Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.mft
File: Bk3NDucBTvsuO1VPu3BjhO8R0FE.mft (raw, json)
Hash identifier: 6DwQiSzxAr4FIh/Rag+wWRrQLYQGcUdp8dPuIWpdWvc=
Subject key identifier: B1:06:EA:D1:B7:6C:CB:81:77:72:7E:EB:1B:09:64:2C:41:6A:CE:42
Authority key identifier: 06:4D:CD:0E:E7:01:4E:FB:2E:3B:55:4F:BB:70:63:84:EF:11:D0:51
Certificate issuer: /CN=064dcd0ee7014efb2e3b554fbb706384ef11d051
Certificate serial: 0197B77CD78A38BBD1BBA67DF067988435D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bk3NDucBTvsuO1VPu3BjhO8R0FE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 17:01:41 +0000
Manifest this update: Sat 28 Jun 2025 17:01:41 +0000
Manifest next update: Sun 29 Jun 2025 17:01:41 +0000
Files and hashes: 1: Bk3NDucBTvsuO1VPu3BjhO8R0FE.crl (hash: KPf+QINluGWrH3r1/DbcpTwwfTbsAbrYTSWEs2E49YM=)
2: GCU6ctyJbqAMhWQYVpX0QaP8Qy4.roa (hash: dW5jCxXLX0Q6KCT48fWLPtjZskUAawNAnNuHkyFw1ow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bk3NDucBTvsuO1VPu3BjhO8R0FE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:d7:8a:38:bb:d1:bb:a6:7d:f0:67:98:84:35:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=064dcd0ee7014efb2e3b554fbb706384ef11d051
Validity
Not Before: Jun 28 17:01:41 2025 GMT
Not After : Jun 29 17:01:41 2025 GMT
Subject: CN=b106ead1b76ccb8177727eeb1b09642c416ace42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:44:a3:b9:0b:0c:8e:cd:b9:3d:e5:25:7f:30:
36:f4:e1:fa:53:fe:7d:cf:b7:3e:74:3d:e0:a2:db:
25:01:80:3d:ab:ed:e3:bd:61:f1:a5:dd:2b:dd:1f:
d2:3f:ee:b1:cb:78:5c:10:a6:2f:a8:49:b4:15:45:
36:ff:92:d8:02:1d:19:09:93:40:d3:81:4a:5c:f2:
76:4e:88:cb:c1:75:cd:37:f1:1c:1e:be:f0:2d:cc:
42:bc:f9:24:c0:a8:db:af:c1:fc:1d:dc:ed:cc:43:
53:14:ee:5c:95:03:c9:f9:51:db:73:e5:7d:e9:97:
bf:a2:92:6e:98:95:f6:4e:85:36:9b:5a:6a:73:11:
f3:e2:7f:1d:40:82:27:b2:5d:fe:10:8e:d7:ef:fa:
89:ac:41:b4:69:36:c6:0e:c7:d6:68:48:4f:4b:a3:
8e:a8:20:1b:73:b4:f9:32:22:85:8e:d0:5f:bf:e6:
79:46:17:e3:04:6e:fc:fa:20:6a:d4:d9:00:93:84:
78:ef:be:10:f4:e7:ac:0d:cf:d8:67:ce:b9:16:12:
ab:a1:cf:6f:bc:78:6a:20:e3:45:c1:0a:d3:ca:81:
e7:16:4e:12:3f:b8:1a:01:2b:f4:76:be:b9:8e:a2:
6f:25:7e:d9:b7:6f:e5:9c:5c:ea:b8:d1:b0:b8:54:
87:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:06:EA:D1:B7:6C:CB:81:77:72:7E:EB:1B:09:64:2C:41:6A:CE:42
X509v3 Authority Key Identifier:
keyid:06:4D:CD:0E:E7:01:4E:FB:2E:3B:55:4F:BB:70:63:84:EF:11:D0:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bk3NDucBTvsuO1VPu3BjhO8R0FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:2d:0d:2e:14:47:c1:19:3b:e2:93:6a:5e:63:e4:7b:ff:77:
11:11:59:46:2c:3d:eb:43:4e:73:b5:0e:4a:42:38:08:56:14:
cf:c3:9a:1a:42:b5:e2:84:b7:04:80:4f:e8:65:2e:cf:83:10:
de:4b:e1:7c:6b:2e:e3:05:de:25:f0:e6:d5:88:b9:b1:09:df:
76:31:30:2b:f7:41:93:6b:ec:2f:9f:4f:43:ca:24:76:58:7c:
56:0d:de:57:43:67:11:73:9a:29:e7:03:f0:42:78:8b:fa:98:
7b:56:ae:83:2c:a5:04:77:68:7e:91:bd:6a:9d:0c:7a:5c:b6:
d3:53:2a:ba:31:31:71:55:98:bb:88:ba:cf:7b:c8:cb:42:9f:
0e:a4:6d:ec:37:bc:f5:cc:7b:9b:60:3e:0a:e4:9a:8f:12:67:
a5:99:8e:38:b8:d8:1d:31:ff:98:db:46:f7:dc:96:3e:e9:b6:
e3:0b:04:5f:f1:c2:bb:f1:94:7e:ff:63:63:b9:25:12:25:1d:
56:f8:d3:66:8a:ad:2b:a7:8c:5f:5d:e4:ca:4b:ae:67:c1:88:
8c:ad:94:55:ce:f0:01:47:00:1b:eb:01:8a:c4:7b:ea:60:9f:
78:97:64:df:0c:f6:48:2e:d8:b0:d3:16:18:fa:bd:4b:28:ff:
98:cf:23:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:57:31 2025 by rpki-client