Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/b7ca89-70f2-408f-a4e4-b4a0cb8ed821/1/bWUK8XJES1IRanpn10qsffilXhw.mft
File: bWUK8XJES1IRanpn10qsffilXhw.mft (raw, json)
Hash identifier: 9PM3M3xZ1OM7tS+HTfXwTiRvA9hF/5B/i04Xcjf95vg=
Subject key identifier: C3:30:34:C7:99:CB:AB:6A:EE:04:78:65:26:92:63:E8:E8:4B:2E:7E
Authority key identifier: 6D:65:0A:F1:72:44:4B:52:11:6A:7A:67:D7:4A:AC:7D:F8:A5:5E:1C
Certificate issuer: /CN=6d650af172444b52116a7a67d74aac7df8a55e1c
Certificate serial: 0197B8214EF8B84CCF5FCC91A6F6241E0E6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWUK8XJES1IRanpn10qsffilXhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/b7ca89-70f2-408f-a4e4-b4a0cb8ed821/1/bWUK8XJES1IRanpn10qsffilXhw.mft
Manifest number: 06B6
Signing time: Sat 28 Jun 2025 20:01:19 +0000
Manifest this update: Sat 28 Jun 2025 20:01:19 +0000
Manifest next update: Sun 29 Jun 2025 20:01:19 +0000
Files and hashes: 1: Eo0dId6A79FMWJgsJrbvuL3-EFE.roa (hash: 681u60p0nhE1DcYKUWV+uIEbDRMQt7MvDh5nM8HZoDY=)
2: JA7bmNFaXPZ3zOhIhSoSK6cX0GM.roa (hash: /9NIaaC/nQfKu4JBvIQ0FkNL7E03OA0xPdL0pUFpcGQ=)
3: bWUK8XJES1IRanpn10qsffilXhw.crl (hash: g5bfNqLUMWrv4n6kG7MM9EpElSBbFofQIftesqwY7tg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/b7ca89-70f2-408f-a4e4-b4a0cb8ed821/1/bWUK8XJES1IRanpn10qsffilXhw.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/b7ca89-70f2-408f-a4e4-b4a0cb8ed821/1/bWUK8XJES1IRanpn10qsffilXhw.mft
rsync://rpki.ripe.net/repository/DEFAULT/bWUK8XJES1IRanpn10qsffilXhw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:4e:f8:b8:4c:cf:5f:cc:91:a6:f6:24:1e:0e:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d650af172444b52116a7a67d74aac7df8a55e1c
Validity
Not Before: Jun 28 20:01:19 2025 GMT
Not After : Jun 29 20:01:19 2025 GMT
Subject: CN=c33034c799cbab6aee047865269263e8e84b2e7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:8c:29:6b:58:59:44:90:62:0a:8d:dd:83:d5:
27:c6:c9:9f:e7:8c:21:16:63:2b:0e:83:6c:38:57:
27:4d:7c:0e:d5:d3:13:99:8b:4d:e0:ca:e3:07:ac:
41:be:cd:8a:d9:eb:82:36:c1:73:59:fa:49:7d:91:
6c:38:b0:1e:af:d0:b8:9e:0c:db:ef:5d:b9:7b:3d:
47:e4:13:5b:50:49:a2:c5:e3:1c:44:f8:c9:c8:bf:
16:69:f2:27:24:dc:40:a0:38:58:3c:c0:7d:16:78:
3b:51:49:68:f2:eb:05:59:6b:78:cc:be:88:80:fa:
e7:cc:93:f1:4b:6f:b0:2a:ae:15:77:51:d2:d2:db:
3b:6e:40:9d:da:e4:37:b6:fa:06:63:89:08:44:65:
d0:cc:d0:2f:27:9c:89:64:d7:a6:70:a2:52:55:c6:
aa:f4:1c:6c:25:89:44:30:f8:5e:40:9c:78:d3:22:
8e:5b:4b:fb:72:1b:83:23:60:d0:5a:77:7d:9a:67:
a3:e6:7e:40:a0:b4:4a:38:f1:a4:4b:00:68:10:8f:
2f:04:e5:8c:c1:57:93:bc:8a:1f:17:89:17:3b:1a:
a1:f8:e9:3c:cb:54:d3:a1:23:ad:48:df:8d:46:64:
2a:c9:f9:9b:45:2c:4a:0c:96:e1:ae:e4:35:60:da:
72:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:30:34:C7:99:CB:AB:6A:EE:04:78:65:26:92:63:E8:E8:4B:2E:7E
X509v3 Authority Key Identifier:
keyid:6D:65:0A:F1:72:44:4B:52:11:6A:7A:67:D7:4A:AC:7D:F8:A5:5E:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWUK8XJES1IRanpn10qsffilXhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/b7ca89-70f2-408f-a4e4-b4a0cb8ed821/1/bWUK8XJES1IRanpn10qsffilXhw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/b7ca89-70f2-408f-a4e4-b4a0cb8ed821/1/bWUK8XJES1IRanpn10qsffilXhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:34:4c:9d:1f:c8:0a:f3:c4:6f:48:7d:36:76:c9:97:7a:02:
27:c2:a1:01:63:3a:15:d4:ac:5a:2f:c3:fd:62:8d:b5:97:c1:
d9:55:2d:f3:b8:93:e3:4f:ca:f2:c0:8a:77:fa:15:9b:48:82:
e1:63:88:72:0d:70:1e:a2:7c:92:b7:29:f4:bb:52:f8:4d:29:
86:bb:b8:e2:ea:42:7d:67:f4:1e:45:e6:47:27:1f:59:83:fe:
ba:d1:87:65:cb:6c:37:89:9e:1e:78:6b:0e:97:16:21:37:67:
72:5b:ab:6f:af:59:7c:8e:d5:a5:11:9a:19:80:3e:58:3f:27:
00:fc:fc:93:32:b7:f2:f0:fc:14:c4:08:60:b3:15:81:7d:54:
af:7e:78:af:78:4e:c7:6b:b2:98:b7:d0:5e:99:ff:64:65:e9:
be:59:55:78:90:22:a9:fb:5d:d1:f1:ac:00:64:54:6e:13:33:
40:20:b9:6e:0a:ae:e0:cb:2e:fc:7f:67:4f:e1:f5:d9:d1:c9:
2f:23:df:ac:be:56:6e:e0:36:80:0d:26:89:d6:9a:13:3f:4e:
fe:5d:46:38:9b:f7:6e:e0:f8:6f:e9:02:a4:7e:fb:20:cb:08:
04:3d:00:fa:da:17:f3:2a:53:b3:6b:07:b7:3e:8e:bf:d0:f4:
fc:c3:7e:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:16:39 2025 by rpki-client