Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/bE5-r-L_qpDK6UdoAwNNttp8Ehk.mft
File: bE5-r-L_qpDK6UdoAwNNttp8Ehk.mft (raw, json)
Hash identifier: eBbW4VbtrjYEF5tnUspFQcP0r7131GqMJXILWk+3oGM=
Subject key identifier: 7B:8F:A0:13:B3:4D:C7:D1:C7:D5:4B:37:FB:03:FB:FE:1A:D8:41:5C
Authority key identifier: 6C:4E:7E:AF:E2:FF:AA:90:CA:E9:47:68:03:03:4D:B6:DA:7C:12:19
Certificate issuer: /CN=6c4e7eafe2ffaa90cae9476803034db6da7c1219
Certificate serial: 0197B6A0A93CA40DB55DDD7DC41DD9DE391E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bE5-r-L_qpDK6UdoAwNNttp8Ehk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/bE5-r-L_qpDK6UdoAwNNttp8Ehk.mft
Manifest number: 0F21
Signing time: Sat 28 Jun 2025 13:01:11 +0000
Manifest this update: Sat 28 Jun 2025 13:01:11 +0000
Manifest next update: Sun 29 Jun 2025 13:01:11 +0000
Files and hashes: 1: bE5-r-L_qpDK6UdoAwNNttp8Ehk.crl (hash: gyXMzelik4/EuxLAhpmxEHRSnFwqmP/t1U8n32SjF64=)
2: pikr-Z1yZ7UUvvrmXqwotfJAjto.roa (hash: 68icAI19296YoC6/CDoRbYMVtIlmqXzI+o0fkE9+Wfc=)
3: qQqCuUJCewbsZNg09v9PamhTS90.roa (hash: OGwgmYMhdJtP2TfXi19zj/Lo5JjlQ5q60mMpyZb+YXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/bE5-r-L_qpDK6UdoAwNNttp8Ehk.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/bE5-r-L_qpDK6UdoAwNNttp8Ehk.mft
rsync://rpki.ripe.net/repository/DEFAULT/bE5-r-L_qpDK6UdoAwNNttp8Ehk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:a9:3c:a4:0d:b5:5d:dd:7d:c4:1d:d9:de:39:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4e7eafe2ffaa90cae9476803034db6da7c1219
Validity
Not Before: Jun 28 13:01:11 2025 GMT
Not After : Jun 29 13:01:11 2025 GMT
Subject: CN=7b8fa013b34dc7d1c7d54b37fb03fbfe1ad8415c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:c5:82:eb:b0:62:a8:65:d4:21:da:eb:99:03:
57:b0:38:03:68:38:a9:de:3e:a4:c8:e5:69:b2:62:
c5:82:96:b1:17:72:28:5d:71:cd:15:42:b9:15:a7:
cb:3c:ca:2a:83:bf:b9:9d:43:a0:3d:0a:e2:88:77:
df:8d:fe:19:ba:e6:6d:5e:79:70:88:86:c2:ed:31:
d8:08:91:6f:5d:62:54:ac:44:85:66:c7:03:c7:83:
2b:32:bd:76:9b:29:18:65:00:89:71:5a:5d:99:22:
a1:59:dc:91:6d:83:0d:62:64:2d:6c:b4:67:a3:12:
1d:06:38:50:73:57:08:61:e1:c2:39:c9:e7:61:0a:
41:0f:af:e0:46:7d:51:18:10:3d:00:ae:c0:99:00:
8b:53:4f:cc:86:5b:5d:98:1a:32:fb:bb:74:0d:58:
43:99:d5:39:a9:4d:bc:01:f7:81:40:4f:cf:b4:93:
73:d8:fe:9f:94:05:36:37:fb:4a:f0:92:6d:40:e5:
91:5c:09:52:4c:67:3f:44:e9:53:e5:a2:f2:5e:47:
3f:d6:57:33:0c:77:aa:63:02:77:b4:73:15:43:cc:
c6:f1:ea:4c:3c:1b:37:a2:c3:97:dd:eb:61:64:e9:
a1:ee:bc:1b:13:75:8c:8e:a5:b1:02:7a:eb:db:c5:
eb:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:8F:A0:13:B3:4D:C7:D1:C7:D5:4B:37:FB:03:FB:FE:1A:D8:41:5C
X509v3 Authority Key Identifier:
keyid:6C:4E:7E:AF:E2:FF:AA:90:CA:E9:47:68:03:03:4D:B6:DA:7C:12:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bE5-r-L_qpDK6UdoAwNNttp8Ehk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/bE5-r-L_qpDK6UdoAwNNttp8Ehk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/bE5-r-L_qpDK6UdoAwNNttp8Ehk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:cb:30:27:19:76:3e:83:52:6f:0d:95:d2:b9:77:e1:69:82:
ff:21:47:2f:72:a7:59:22:0c:eb:4f:83:0d:82:92:8a:5c:b1:
a2:8b:e3:7a:e4:89:cf:dc:f4:d5:04:c2:c6:dc:81:31:96:78:
af:78:49:84:03:0e:59:b6:16:89:cc:91:96:c0:48:f7:a9:e8:
74:cd:c6:b8:1b:9c:e8:39:f9:82:f0:2d:09:03:7a:6d:e2:a3:
39:e4:22:66:af:0b:40:35:6e:59:91:22:01:87:74:c6:ad:b4:
9c:e9:16:06:7f:23:96:bd:cc:b2:39:5e:1b:4f:1e:09:d8:4f:
9a:10:30:59:94:5d:d4:f7:94:dd:97:85:90:46:db:b0:49:24:
ee:eb:5d:db:dc:a6:ae:e3:f3:6c:75:72:62:49:d2:17:e9:0d:
0d:47:60:e3:31:3b:f0:c9:2c:62:aa:61:ab:31:e1:c8:2b:dd:
f0:5a:de:df:47:db:23:46:ac:6a:24:d6:9d:88:e2:fb:56:22:
ba:a5:47:2c:79:c2:9e:2e:17:96:45:2e:0d:bf:5f:b0:0e:90:
44:d1:79:cc:e1:df:c3:9d:0b:c1:7a:1d:1a:34:0e:7a:7d:53:
1d:44:a4:09:02:cf:98:3e:6a:ea:f4:ce:3f:47:13:85:e5:af:
31:42:8b:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:21:25 2025 by rpki-client