Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/706f41-0531-43df-b1e9-6f86d0b7e3e0/1/bMdYWreoPsgLVauVe_N7eR52UBY.mft
File: bMdYWreoPsgLVauVe_N7eR52UBY.mft (raw, json)
Hash identifier: 73N6K4qrZwm7Wc0jwMa7mG2IgWTPN56aYYY4IsE8Avw=
Subject key identifier: 6F:73:F1:59:19:83:EF:17:4A:F0:41:F4:9E:49:B5:7F:E9:A0:ED:74
Authority key identifier: 6C:C7:58:5A:B7:A8:3E:C8:0B:55:AB:95:7B:F3:7B:79:1E:76:50:16
Certificate issuer: /CN=6cc7585ab7a83ec80b55ab957bf37b791e765016
Certificate serial: 0197C8039599921285482FECE04FF699C604
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bMdYWreoPsgLVauVe_N7eR52UBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/706f41-0531-43df-b1e9-6f86d0b7e3e0/1/bMdYWreoPsgLVauVe_N7eR52UBY.mft
Manifest number: 1329
Signing time: Tue 01 Jul 2025 22:02:47 +0000
Manifest this update: Tue 01 Jul 2025 22:02:47 +0000
Manifest next update: Wed 02 Jul 2025 22:02:47 +0000
Files and hashes: 1: JJLEui4261ZXJVAJCMhhZuF8jH8.roa (hash: /ixKOls/TcJQuO85TTUBz1567wbeYHBB+Wz+IfsDjR8=)
2: bMdYWreoPsgLVauVe_N7eR52UBY.crl (hash: ZjTA3whiEDDXIMJgSLSD3qk5BO2wvo0xRpnkNe3QWs8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/706f41-0531-43df-b1e9-6f86d0b7e3e0/1/bMdYWreoPsgLVauVe_N7eR52UBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/706f41-0531-43df-b1e9-6f86d0b7e3e0/1/bMdYWreoPsgLVauVe_N7eR52UBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bMdYWreoPsgLVauVe_N7eR52UBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 22:02:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c8:03:95:99:92:12:85:48:2f:ec:e0:4f:f6:99:c6:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cc7585ab7a83ec80b55ab957bf37b791e765016
Validity
Not Before: Jul 1 22:02:47 2025 GMT
Not After : Jul 2 22:02:47 2025 GMT
Subject: CN=6f73f1591983ef174af041f49e49b57fe9a0ed74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:14:26:74:d4:95:11:d3:47:c3:0a:4e:05:67:
69:3a:53:f6:e2:57:ea:97:05:8b:66:8f:b9:71:13:
16:c4:fd:23:7e:f7:1b:63:fb:1f:5b:2d:85:4e:ff:
8d:bf:a8:79:d8:09:10:d9:9e:29:b6:a5:36:ff:de:
ba:b5:c5:28:a0:25:c3:d5:74:03:a8:44:d2:aa:78:
cf:3c:21:34:07:a0:c8:ed:82:bd:03:8b:9d:92:17:
d1:58:5c:ad:8f:2f:21:ec:bd:61:a0:c0:42:db:a4:
71:16:f0:ef:43:d9:be:cd:bd:83:6a:27:93:3b:32:
a9:5b:d3:60:f3:9c:72:5d:1a:db:2d:7a:f5:0d:6a:
f1:b1:c5:90:02:f9:8c:f2:37:93:7a:45:ef:ae:e7:
97:56:11:66:ba:ca:19:4a:54:59:b8:c8:3f:12:fb:
ec:4d:93:3e:f9:97:13:6c:ba:5b:21:97:99:a7:6a:
62:ca:5b:c4:b8:1b:ea:10:d8:6d:e9:3f:c0:99:10:
ef:47:17:bf:0f:19:a4:b3:4c:63:44:6b:28:cb:e5:
90:ec:9d:3c:6e:c2:1d:81:63:75:3d:bc:72:b3:8d:
69:c2:ce:34:78:62:d3:4f:3d:7b:b3:99:f5:d3:d1:
0e:66:d9:b5:b8:a5:47:18:66:a1:e3:9c:17:ba:eb:
f1:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:73:F1:59:19:83:EF:17:4A:F0:41:F4:9E:49:B5:7F:E9:A0:ED:74
X509v3 Authority Key Identifier:
keyid:6C:C7:58:5A:B7:A8:3E:C8:0B:55:AB:95:7B:F3:7B:79:1E:76:50:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMdYWreoPsgLVauVe_N7eR52UBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/706f41-0531-43df-b1e9-6f86d0b7e3e0/1/bMdYWreoPsgLVauVe_N7eR52UBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/706f41-0531-43df-b1e9-6f86d0b7e3e0/1/bMdYWreoPsgLVauVe_N7eR52UBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:92:22:ca:53:90:8b:f6:11:de:07:da:d3:ec:91:29:e0:24:
36:2e:de:16:5d:bd:66:b8:b2:bc:f9:e4:ce:c1:cb:af:cf:14:
ab:8c:af:c7:93:83:4f:54:d4:10:be:a9:40:5d:92:ec:ed:8a:
1b:3c:37:d4:06:e7:93:17:d5:f1:53:39:bf:08:7a:7b:34:02:
11:67:4b:39:09:76:38:2a:b2:75:67:6e:ef:f5:90:c0:29:8f:
82:66:da:47:40:b7:88:01:48:0e:f7:a6:fd:0f:52:44:e6:4a:
21:40:4d:15:6d:6f:91:9f:7b:02:99:13:59:50:80:35:b9:dc:
79:88:af:a1:7c:27:94:a1:93:d9:aa:2d:d5:67:21:b6:ee:56:
42:d4:bc:0d:f2:2e:1d:b6:f2:b4:f0:2e:03:d0:30:8e:85:52:
3b:3a:7e:ae:24:b3:f6:df:cc:c3:4c:18:84:ac:b9:dc:bc:9a:
e6:d4:92:68:9c:ab:0c:e8:79:2a:b3:23:77:76:ea:41:0c:0d:
6b:f2:4f:8f:07:7e:b3:bb:aa:11:d6:c6:49:25:b3:5b:90:bb:
8b:e8:e4:40:1f:23:3c:13:51:3d:7e:94:ab:3a:74:64:34:74:
bf:64:67:da:2e:0f:54:38:49:4a:8a:b7:8c:fd:87:1d:34:66:
e7:aa:7f:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 05:23:36 2025 by rpki-client