Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.mft
File: bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.mft (raw, json)
Hash identifier: jNni0NYaojDn8kEJOn1cCgG/rvZDrKIrUjwWI49U75A=
Subject key identifier: 3C:79:23:42:37:17:BA:62:7E:9C:1C:3C:19:FA:19:C1:D9:93:46:98
Authority key identifier: 6C:B0:DE:C1:3D:F2:05:A6:6E:C5:22:79:25:B8:F5:6B:DB:09:F4:99
Certificate issuer: /CN=6cb0dec13df205a66ec5227925b8f56bdb09f499
Certificate serial: 0197C12468ACF84C13E3760B7E7623E4ACD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.mft
Manifest number: 139F
Signing time: Mon 30 Jun 2025 14:01:18 +0000
Manifest this update: Mon 30 Jun 2025 14:01:18 +0000
Manifest next update: Tue 01 Jul 2025 14:01:18 +0000
Files and hashes: 1: 4fkynkxl95431dIe-ABsA7v5RCg.roa (hash: EGfFvZoQzCGUyDaxbnd+O3QTAMwiWmSgrk3gdk+vKlc=)
2: bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.crl (hash: 5PsDQqr4fA7J4fFaLrclcFCTnv0lyE46CS5xpJSzKfc=)
3: lgA3OzlgN5mO-phBlXIn8VKgG_E.roa (hash: FrDJm2Vh5IZpvHu6Ip1jtuiPOr7jqRjxluv8XgGr48o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.mft
rsync://rpki.ripe.net/repository/DEFAULT/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 14:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c1:24:68:ac:f8:4c:13:e3:76:0b:7e:76:23:e4:ac:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cb0dec13df205a66ec5227925b8f56bdb09f499
Validity
Not Before: Jun 30 14:01:18 2025 GMT
Not After : Jul 1 14:01:18 2025 GMT
Subject: CN=3c7923423717ba627e9c1c3c19fa19c1d9934698
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:7b:f9:bd:74:f7:f5:34:59:69:bf:ba:e7:85:
eb:26:04:95:d3:06:1e:f2:6d:0f:bb:9c:f6:f8:ec:
99:76:4c:b9:8f:77:3e:75:83:e2:b1:c0:dd:27:a2:
67:c9:75:91:a9:8d:c7:2f:1f:f3:81:d7:a3:4d:01:
ba:09:bd:91:c7:57:93:5c:4e:cf:66:d1:82:94:72:
1b:e0:e7:de:a5:fd:ea:26:d8:14:a5:5c:2e:65:ea:
c6:f3:02:7e:9d:82:e2:e2:50:6b:5c:9a:63:bd:45:
07:a4:9f:b0:60:04:4a:af:52:2b:92:87:80:de:96:
20:d2:c3:71:8f:f7:0b:c1:e9:e3:ac:04:cb:45:3c:
84:33:f8:4c:87:f6:ea:ca:45:14:bf:4f:13:9f:c0:
61:4b:1d:ed:77:8c:da:89:11:3c:b2:92:54:42:3d:
d2:a3:d8:3e:19:7a:3d:05:fd:cf:55:1a:74:58:5b:
b6:6f:8b:cc:57:7e:e1:59:f1:08:b3:36:e2:28:2e:
f2:f6:fd:cc:05:a3:7f:58:23:b8:cf:7f:85:04:60:
b5:00:61:f4:a0:d6:7b:e4:b7:20:c8:9d:a0:08:29:
64:79:15:17:ef:0c:77:b6:1a:71:f9:bf:35:68:75:
27:d1:f8:c6:6f:62:6c:13:6f:4e:ba:1c:6f:ba:0a:
7c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:79:23:42:37:17:BA:62:7E:9C:1C:3C:19:FA:19:C1:D9:93:46:98
X509v3 Authority Key Identifier:
keyid:6C:B0:DE:C1:3D:F2:05:A6:6E:C5:22:79:25:B8:F5:6B:DB:09:F4:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/ca46fc-3847-4f1d-9ce4-52b9e6a16350/1/bLDewT3yBaZuxSJ5Jbj1a9sJ9Jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:c9:bf:be:ca:ee:38:7e:75:9f:03:73:1d:da:ba:53:9d:8f:
79:a2:fd:10:85:d4:41:3a:94:69:60:0c:80:e6:ea:08:4d:81:
d4:57:6f:46:ab:51:7f:2b:4e:74:f6:c1:68:31:a6:5f:87:bf:
a2:87:50:07:54:1a:6a:ec:1e:eb:cd:2c:92:49:92:a0:7e:9f:
85:67:ad:6a:07:0a:7b:b1:3d:8c:ba:d5:69:35:44:71:14:ea:
bb:0a:78:e1:a2:71:99:5a:81:99:1b:f4:6a:46:3b:13:7c:e3:
73:e0:0f:8c:a9:47:d6:87:fb:68:ea:6c:92:ca:cd:56:f5:c8:
b5:80:a8:78:ab:80:bf:d7:69:af:a4:c0:79:50:19:2b:36:b6:
ab:7d:21:ce:92:48:be:b0:91:c9:6a:da:d9:eb:a9:86:77:e5:
aa:1b:3b:38:99:18:9f:35:52:9c:68:64:42:9f:a2:e2:6c:6d:
b5:db:88:41:2d:9f:13:b9:8b:f9:aa:9a:08:90:5b:c8:94:00:
4e:53:41:3c:9a:69:c9:92:73:58:44:74:51:d0:1b:1c:f7:c6:
20:d3:8a:70:7e:b6:81:42:6e:4b:80:59:81:d4:73:bf:02:53:
f2:59:14:24:70:2d:36:da:f3:4a:8b:dc:df:91:97:81:93:73:
b0:d9:de:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 20:27:20 2025 by rpki-client