Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/584691-a971-4587-a7a5-8cbb6e7822d2/1/b88Z734vchyq9pz4LUynxLVBU2Q.mft
File: b88Z734vchyq9pz4LUynxLVBU2Q.mft (raw, json)
Hash identifier: zAp5bbaKEYfzNLExt57e9bCdOh5VYrxKsETqJXEhOz0=
Subject key identifier: 3B:05:E9:43:91:54:48:60:32:E1:6A:8D:C2:87:A3:2C:51:6F:2D:40
Authority key identifier: 6F:CF:19:EF:7E:2F:72:1C:AA:F6:9C:F8:2D:4C:A7:C4:B5:41:53:64
Certificate issuer: /CN=6fcf19ef7e2f721caaf69cf82d4ca7c4b5415364
Certificate serial: 0197C426445491A5807CA0B26BF571F812DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b88Z734vchyq9pz4LUynxLVBU2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/584691-a971-4587-a7a5-8cbb6e7822d2/1/b88Z734vchyq9pz4LUynxLVBU2Q.mft
Manifest number: 15BC
Signing time: Tue 01 Jul 2025 04:02:11 +0000
Manifest this update: Tue 01 Jul 2025 04:02:11 +0000
Manifest next update: Wed 02 Jul 2025 04:02:11 +0000
Files and hashes: 1: WzJBeEEQzWYcl7q5TX6p0F9jB_8.roa (hash: fTX9dCvlUyS92mU9zMfvVFn7IN42FVvudIXSZvqnY2s=)
2: b88Z734vchyq9pz4LUynxLVBU2Q.crl (hash: IuD8BesSUyQYT/7pJHiIaiq++6eu/5mOmmLerAfxYy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/584691-a971-4587-a7a5-8cbb6e7822d2/1/b88Z734vchyq9pz4LUynxLVBU2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/584691-a971-4587-a7a5-8cbb6e7822d2/1/b88Z734vchyq9pz4LUynxLVBU2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/b88Z734vchyq9pz4LUynxLVBU2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 04:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c4:26:44:54:91:a5:80:7c:a0:b2:6b:f5:71:f8:12:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fcf19ef7e2f721caaf69cf82d4ca7c4b5415364
Validity
Not Before: Jul 1 04:02:11 2025 GMT
Not After : Jul 2 04:02:11 2025 GMT
Subject: CN=3b05e9439154486032e16a8dc287a32c516f2d40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:35:c8:95:b3:e7:15:0c:8c:6a:96:12:47:75:
f4:26:4a:b5:f9:64:aa:ea:b5:12:57:94:61:34:28:
86:6b:e7:5e:ac:2d:f2:02:77:e7:27:8c:4e:a4:dd:
f3:e5:65:0b:c6:98:19:71:42:02:91:51:5f:d2:44:
15:61:bd:ab:4e:2b:dc:85:b0:0c:96:a0:35:89:6d:
53:05:aa:13:0e:d5:18:43:f3:ee:13:2c:f8:75:12:
22:37:b5:e3:3b:81:94:64:18:95:d9:a2:0e:af:56:
23:0a:df:6d:9d:83:6e:4b:4e:0c:c0:ea:2f:f9:25:
86:7d:0a:9b:a1:6e:95:f5:db:c9:e6:73:e0:92:c2:
61:2a:24:31:4d:d4:d0:ca:f8:fd:47:bd:02:da:26:
de:86:64:b5:82:96:1b:49:d4:81:c3:f1:1f:68:41:
0b:d8:93:f3:2b:c1:7a:c4:24:25:94:06:5a:82:d8:
c8:f9:ee:ba:45:9c:8a:24:73:9a:11:5c:cd:53:1a:
44:dd:54:28:1a:59:4f:1e:6a:85:bc:32:29:01:28:
56:84:50:90:ed:3d:71:a6:10:33:cc:e9:cd:33:a8:
67:42:39:2d:21:08:e3:b1:1d:be:7e:5d:b2:84:98:
19:ac:a9:74:dd:6d:10:a0:d0:f5:02:4d:36:e0:4a:
a7:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:05:E9:43:91:54:48:60:32:E1:6A:8D:C2:87:A3:2C:51:6F:2D:40
X509v3 Authority Key Identifier:
keyid:6F:CF:19:EF:7E:2F:72:1C:AA:F6:9C:F8:2D:4C:A7:C4:B5:41:53:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b88Z734vchyq9pz4LUynxLVBU2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/584691-a971-4587-a7a5-8cbb6e7822d2/1/b88Z734vchyq9pz4LUynxLVBU2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/584691-a971-4587-a7a5-8cbb6e7822d2/1/b88Z734vchyq9pz4LUynxLVBU2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:f3:8a:46:b7:0a:f1:9d:e8:4d:82:e7:68:46:ee:56:6a:20:
af:7a:39:c8:a2:c6:4f:51:46:b7:7c:83:ca:d1:1c:9c:3d:e2:
b9:c5:ca:23:56:af:80:94:eb:02:29:75:70:61:6a:aa:aa:4f:
01:33:68:1a:5f:8a:d3:6b:a3:6b:72:40:e5:db:cc:72:e3:6d:
d8:34:ee:be:f3:72:de:8e:12:8b:1d:e7:57:fa:7a:2a:5a:ec:
ef:cb:62:0f:66:c0:3d:4e:56:e6:96:a6:74:54:94:22:0b:5b:
ec:c4:4c:e5:c6:31:a3:2c:55:f7:6d:9e:17:2e:a9:df:fe:ef:
3c:0d:7b:77:43:03:cb:03:ee:e6:67:e9:ba:63:a3:87:21:4d:
56:3d:db:06:7f:41:01:e7:74:5b:0a:f9:cb:3b:61:45:00:9a:
e8:ef:a0:a6:d2:94:f4:d3:5b:dd:29:f9:a7:f6:ef:15:32:e7:
10:17:de:4d:d2:61:b9:f6:b1:cd:df:78:a1:7d:8d:9c:b7:2f:
a2:c7:fc:ee:ab:80:63:3d:6c:94:00:a6:a4:b7:8f:15:55:e5:
34:7c:42:74:90:7d:4f:77:43:f2:8e:2a:ce:4d:f6:54:24:45:
3d:b5:de:eb:96:30:9d:b7:a0:b2:0c:c4:be:9e:fc:2a:42:2d:
a0:84:4c:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 13:22:05 2025 by rpki-client