Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/64a392-372e-48a6-a0e2-f5ad167d8494/1/bAqWFKxOEOei4qW8EvhiMGTInvk.mft
File: bAqWFKxOEOei4qW8EvhiMGTInvk.mft (raw, json)
Hash identifier: ZTao5wovWARVD/VMJRG+HVGz820bOWt252xpmiez0Q4=
Subject key identifier: 4C:21:2B:13:80:C0:43:C2:BE:F1:DB:DD:1D:5C:A8:C2:79:EF:24:C4
Authority key identifier: 6C:0A:96:14:AC:4E:10:E7:A2:E2:A5:BC:12:F8:62:30:64:C8:9E:F9
Certificate issuer: /CN=6c0a9614ac4e10e7a2e2a5bc12f8623064c89ef9
Certificate serial: 0197B7EA1C3DCD73AAD4B730E286BC19987B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bAqWFKxOEOei4qW8EvhiMGTInvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/64a392-372e-48a6-a0e2-f5ad167d8494/1/bAqWFKxOEOei4qW8EvhiMGTInvk.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 19:01:02 +0000
Manifest this update: Sat 28 Jun 2025 19:01:02 +0000
Manifest next update: Sun 29 Jun 2025 19:01:02 +0000
Files and hashes: 1: F67gDfZc4Jx2LCZVEE2FihPJzHw.roa (hash: yPyUtL/skPgjKLNjvoKJs7SdqhdnCeGN7LFhVgvBzCk=)
2: bAqWFKxOEOei4qW8EvhiMGTInvk.crl (hash: 1Ym+DFkCDHBb2oKOU/K8yN9mj/NuE0BoYBvZ5knHSNU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/64a392-372e-48a6-a0e2-f5ad167d8494/1/bAqWFKxOEOei4qW8EvhiMGTInvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/64a392-372e-48a6-a0e2-f5ad167d8494/1/bAqWFKxOEOei4qW8EvhiMGTInvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/bAqWFKxOEOei4qW8EvhiMGTInvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:1c:3d:cd:73:aa:d4:b7:30:e2:86:bc:19:98:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c0a9614ac4e10e7a2e2a5bc12f8623064c89ef9
Validity
Not Before: Jun 28 19:01:02 2025 GMT
Not After : Jun 29 19:01:02 2025 GMT
Subject: CN=4c212b1380c043c2bef1dbdd1d5ca8c279ef24c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:4c:22:dd:bc:a0:5c:2c:af:df:9d:41:2f:1a:
f2:36:7a:98:f9:9b:e2:52:df:14:cb:d2:39:c2:50:
d6:a7:d5:4f:08:d1:64:8a:72:97:42:5e:56:21:59:
bc:d3:44:cc:66:92:34:d2:69:87:09:36:fb:24:e3:
1f:c4:32:56:ff:43:3d:60:cc:0e:0f:56:1f:7a:e8:
b6:d5:b0:71:e9:a5:ba:1e:48:17:ae:6b:76:97:0e:
3f:2a:bd:41:9f:7d:01:ec:83:7e:10:0a:a3:69:9a:
17:bc:d8:2e:64:8c:16:1b:42:29:6f:72:36:ff:c4:
80:65:b5:ba:33:23:5c:9d:4d:dc:bc:13:2a:f3:88:
6a:39:c6:34:51:db:44:7a:9c:ca:01:13:47:81:fd:
d3:2d:39:40:7d:d5:c9:5c:0f:ce:77:7d:7e:70:a4:
a8:0f:24:77:39:50:fe:35:17:78:87:e8:d6:d6:1d:
f7:2a:83:90:41:68:e1:7d:0f:88:4d:e7:37:b7:e7:
32:13:5a:ae:01:9a:37:94:5f:50:4c:93:c5:93:51:
7c:2d:cc:c5:86:00:4e:9a:41:34:5c:3e:41:53:1c:
2d:74:38:44:a1:05:7e:a1:0c:f0:04:2f:2c:4e:39:
cc:af:c9:e6:c0:16:e8:43:8b:8c:7a:68:7f:0a:93:
fa:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:21:2B:13:80:C0:43:C2:BE:F1:DB:DD:1D:5C:A8:C2:79:EF:24:C4
X509v3 Authority Key Identifier:
keyid:6C:0A:96:14:AC:4E:10:E7:A2:E2:A5:BC:12:F8:62:30:64:C8:9E:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bAqWFKxOEOei4qW8EvhiMGTInvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/64a392-372e-48a6-a0e2-f5ad167d8494/1/bAqWFKxOEOei4qW8EvhiMGTInvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/64a392-372e-48a6-a0e2-f5ad167d8494/1/bAqWFKxOEOei4qW8EvhiMGTInvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:06:43:f9:9b:70:ad:53:3d:58:3a:ff:5c:39:0d:a1:b6:04:
21:1e:a1:03:61:02:6b:7f:f5:a6:8a:88:aa:87:70:d8:75:c8:
c1:c6:b2:82:aa:ce:72:76:eb:b6:5e:7f:aa:95:b2:21:fc:05:
40:35:7a:8e:f4:65:fa:6b:47:41:b1:37:9f:96:9e:25:cb:fa:
76:d8:30:1a:dc:44:fd:fc:0c:4c:25:54:c6:c4:12:85:09:12:
10:e0:81:52:ff:70:8a:1e:2d:55:1d:6f:5f:6d:c5:f5:c1:8a:
41:4c:25:ec:25:72:58:92:2d:39:7e:c3:8d:27:5b:58:bc:c7:
49:b6:b2:ae:95:a1:b8:53:68:7e:bf:12:85:ce:1c:23:1c:f9:
64:fc:7e:a9:8d:b2:c6:6c:54:72:6a:3f:1c:55:fd:5f:95:57:
c1:9e:09:20:93:4f:b5:b2:72:cc:85:e4:9b:d6:b3:f7:23:4b:
e8:3f:26:d9:d0:a3:d1:a4:98:77:31:be:ea:ae:2e:36:99:29:
6e:97:8f:fc:e4:fc:a7:07:ac:07:69:41:e2:30:1a:33:89:5e:
03:25:b7:fa:da:f0:0c:99:f7:fe:60:7f:5b:78:df:fa:58:96:
bb:39:33:e8:70:ed:ea:6f:2c:84:85:2f:f8:c1:36:d7:9d:ed:
ad:a6:71:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:54:21 2025 by rpki-client