:c1:e4:f2:04:f8:91:2c:
d4:02:f9:f7:79:c6:fb:84:17:69:c4:68:0e:3f:01:f1:bd:30:
19:68:11:3d:01:fe:d9:36:2b:23:b2:fe:e1:37:ed:91:0f:3c:
dd:3a:97:81:25:cb:77:cb:c7:a9:0f:16:9e:96:c6:93:cb:da:
01:3c:a5:30:5d:68:62:33:14:57:86:ac:78:e7:11:3c:9f:1c:
16:0c:70:38:cd:d1:bf:4d:32:5b:c9:ac:ff:20:42:9a:f7:66:
6f:52:10:7b:5f:bf:6d:af:d9:7f:08:a9:7d:c6:d7:fe:48:34:
d8:52:1a:61:e1:98:6c:2d:ed:1f:b0:33:94:e6:21:c5:94:51:
96:2b:2f:4a:94:70:5f:a4:13:93:ed:be:06:06:65:0f:9b:c8:
e5:3e:f3:59:0c:b6:32:23:72:15:be:f8:93:32:36:98:f3:ad:
eb:b5:9e:54:f6:02:b0:45:36:f8:d1:cc:0e:d8:d6:4f:ac:ec:
e2:32:2c:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:05:25 2025 by rpki-client