Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/d74cb2-f0fc-4f2c-be01-536e1f0c4ff9/1/bNxpTwwyVdXVVz8TKOU2VM-yLE0.mft
File: bNxpTwwyVdXVVz8TKOU2VM-yLE0.mft (raw, json)
Hash identifier: fMk+zrTLEggnvnrytL3azDcFVULgKVCo6vlq1scWeSE=
Subject key identifier: E3:37:EB:27:2A:8D:DD:08:F6:F9:EB:91:1F:4C:C8:7F:98:D9:AE:34
Authority key identifier: 6C:DC:69:4F:0C:32:55:D5:D5:57:3F:13:28:E5:36:54:CF:B2:2C:4D
Certificate issuer: /CN=6cdc694f0c3255d5d5573f1328e53654cfb22c4d
Certificate serial: 0197B77C407B3C8BBCE0A8D21BA4C5F3EAB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bNxpTwwyVdXVVz8TKOU2VM-yLE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/d74cb2-f0fc-4f2c-be01-536e1f0c4ff9/1/bNxpTwwyVdXVVz8TKOU2VM-yLE0.mft
Manifest number: 0D2A
Signing time: Sat 28 Jun 2025 17:01:02 +0000
Manifest this update: Sat 28 Jun 2025 17:01:02 +0000
Manifest next update: Sun 29 Jun 2025 17:01:02 +0000
Files and hashes: 1: bNxpTwwyVdXVVz8TKOU2VM-yLE0.crl (hash: jk5bIsOCqyNV8RCMuQU6o7bZjiIXbWMRGECPDGqP0LI=)
2: mf0dhA7BgjaM7eDjfmF7DxTSVfY.roa (hash: 1vX40l9RdR1damElfdrSUBtrrLE1iQPxYSNwcaRMl0Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/d74cb2-f0fc-4f2c-be01-536e1f0c4ff9/1/bNxpTwwyVdXVVz8TKOU2VM-yLE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/d74cb2-f0fc-4f2c-be01-536e1f0c4ff9/1/bNxpTwwyVdXVVz8TKOU2VM-yLE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bNxpTwwyVdXVVz8TKOU2VM-yLE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:40:7b:3c:8b:bc:e0:a8:d2:1b:a4:c5:f3:ea:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cdc694f0c3255d5d5573f1328e53654cfb22c4d
Validity
Not Before: Jun 28 17:01:02 2025 GMT
Not After : Jun 29 17:01:02 2025 GMT
Subject: CN=e337eb272a8ddd08f6f9eb911f4cc87f98d9ae34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:75:b2:f0:5f:c7:ac:0b:a4:00:bd:f2:38:e6:
92:8b:5e:c2:72:1c:1b:13:fb:d9:69:85:28:a6:5c:
4b:c8:dd:c7:b1:b2:7f:8d:1c:a7:07:c2:95:af:dc:
dd:3b:d2:65:28:37:86:f3:33:c1:7d:d3:99:c9:1f:
8b:46:23:47:ea:11:3d:23:87:da:61:0f:99:2e:69:
57:44:a3:44:c1:c8:3c:0b:be:cf:79:a5:ab:c1:9e:
0e:8c:5e:26:93:82:8a:fe:a1:98:2a:22:b0:5c:bd:
87:09:cb:a9:82:d8:dc:e7:28:fd:d1:eb:78:f1:14:
37:df:ea:81:a2:6f:d1:b6:08:dd:a6:a6:74:2d:af:
46:8c:04:97:6a:1e:44:0f:3e:9c:c5:1f:db:65:c2:
0f:9b:b6:2f:d7:35:b1:b1:00:c9:61:3c:96:d4:34:
26:e6:8a:66:64:ac:00:9e:08:01:93:46:c9:f1:79:
ff:43:08:9c:d2:c0:22:92:33:4c:2c:de:c2:c6:de:
ae:a4:9c:c6:72:79:42:ca:c0:02:da:1d:96:f6:60:
61:26:35:6d:43:5d:ec:0c:9d:0b:8a:1b:c3:fb:5c:
e3:47:a2:23:33:f9:8b:a9:ab:bf:01:4f:8a:e0:e3:
5a:3e:f7:e6:04:cd:b9:9b:b8:90:05:e4:85:a8:f4:
f0:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:37:EB:27:2A:8D:DD:08:F6:F9:EB:91:1F:4C:C8:7F:98:D9:AE:34
X509v3 Authority Key Identifier:
keyid:6C:DC:69:4F:0C:32:55:D5:D5:57:3F:13:28:E5:36:54:CF:B2:2C:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bNxpTwwyVdXVVz8TKOU2VM-yLE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d74cb2-f0fc-4f2c-be01-536e1f0c4ff9/1/bNxpTwwyVdXVVz8TKOU2VM-yLE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d74cb2-f0fc-4f2c-be01-536e1f0c4ff9/1/bNxpTwwyVdXVVz8TKOU2VM-yLE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:66:64:f3:85:05:7a:9f:8e:51:31:b8:3f:2e:94:af:4a:19:
16:fd:de:0f:81:a3:8e:32:dd:89:db:b2:29:1c:15:5c:e3:96:
93:df:92:45:51:4e:6f:39:b1:5c:2a:8c:50:9f:a1:eb:d5:c7:
1d:96:2b:bb:7b:42:89:a7:fc:74:7f:d7:47:f8:f0:c9:92:df:
3f:74:48:d7:be:86:1c:62:b6:ba:cc:6b:24:f0:a3:5c:b1:41:
f2:5b:2b:74:96:f9:5e:cf:f6:6d:68:c3:15:30:0f:96:0a:cd:
72:62:cc:4a:e7:fa:7b:4f:d4:4b:2c:99:66:76:71:19:6e:17:
91:c3:f7:93:e2:25:4b:18:9a:cf:ad:84:c7:02:0d:11:05:35:
31:63:b9:36:21:18:cb:f5:1d:00:8b:8a:18:5c:7b:69:92:9b:
29:92:52:0f:cc:87:4d:d1:1a:d8:14:8e:03:ae:51:12:b2:a4:
57:59:b0:8d:fb:8c:b3:ad:c0:86:90:3c:dc:bb:2d:6b:4d:20:
21:d9:71:c8:13:83:98:4a:e3:13:36:8c:7e:ba:97:a2:59:fd:
05:b2:a3:5f:1b:a8:37:f5:19:55:5a:c6:c8:86:58:2f:3f:4c:
8e:d3:01:74:19:27:91:9e:ef:0d:ca:8c:db:af:ee:c5:60:a0:
52:ec:9a:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:22:42 2025 by rpki-client