Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/05e0ee-ae03-4124-b670-309b7b960d14/1/bz2JqB_CmfOcCS5PbQFzqanPvGU.mft
File: bz2JqB_CmfOcCS5PbQFzqanPvGU.mft (raw, json)
Hash identifier: BXb04vXZzB9ehhcqvCTXoXbCPYGIsPJ1kVrI0W1kv7w=
Subject key identifier: 91:F6:4E:99:28:29:D1:67:A7:22:6D:00:00:BD:50:71:4C:E3:80:BF
Authority key identifier: 6F:3D:89:A8:1F:C2:99:F3:9C:09:2E:4F:6D:01:73:A9:A9:CF:BC:65
Certificate issuer: /CN=6f3d89a81fc299f39c092e4f6d0173a9a9cfbc65
Certificate serial: 0197C614334D07F7E8DBEA48989CB317452B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bz2JqB_CmfOcCS5PbQFzqanPvGU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/05e0ee-ae03-4124-b670-309b7b960d14/1/bz2JqB_CmfOcCS5PbQFzqanPvGU.mft
Manifest number: 15C3
Signing time: Tue 01 Jul 2025 13:01:41 +0000
Manifest this update: Tue 01 Jul 2025 13:01:41 +0000
Manifest next update: Wed 02 Jul 2025 13:01:41 +0000
Files and hashes: 1: _OBCt42Qgl4wI2H058mG4uDYUOw.roa (hash: jWbxYRFs270K2f9wkh6LdpAj2cDPsQg7s0mhGOvBxRQ=)
2: bz2JqB_CmfOcCS5PbQFzqanPvGU.crl (hash: bdFveEYRDnkFcXLnRMtbXA/28cb5T+jBKr+J1q9Hv18=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/05e0ee-ae03-4124-b670-309b7b960d14/1/bz2JqB_CmfOcCS5PbQFzqanPvGU.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/05e0ee-ae03-4124-b670-309b7b960d14/1/bz2JqB_CmfOcCS5PbQFzqanPvGU.mft
rsync://rpki.ripe.net/repository/DEFAULT/bz2JqB_CmfOcCS5PbQFzqanPvGU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 13:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c6:14:33:4d:07:f7:e8:db:ea:48:98:9c:b3:17:45:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f3d89a81fc299f39c092e4f6d0173a9a9cfbc65
Validity
Not Before: Jul 1 13:01:41 2025 GMT
Not After : Jul 2 13:01:41 2025 GMT
Subject: CN=91f64e992829d167a7226d0000bd50714ce380bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:8b:b9:f2:b4:40:bf:76:5b:eb:33:36:a0:65:
b8:d7:91:0c:e8:2e:e8:ff:57:11:a0:67:21:50:94:
67:df:41:d3:e3:a6:fd:db:62:88:61:7b:b4:0c:2a:
c2:6c:e0:a3:7f:37:fc:6d:ec:6e:1c:0b:69:2d:60:
ef:74:d9:0d:1b:d8:47:32:ed:39:5d:17:90:7e:45:
ff:b8:60:3f:5f:e3:cf:8c:65:3d:f1:b3:8e:14:8f:
a0:10:56:72:b1:6c:d3:64:d1:82:55:bf:06:1a:59:
fa:6e:6b:fa:c8:c3:2f:04:ab:50:45:8b:0b:01:a4:
8a:5d:f8:a9:ee:b0:b2:18:f3:b3:8b:14:87:5a:07:
f3:f8:d6:7e:2c:78:42:53:e8:fa:1e:50:50:f7:0b:
01:be:8f:14:bc:18:b1:37:75:ea:ed:0b:41:4a:ab:
51:53:fc:a6:a0:bd:c6:2a:05:f2:2f:fb:20:a9:2a:
33:5e:66:83:19:e7:6c:f5:00:ea:2a:e9:5f:79:6f:
a8:9c:31:5e:58:81:79:a0:0f:b3:12:e8:73:81:b7:
d2:0e:3f:da:16:64:dc:64:7a:7d:a1:69:16:97:09:
b1:48:e0:a4:ef:05:78:c4:76:b7:4d:28:28:b3:0d:
65:d0:2b:ab:46:c7:8d:ee:b5:8b:0f:b9:63:4c:ea:
0b:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:F6:4E:99:28:29:D1:67:A7:22:6D:00:00:BD:50:71:4C:E3:80:BF
X509v3 Authority Key Identifier:
keyid:6F:3D:89:A8:1F:C2:99:F3:9C:09:2E:4F:6D:01:73:A9:A9:CF:BC:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bz2JqB_CmfOcCS5PbQFzqanPvGU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/05e0ee-ae03-4124-b670-309b7b960d14/1/bz2JqB_CmfOcCS5PbQFzqanPvGU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/05e0ee-ae03-4124-b670-309b7b960d14/1/bz2JqB_CmfOcCS5PbQFzqanPvGU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:44:01:ac:58:da:0b:7e:ed:d4:ad:ff:99:3a:e6:ad:88:8f:
59:58:f9:56:3c:cf:04:31:a9:fd:e4:81:92:55:80:02:c3:7b:
4b:d8:a8:87:37:73:9f:06:a7:54:63:17:18:98:05:51:95:5f:
11:70:a5:e9:34:65:ae:62:da:e0:07:d1:85:98:4e:5e:a7:0f:
87:f3:72:99:16:92:a1:84:91:48:26:d5:3d:ed:b6:de:23:c8:
98:ed:a9:ff:dd:e6:1d:78:78:92:38:59:33:ef:20:8f:be:02:
6f:9b:67:c9:2e:1d:3e:a8:25:ca:5c:72:3d:aa:9f:83:a8:92:
10:d2:73:f7:48:57:55:35:28:f9:8a:e9:ad:9d:65:ad:cf:3b:
ca:90:ad:8c:69:47:04:b5:3e:94:b2:18:c6:f7:11:83:8f:c6:
9c:8a:9f:33:d5:40:00:6a:bf:ec:c0:b7:5a:ef:19:0b:58:59:
67:07:6b:00:b9:38:da:e4:24:45:ad:c9:4a:74:d7:d4:28:89:
65:9e:c2:74:58:58:2f:fd:42:a6:c4:3e:e7:0b:86:67:13:b0:
ee:8a:f9:e7:a3:40:95:23:54:ac:64:c3:20:50:08:12:62:73:
98:75:95:2c:da:e3:2a:fa:9d:be:38:65:df:b7:e4:fd:64:66:
33:e1:da:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 21:18:47 2025 by rpki-client