Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/bDgMi05V5ZCBr3OqGTXhCgEgV_o.mft
File: bDgMi05V5ZCBr3OqGTXhCgEgV_o.mft (raw, json)
Hash identifier: f/cMChYl8lc7g08P/JrfoySC5zlIs0aMIvB3HzR3ge0=
Subject key identifier: AD:0A:57:36:B6:41:87:11:E8:D6:16:83:28:B2:FE:FA:29:1F:CB:10
Authority key identifier: 6C:38:0C:8B:4E:55:E5:90:81:AF:73:AA:19:35:E1:0A:01:20:57:FA
Certificate issuer: /CN=6c380c8b4e55e59081af73aa1935e10a012057fa
Certificate serial: 0197C4263D3CD1C0290AC75C23CB29D06740
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bDgMi05V5ZCBr3OqGTXhCgEgV_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/bDgMi05V5ZCBr3OqGTXhCgEgV_o.mft
Manifest number: 15BC
Signing time: Tue 01 Jul 2025 04:02:09 +0000
Manifest this update: Tue 01 Jul 2025 04:02:09 +0000
Manifest next update: Wed 02 Jul 2025 04:02:09 +0000
Files and hashes: 1: G8ZxZv3rAsdyjkZIWbmu2tXV_Og.roa (hash: lGe21WZY7KMyNN8ysWzw0Q97lgbjrid4+uoj3fQOhEo=)
2: bDgMi05V5ZCBr3OqGTXhCgEgV_o.crl (hash: hQbyUUXNMEPnphqOtKeCN5n/xspn03kL9C1/kTRApjM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/bDgMi05V5ZCBr3OqGTXhCgEgV_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/bDgMi05V5ZCBr3OqGTXhCgEgV_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/bDgMi05V5ZCBr3OqGTXhCgEgV_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 04:02:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c4:26:3d:3c:d1:c0:29:0a:c7:5c:23:cb:29:d0:67:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c380c8b4e55e59081af73aa1935e10a012057fa
Validity
Not Before: Jul 1 04:02:09 2025 GMT
Not After : Jul 2 04:02:09 2025 GMT
Subject: CN=ad0a5736b6418711e8d6168328b2fefa291fcb10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ad:de:ae:36:2a:de:92:ee:74:cf:7a:ac:1f:
c3:43:24:73:4b:c9:8b:2f:37:bf:f0:f1:be:03:40:
9c:ce:c5:0d:67:2d:9f:1c:a7:e9:b6:8d:ba:0d:2e:
69:c4:73:97:ee:b5:f9:e5:26:08:49:f9:d3:2c:94:
16:7a:9c:75:a0:a6:ab:65:eb:8d:59:eb:b1:a6:88:
67:e4:b3:e0:c7:f6:a3:b9:67:08:5a:ed:85:6f:fa:
69:d1:32:7c:9e:ac:a4:1e:32:14:1b:4b:dd:55:89:
31:5e:6e:70:67:a1:57:0f:50:ce:f5:6e:fc:74:28:
b7:46:b3:ac:32:f9:52:d8:98:9b:9a:03:2f:40:1a:
33:86:77:90:32:b5:64:8a:0e:3b:e3:7d:a8:e9:37:
25:57:70:26:9f:2c:7d:c2:b6:e5:a2:bc:5d:ac:13:
cf:bd:85:24:f2:79:23:20:71:08:38:b2:64:e9:74:
98:b0:8c:bd:f5:00:2a:3b:47:ef:23:e6:59:84:98:
b6:00:9c:e9:24:79:26:1a:bc:f1:8d:91:60:8f:f2:
88:37:d9:a5:42:8e:46:ee:61:f0:72:58:47:08:45:
98:5c:73:2e:3e:13:81:7d:5e:ed:2a:77:cb:d7:c5:
ac:40:d6:bb:f2:5c:be:fe:af:30:09:1c:00:96:44:
39:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:0A:57:36:B6:41:87:11:E8:D6:16:83:28:B2:FE:FA:29:1F:CB:10
X509v3 Authority Key Identifier:
keyid:6C:38:0C:8B:4E:55:E5:90:81:AF:73:AA:19:35:E1:0A:01:20:57:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bDgMi05V5ZCBr3OqGTXhCgEgV_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/bDgMi05V5ZCBr3OqGTXhCgEgV_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3e42c7-155a-49aa-aa00-08f094daf247/1/bDgMi05V5ZCBr3OqGTXhCgEgV_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:fc:a2:02:22:ba:3d:ee:f5:55:fe:77:3f:c7:8a:3d:a3:46:
dd:90:c9:04:53:18:11:c5:20:92:09:83:95:8c:bd:4c:b1:b4:
8c:71:14:b2:b3:01:43:00:86:9d:12:dd:2b:20:a1:bb:4f:d6:
67:23:b7:0f:2b:80:e5:05:01:cd:1e:20:cc:f2:0d:89:5d:a3:
af:72:ff:7c:9b:6b:10:a9:ee:77:40:96:de:af:9d:a6:46:7b:
00:55:a2:06:e1:36:d1:37:cd:28:91:12:9c:f6:14:96:d3:13:
8f:6f:30:fb:25:00:51:b5:4c:fe:5d:fb:5f:da:22:7b:ef:34:
9b:39:29:92:d3:0d:0a:83:58:64:98:3a:ea:39:8e:0e:fb:3d:
92:fb:61:b9:20:71:ae:6f:ff:99:c6:79:11:f2:88:4c:71:5e:
6b:fa:b3:ae:45:df:8a:ea:7a:0c:6c:fc:51:59:9c:52:a0:cf:
f9:b6:2b:50:a0:8e:02:3b:aa:84:9a:06:cc:df:6b:b1:d6:5c:
40:d5:a0:0c:40:6d:0f:bc:86:c2:27:36:3a:a0:97:01:24:88:
31:29:dd:29:ae:ec:cf:b0:dc:fc:61:09:90:5f:2e:4d:d9:32:
1a:c9:db:04:23:4d:f0:03:54:d5:b6:b4:3b:62:e8:75:52:46:
07:a8:96:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 10:56:27 2025 by rpki-client