Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.mft
File: bF5O9VFnmf_guxuDkxfb01W7eps.mft (raw, json)
Hash identifier: BWehXBXYiRxKXEVkibxll8kcHAyG6J3GO6cpTBAUQi4=
Subject key identifier: C8:01:41:D2:9B:25:FE:09:91:81:B6:5E:62:D6:06:05:A7:5C:AE:DC
Authority key identifier: 6C:5E:4E:F5:51:67:99:FF:E0:BB:1B:83:93:17:DB:D3:55:BB:7A:9B
Certificate issuer: /CN=6c5e4ef5516799ffe0bb1b839317dbd355bb7a9b
Certificate serial: 0197B6A0D2C3A3BE925EBC29A1BADA6FFD75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bF5O9VFnmf_guxuDkxfb01W7eps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.mft
Manifest number: 15BF
Signing time: Sat 28 Jun 2025 13:01:22 +0000
Manifest this update: Sat 28 Jun 2025 13:01:22 +0000
Manifest next update: Sun 29 Jun 2025 13:01:22 +0000
Files and hashes: 1: 0wgL08QR2Tg8DD4ym9yl2cWgk4Y.roa (hash: qV9D4m0x0M6TJ4fUI73uoZNgwejKGUBXdkrfKOtrD44=)
2: bF5O9VFnmf_guxuDkxfb01W7eps.crl (hash: eDf5/TH9m3YB3AcEvgxFwLCZjr33M9KrvxmJF8wk27c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.mft
rsync://rpki.ripe.net/repository/DEFAULT/bF5O9VFnmf_guxuDkxfb01W7eps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:d2:c3:a3:be:92:5e:bc:29:a1:ba:da:6f:fd:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c5e4ef5516799ffe0bb1b839317dbd355bb7a9b
Validity
Not Before: Jun 28 13:01:22 2025 GMT
Not After : Jun 29 13:01:22 2025 GMT
Subject: CN=c80141d29b25fe099181b65e62d60605a75caedc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:0b:90:01:3d:7a:3b:24:80:52:40:ad:7f:e3:
9e:d6:84:fb:34:8b:a6:f2:8a:d6:3b:8f:ab:2f:9f:
b9:ab:dc:db:57:f1:27:4f:02:2c:1f:fa:33:67:ce:
ac:69:b0:1c:1b:90:72:9d:12:dd:9e:a8:b4:eb:c6:
a5:af:a5:8e:d4:2d:1a:73:65:51:12:be:e3:c5:22:
23:9b:f8:74:40:9c:df:2d:1c:76:7c:02:d8:bc:74:
ff:d5:31:64:ca:92:5b:0b:d1:d7:53:0b:df:05:14:
84:3b:22:18:5e:29:2b:d1:61:73:7d:5d:ed:f0:a9:
ef:b2:a0:e4:fe:a0:16:33:d0:9f:26:53:46:29:79:
4e:dd:cd:50:a6:19:78:db:f6:a4:0b:ad:70:59:b5:
36:a3:4d:8e:af:f8:ed:86:3b:d4:c1:34:3e:e1:e3:
f6:e7:da:02:15:c7:cd:4e:e8:84:29:9d:e9:bd:9f:
39:31:99:18:0e:cd:7d:35:6b:7b:23:24:14:02:f0:
8e:8f:8f:83:98:59:f0:37:2c:1b:07:ae:56:b3:1b:
e9:22:c6:16:b7:e7:26:b0:c4:3a:9a:07:f5:f1:4c:
33:ed:91:33:86:26:9e:80:0a:30:ef:d2:da:42:fd:
71:1f:22:a2:05:13:14:f0:bb:a9:37:a4:72:f7:98:
78:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:01:41:D2:9B:25:FE:09:91:81:B6:5E:62:D6:06:05:A7:5C:AE:DC
X509v3 Authority Key Identifier:
keyid:6C:5E:4E:F5:51:67:99:FF:E0:BB:1B:83:93:17:DB:D3:55:BB:7A:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bF5O9VFnmf_guxuDkxfb01W7eps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/9d9680-ffbf-43d1-9c05-1be753fad1bf/1/bF5O9VFnmf_guxuDkxfb01W7eps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:3f:09:03:6d:7d:31:dc:ef:e0:bb:8f:34:6c:07:bc:16:1e:
bc:d2:70:d7:69:6a:4e:21:6e:0c:75:cf:aa:05:0e:88:45:47:
96:37:cd:d7:1a:81:9d:f6:1b:57:24:bf:e2:17:86:a9:89:a0:
b4:d1:10:49:e6:b1:59:27:ea:0a:04:92:c9:50:fe:b2:30:11:
e8:96:d6:61:0b:81:95:c6:5e:66:72:be:48:37:fd:df:8d:13:
31:b7:a3:b9:83:78:b1:c5:77:a8:dc:51:52:4d:c4:53:89:7c:
13:38:5d:ef:25:6c:d3:a3:cf:63:b3:cf:c7:88:b9:b9:f6:1b:
19:f0:96:d0:0e:a2:d4:05:06:29:7f:96:37:04:0e:13:c3:34:
71:b7:38:25:41:50:2a:7f:32:e2:24:51:97:65:08:26:3c:2c:
34:7c:57:fe:29:68:c7:4a:48:72:8b:e5:05:0d:41:71:5d:17:
fa:4b:3e:e1:46:c6:e7:8b:9e:e5:de:97:cc:24:3c:7e:b3:2d:
9f:0e:b9:b0:1b:10:88:c5:0b:66:26:99:05:2a:55:ce:f7:84:
ea:a7:94:2a:a4:6a:a0:02:e2:9f:ac:ec:76:04:4f:e8:09:a0:
d6:74:60:5f:ae:21:16:5c:ad:d9:7b:39:16:12:5c:bf:eb:ec:
f9:33:0e:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:09:37 2025 by rpki-client