Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/edecb7-bd59-4ebe-b201-6cf131c1caac/1/bGbVyy-crT9IQ_cUpNxi1yE96-g.mft
File: bGbVyy-crT9IQ_cUpNxi1yE96-g.mft (raw, json)
Hash identifier: TpjYbtWNEdn0nRMrRPzcpSWDZamUVIdF2n8IqUR4THA=
Subject key identifier: 41:82:62:71:88:7A:B0:40:FB:43:8C:37:5A:3A:2D:A0:25:2E:93:B1
Authority key identifier: 6C:66:D5:CB:2F:9C:AD:3F:48:43:F7:14:A4:DC:62:D7:21:3D:EB:E8
Certificate issuer: /CN=6c66d5cb2f9cad3f4843f714a4dc62d7213debe8
Certificate serial: 0197C64AC0DBAA85E919863E0CE59E93F460
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bGbVyy-crT9IQ_cUpNxi1yE96-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/edecb7-bd59-4ebe-b201-6cf131c1caac/1/bGbVyy-crT9IQ_cUpNxi1yE96-g.mft
Manifest number: 15BE
Signing time: Tue 01 Jul 2025 14:01:17 +0000
Manifest this update: Tue 01 Jul 2025 14:01:17 +0000
Manifest next update: Wed 02 Jul 2025 14:01:17 +0000
Files and hashes: 1: JAwkYlt_gNZ54Td8tq5GWdme2ug.roa (hash: zUyQFLpVWmBaNa+EvYNx5U2/U4IK1mMjW0Y/zg4R97w=)
2: bGbVyy-crT9IQ_cUpNxi1yE96-g.crl (hash: btxy74cmhzwpbuF0VTmGZu3u/Os9bWW5LWvbL7Ua/tk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/edecb7-bd59-4ebe-b201-6cf131c1caac/1/bGbVyy-crT9IQ_cUpNxi1yE96-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/edecb7-bd59-4ebe-b201-6cf131c1caac/1/bGbVyy-crT9IQ_cUpNxi1yE96-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/bGbVyy-crT9IQ_cUpNxi1yE96-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 14:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c6:4a:c0:db:aa:85:e9:19:86:3e:0c:e5:9e:93:f4:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c66d5cb2f9cad3f4843f714a4dc62d7213debe8
Validity
Not Before: Jul 1 14:01:17 2025 GMT
Not After : Jul 2 14:01:17 2025 GMT
Subject: CN=41826271887ab040fb438c375a3a2da0252e93b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f4:31:e5:f9:1b:16:3d:9a:4c:cd:8d:87:92:
07:44:44:bf:cd:fa:d2:01:a0:ee:c3:6d:96:1b:4b:
5f:d7:f6:d8:96:0d:b6:bc:ea:74:14:cc:8d:f3:0d:
39:a6:f7:2d:b6:fe:62:22:f6:94:38:97:f7:d3:2b:
fa:61:16:68:e8:1e:97:b3:9c:08:5d:ca:bd:27:55:
99:67:64:96:99:99:02:08:32:87:d6:96:b6:2a:38:
35:a7:20:6e:0a:3b:12:60:b8:70:ca:b3:a1:b3:72:
b7:33:4d:31:a3:27:d9:f3:8e:04:88:b5:d1:bb:50:
dd:1d:43:a0:92:41:1f:50:b1:fb:04:49:71:ec:80:
ed:73:d1:f7:a4:1e:76:b2:6e:41:ad:6c:a8:04:57:
68:df:1c:ea:19:01:89:97:7a:9d:5c:2f:44:62:8b:
50:96:47:d0:3f:c0:e6:2a:ea:5d:18:9d:54:c6:89:
88:f5:1a:e4:04:41:a2:d3:89:3d:01:52:8d:4f:de:
79:35:72:77:0b:27:ca:cc:37:4b:35:17:9e:de:47:
6e:b7:28:0a:44:7f:6a:49:70:5b:ce:7a:fe:66:a8:
97:8f:7b:c2:58:ab:58:14:66:46:0c:d3:57:b9:d6:
5c:61:57:d4:7d:fb:ae:dd:70:76:ff:71:1d:de:74:
20:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:82:62:71:88:7A:B0:40:FB:43:8C:37:5A:3A:2D:A0:25:2E:93:B1
X509v3 Authority Key Identifier:
keyid:6C:66:D5:CB:2F:9C:AD:3F:48:43:F7:14:A4:DC:62:D7:21:3D:EB:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bGbVyy-crT9IQ_cUpNxi1yE96-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/edecb7-bd59-4ebe-b201-6cf131c1caac/1/bGbVyy-crT9IQ_cUpNxi1yE96-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/edecb7-bd59-4ebe-b201-6cf131c1caac/1/bGbVyy-crT9IQ_cUpNxi1yE96-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:a4:ee:12:31:c5:55:a5:ae:86:41:4c:f8:81:5f:a4:91:0e:
20:d9:ad:c5:5f:41:fd:87:fd:43:b7:67:92:23:3d:8f:15:34:
d0:ba:c9:91:07:78:73:57:94:6e:ed:5c:89:13:4c:74:3d:f9:
7b:6f:06:7b:8f:61:27:f0:64:39:c2:27:e2:60:21:1b:63:e1:
30:f0:45:ce:4d:03:d3:b6:67:c7:58:ee:be:8a:dd:27:23:4a:
65:bb:a3:8a:df:9e:86:95:b2:03:b1:eb:52:55:ce:2b:68:f2:
26:a4:0f:af:cc:cf:a3:01:3f:7d:bf:9f:94:26:7d:60:6c:5c:
a6:9e:b7:1d:0f:b9:2b:73:26:41:6a:5c:a2:5b:db:0a:e2:fa:
93:7f:1a:0d:dd:fd:65:24:4f:76:22:9a:57:e1:01:53:bb:c6:
0b:75:f0:12:38:92:cd:46:a5:60:f0:c8:33:89:98:bb:2a:0f:
79:58:24:d1:f5:06:81:83:84:fc:eb:33:84:7f:cd:10:38:21:
61:9a:3b:37:f4:d9:ca:a0:b3:24:f5:91:7d:82:28:9f:a6:5c:
43:3f:38:0e:ea:44:bc:7a:ee:b2:47:84:52:68:00:0c:28:49:
98:de:e5:26:58:b0:f8:ba:71:62:67:b0:96:9a:b9:4b:94:ef:
7f:ff:94:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 20:18:10 2025 by rpki-client