Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/2b7cd1-49b6-4921-a5e1-61f91ededf0a/1/bIkO9qiKsz-logZ2B2jdMlHCOK8.mft
File: bIkO9qiKsz-logZ2B2jdMlHCOK8.mft (raw, json)
Hash identifier: 5xiH2BKOANfTsNsXv8kuvj4MQVfVBBAHAFkbRrizSZM=
Subject key identifier: 87:A6:00:88:12:02:BB:05:B5:F9:C2:C8:3B:B7:C0:C1:1E:3B:EE:3F
Authority key identifier: 6C:89:0E:F6:A8:8A:B3:3F:A5:A2:06:76:07:68:DD:32:51:C2:38:AF
Certificate issuer: /CN=6c890ef6a88ab33fa5a206760768dd3251c238af
Certificate serial: 0197B7B2EE95BEE77DED83D419CB4FE091E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bIkO9qiKsz-logZ2B2jdMlHCOK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/2b7cd1-49b6-4921-a5e1-61f91ededf0a/1/bIkO9qiKsz-logZ2B2jdMlHCOK8.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 18:00:46 +0000
Manifest this update: Sat 28 Jun 2025 18:00:46 +0000
Manifest next update: Sun 29 Jun 2025 18:00:46 +0000
Files and hashes: 1: Jg3tAly607eUyr5ul8qsb9iYCbk.roa (hash: E+on8KClaRu9XGuipMYBlTB9A2oc11upYWwt1aQCGuI=)
2: bIkO9qiKsz-logZ2B2jdMlHCOK8.crl (hash: dvAaVFqDkgDwwvsoFcQbFz2kw9Nwo3kggbiA11TsTtw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/2b7cd1-49b6-4921-a5e1-61f91ededf0a/1/bIkO9qiKsz-logZ2B2jdMlHCOK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/2b7cd1-49b6-4921-a5e1-61f91ededf0a/1/bIkO9qiKsz-logZ2B2jdMlHCOK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bIkO9qiKsz-logZ2B2jdMlHCOK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b2:ee:95:be:e7:7d:ed:83:d4:19:cb:4f:e0:91:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c890ef6a88ab33fa5a206760768dd3251c238af
Validity
Not Before: Jun 28 18:00:46 2025 GMT
Not After : Jun 29 18:00:46 2025 GMT
Subject: CN=87a600881202bb05b5f9c2c83bb7c0c11e3bee3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:aa:3e:5a:cb:23:56:ef:be:4b:e0:2c:dd:a6:
f7:6d:bb:5e:e0:38:cf:df:0f:d4:46:37:2f:e6:08:
0f:98:7c:c9:68:b2:f9:14:c5:65:bc:0f:99:ad:3b:
ed:4d:f5:03:76:2c:84:10:ff:96:7e:b3:75:d8:bb:
fd:a6:f7:5f:31:fd:48:44:32:59:35:b9:3d:7c:71:
ab:76:0f:49:02:a6:08:96:ed:43:02:9a:27:b6:a4:
d4:7c:ec:8f:73:4f:7e:9d:b1:39:e4:b5:ef:3f:6b:
2a:6c:d9:4f:52:d1:00:b4:6b:f5:df:7d:13:d2:69:
95:c6:fb:0e:8b:84:fa:ab:54:a3:cb:b0:e1:da:39:
b9:b0:d3:69:10:3b:7a:0f:95:9c:34:df:ad:22:d9:
33:ee:d2:43:21:58:37:1c:e7:f3:50:2e:2c:fe:6d:
24:67:a6:9f:ee:23:d0:31:76:4d:64:a6:79:ed:e3:
74:c7:1e:ed:ac:c7:8a:63:69:b5:a4:3d:ee:f6:78:
d0:12:40:1f:10:0a:ea:f1:a0:ea:45:5d:05:4d:65:
b5:b6:e4:e6:c6:23:2d:21:e3:a3:85:c5:07:bd:5a:
09:2a:87:92:2e:87:a1:81:14:d0:9a:f6:3d:53:d1:
6e:92:21:a7:a3:a0:94:63:43:7d:ec:03:ff:68:8a:
33:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:A6:00:88:12:02:BB:05:B5:F9:C2:C8:3B:B7:C0:C1:1E:3B:EE:3F
X509v3 Authority Key Identifier:
keyid:6C:89:0E:F6:A8:8A:B3:3F:A5:A2:06:76:07:68:DD:32:51:C2:38:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bIkO9qiKsz-logZ2B2jdMlHCOK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/2b7cd1-49b6-4921-a5e1-61f91ededf0a/1/bIkO9qiKsz-logZ2B2jdMlHCOK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/2b7cd1-49b6-4921-a5e1-61f91ededf0a/1/bIkO9qiKsz-logZ2B2jdMlHCOK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:1e:e6:e6:41:f7:f4:1b:ce:6f:7c:4e:f3:c2:4b:5b:48:69:
0e:d5:19:b1:b6:3e:0f:82:3e:49:ad:08:3e:07:c9:0c:47:50:
81:93:54:28:ba:71:7c:7b:41:09:df:29:ec:43:56:96:58:fc:
ac:c1:64:40:73:6d:3b:92:ea:13:39:44:8d:46:b9:8b:9c:d0:
61:40:36:05:c1:31:dc:c9:62:7a:e3:4c:12:c0:49:45:20:1f:
29:ca:27:5b:61:7e:3c:e9:46:c8:de:11:7d:47:34:c4:a8:6b:
24:6a:fd:e4:bd:4f:6b:de:3b:33:e3:4c:56:a9:c3:2f:8e:8c:
80:69:f8:9d:ab:97:bf:a6:73:0c:c6:e8:d5:ee:4e:35:a6:4a:
fd:12:cb:4c:bd:0f:71:c4:59:46:2d:27:4d:96:53:68:f1:14:
b1:19:37:a8:d7:0f:61:fa:1f:f4:18:90:5f:6e:5c:2b:8b:d9:
3f:06:af:bb:37:3f:81:8f:9b:0b:6c:0e:b2:51:95:87:3d:86:
e7:9b:b7:fb:51:96:28:bb:3b:74:46:8c:66:11:08:c9:ac:60:
98:6e:e1:06:db:39:bd:7e:a8:62:60:06:04:c5:27:7e:37:d5:
4c:a0:a4:be:f1:51:3f:a5:6c:56:da:f7:a7:c6:ea:f2:41:a6:
e2:65:d8:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:48:04 2025 by rpki-client