Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/d23dde-e24f-4258-a7ce-eef6c2f45176/1/bws2ahNvj8xd9SPI1G95B5HBs7s.mft
File: bws2ahNvj8xd9SPI1G95B5HBs7s.mft (raw, json)
Hash identifier: fJW362URjUC0R6wtOfDZoQEBpHsPYcpYGru0Qa9yERk=
Subject key identifier: 34:07:30:1D:B5:9E:41:5B:E2:66:D0:A1:1B:8C:3C:C1:B0:75:38:9E
Authority key identifier: 6F:0B:36:6A:13:6F:8F:CC:5D:F5:23:C8:D4:6F:79:07:91:C1:B3:BB
Certificate issuer: /CN=6f0b366a136f8fcc5df523c8d46f790791c1b3bb
Certificate serial: 0197B6A16379AA40B3C6DB7D2FDCE0544E84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bws2ahNvj8xd9SPI1G95B5HBs7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/d23dde-e24f-4258-a7ce-eef6c2f45176/1/bws2ahNvj8xd9SPI1G95B5HBs7s.mft
Manifest number: 0E28
Signing time: Sat 28 Jun 2025 13:01:59 +0000
Manifest this update: Sat 28 Jun 2025 13:01:59 +0000
Manifest next update: Sun 29 Jun 2025 13:01:59 +0000
Files and hashes: 1: CUY45Y1KmLWjDR8KaCm8pfbWmHk.roa (hash: Wr/mH88dBzO09g3KW6jW/bHo4ew9LfQROwCNYWZRYNQ=)
2: bws2ahNvj8xd9SPI1G95B5HBs7s.crl (hash: 33va+jTI8+e5E2vJkSR3g2hPf23xCU7BoCtIIkh/9Zc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/d23dde-e24f-4258-a7ce-eef6c2f45176/1/bws2ahNvj8xd9SPI1G95B5HBs7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/d23dde-e24f-4258-a7ce-eef6c2f45176/1/bws2ahNvj8xd9SPI1G95B5HBs7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/bws2ahNvj8xd9SPI1G95B5HBs7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:63:79:aa:40:b3:c6:db:7d:2f:dc:e0:54:4e:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f0b366a136f8fcc5df523c8d46f790791c1b3bb
Validity
Not Before: Jun 28 13:01:59 2025 GMT
Not After : Jun 29 13:01:59 2025 GMT
Subject: CN=3407301db59e415be266d0a11b8c3cc1b075389e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:74:71:ba:4d:87:2f:82:f2:eb:fb:74:b3:06:
11:69:bf:95:36:d0:85:22:d6:f4:87:dd:a7:73:99:
30:3e:df:81:f2:7f:89:eb:c1:d7:f3:02:48:a4:64:
c4:99:6b:9d:85:a5:29:69:7f:fd:d4:42:2d:2f:bc:
2e:b9:81:0f:97:d8:7d:e8:04:5a:89:4b:78:89:66:
69:f1:31:64:d9:9b:b8:ae:96:5b:ee:2e:45:b3:da:
7e:4e:15:d1:40:b9:ca:8f:d8:fe:89:be:57:76:95:
38:21:fb:ef:29:a3:1a:94:db:92:24:e1:21:e6:2b:
91:15:a8:78:2c:3a:cf:13:9c:b7:70:d7:b1:48:dc:
85:77:b0:44:e0:59:89:16:67:e6:0a:6f:cd:5d:ac:
75:5d:ca:a0:2e:88:a5:a3:29:54:a3:4e:7a:27:95:
bc:99:6e:de:76:75:cf:f7:12:82:eb:4a:c5:e3:dc:
a3:15:c6:fd:92:8f:4f:06:fd:75:ee:69:e9:6c:19:
98:a9:b5:79:9b:40:e9:77:b4:c5:90:54:53:be:90:
4c:3c:da:c7:b6:94:17:f3:5a:9b:b1:2e:34:e4:b6:
2e:5a:29:3f:6f:96:18:61:23:8b:9a:51:4c:54:7f:
05:3d:c2:f6:af:fa:75:94:48:b1:5d:26:ae:c1:07:
dc:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:07:30:1D:B5:9E:41:5B:E2:66:D0:A1:1B:8C:3C:C1:B0:75:38:9E
X509v3 Authority Key Identifier:
keyid:6F:0B:36:6A:13:6F:8F:CC:5D:F5:23:C8:D4:6F:79:07:91:C1:B3:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bws2ahNvj8xd9SPI1G95B5HBs7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d23dde-e24f-4258-a7ce-eef6c2f45176/1/bws2ahNvj8xd9SPI1G95B5HBs7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d23dde-e24f-4258-a7ce-eef6c2f45176/1/bws2ahNvj8xd9SPI1G95B5HBs7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:c7:41:b3:05:9a:df:f3:f8:51:5a:75:89:94:43:17:84:56:
dd:36:16:46:f7:91:e0:ee:53:74:cd:e6:c6:1f:da:84:75:d6:
dd:77:bf:33:c1:79:6d:1d:ff:4d:ef:a5:4f:01:b0:0c:92:9b:
40:58:86:b9:f0:a9:fc:34:70:ae:9d:d7:f3:c8:96:dc:ea:20:
00:9e:b1:80:2b:3a:08:05:72:bf:46:d3:6e:db:08:27:32:b5:
1c:3f:d3:f5:fe:98:a3:a7:01:61:26:9c:d7:9c:4d:4e:8b:a2:
25:a0:ca:1a:12:f9:63:4e:04:9b:a9:ae:bc:b7:92:78:10:ce:
2f:dd:44:91:3f:50:cb:e2:19:3c:b7:95:b8:59:0f:eb:a9:d4:
90:94:b2:dc:33:85:e6:92:12:02:67:3f:92:c7:36:a0:6e:20:
f3:cb:6c:2f:4e:7c:46:17:3e:ee:36:9a:94:95:f5:bb:be:a0:
18:2d:54:ab:33:24:3e:af:3e:e0:4f:75:dc:83:af:64:6a:9e:
b7:41:94:d2:ae:cb:42:12:95:94:03:ba:97:b7:7e:0f:57:82:
38:62:a3:f8:cb:f4:30:6a:ff:50:44:f5:a2:b1:7c:d5:cb:bb:
c9:39:8a:01:0d:2e:26:04:70:6c:fe:bd:f4:cb:6d:54:ac:d2:
2b:c7:df:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:00:25 2025 by rpki-client