Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/d31361-096d-4a8d-ab4f-c3dc739425a1/1/BpilU2SQ1wyON7dvMtpoTxIp2bo.mft
File: BpilU2SQ1wyON7dvMtpoTxIp2bo.mft (raw, json)
Hash identifier: 432XQXLJsiNVqSf3tBrGD/JTuJLVq5N2Ac0EkGU7oh8=
Subject key identifier: D0:80:94:C3:46:74:82:4B:DB:40:83:B0:F5:56:11:54:2C:4F:88:C5
Authority key identifier: 06:98:A5:53:64:90:D7:0C:8E:37:B7:6F:32:DA:68:4F:12:29:D9:BA
Certificate issuer: /CN=0698a5536490d70c8e37b76f32da684f1229d9ba
Certificate serial: 0197B6D7816447B943039F020DB8C8DA3A10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BpilU2SQ1wyON7dvMtpoTxIp2bo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/d31361-096d-4a8d-ab4f-c3dc739425a1/1/BpilU2SQ1wyON7dvMtpoTxIp2bo.mft
Manifest number: 6A
Signing time: Sat 28 Jun 2025 14:01:06 +0000
Manifest this update: Sat 28 Jun 2025 14:01:06 +0000
Manifest next update: Sun 29 Jun 2025 14:01:06 +0000
Files and hashes: 1: 6I3Ul79wxRN6W37mo7nUpqwqt0s.roa (hash: J9bvPeLp8sfcjLoyxN9ggYT+mX3AB6I6+8a1daK3z1U=)
2: BpilU2SQ1wyON7dvMtpoTxIp2bo.crl (hash: iZSe2eDVYnRPDUSrk4P/KUS+/J9RYCAYiNoFlLL34Po=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/d31361-096d-4a8d-ab4f-c3dc739425a1/1/BpilU2SQ1wyON7dvMtpoTxIp2bo.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/d31361-096d-4a8d-ab4f-c3dc739425a1/1/BpilU2SQ1wyON7dvMtpoTxIp2bo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BpilU2SQ1wyON7dvMtpoTxIp2bo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:81:64:47:b9:43:03:9f:02:0d:b8:c8:da:3a:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0698a5536490d70c8e37b76f32da684f1229d9ba
Validity
Not Before: Jun 28 14:01:06 2025 GMT
Not After : Jun 29 14:01:06 2025 GMT
Subject: CN=d08094c34674824bdb4083b0f55611542c4f88c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:e9:27:17:a8:c0:b0:b1:57:be:04:ea:5b:1d:
16:28:76:24:76:a2:08:d2:49:1d:9d:04:4c:9d:6c:
a8:e6:29:65:69:43:23:17:9e:44:45:86:6e:1a:62:
35:94:27:f6:7b:86:dd:09:fd:5e:61:86:52:e2:5e:
87:ce:4e:c7:0b:0e:31:9c:33:c7:1a:f0:84:36:64:
a6:a2:79:17:75:77:a9:ee:87:54:d9:25:b3:31:7e:
0c:2b:1f:97:62:36:15:d7:3a:dc:f1:f3:d3:49:37:
01:91:a1:21:85:27:e6:30:15:13:ab:bc:66:23:15:
d4:53:ba:9c:2c:0e:04:0d:32:f3:b3:98:af:a4:10:
80:f8:3e:7d:0b:ae:00:2d:48:94:b8:f0:59:a0:d8:
6f:8a:c3:71:16:df:d6:28:a5:28:3a:2e:13:0f:2b:
7d:26:df:fc:cd:bb:56:1a:57:44:6b:11:d0:85:24:
a1:00:3f:35:b8:eb:7b:9c:2f:dc:07:7c:c7:21:0d:
07:26:68:6d:97:97:c8:42:e5:a7:0e:bb:d8:44:4a:
b2:dd:c1:35:f9:26:a3:02:ce:bc:e8:7d:95:ab:64:
9c:9e:c4:d3:a1:ea:ea:2e:09:65:fb:7a:1e:12:cb:
cf:da:4a:e5:b7:67:11:da:61:4a:5c:f4:19:30:7f:
47:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:80:94:C3:46:74:82:4B:DB:40:83:B0:F5:56:11:54:2C:4F:88:C5
X509v3 Authority Key Identifier:
keyid:06:98:A5:53:64:90:D7:0C:8E:37:B7:6F:32:DA:68:4F:12:29:D9:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BpilU2SQ1wyON7dvMtpoTxIp2bo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d31361-096d-4a8d-ab4f-c3dc739425a1/1/BpilU2SQ1wyON7dvMtpoTxIp2bo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d31361-096d-4a8d-ab4f-c3dc739425a1/1/BpilU2SQ1wyON7dvMtpoTxIp2bo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:86:ba:5f:2d:db:0c:34:26:51:c4:d8:e5:86:bf:31:94:6c:
2f:30:f1:50:77:5a:59:ca:de:38:24:a3:55:42:d9:bb:b3:1a:
5e:8f:0d:5c:02:84:47:68:a9:3c:c3:9a:12:e3:bc:59:f8:3b:
ee:b1:e6:a0:bb:6b:eb:a4:03:5d:f3:1f:15:24:ba:86:ec:e0:
fc:cb:6f:a8:85:79:f8:80:c7:0e:05:5f:d6:c6:86:84:eb:2d:
24:da:e0:d3:64:8f:70:db:26:01:4c:7e:70:16:15:ca:a6:5d:
2c:80:55:70:24:f3:d9:3c:7d:d3:1f:48:0d:c6:36:13:c5:84:
b9:b9:b5:95:19:26:f6:de:38:44:5c:4d:de:8e:d9:4e:ac:6b:
ba:3f:09:c7:cd:d6:fa:48:67:93:65:ae:02:9e:7d:6c:df:48:
93:f8:65:cd:2d:ee:0b:e4:2d:12:93:32:f8:a9:38:52:95:c4:
dd:25:24:51:76:31:56:e9:76:11:8e:1b:00:d8:cb:74:56:9a:
08:b2:9d:e3:b5:ec:35:c1:79:60:6b:f7:96:5f:dc:1a:98:38:
66:2c:e1:2c:fe:51:77:7e:c6:8c:25:f0:e4:ae:f2:e9:c0:94:
63:94:14:fc:1a:72:ee:9f:49:fa:95:6a:fe:2c:a3:c9:b1:4b:
b1:6b:b8:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:31:17 2025 by rpki-client