Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/7f997c-07cf-44c2-bdf0-66a329b6afad/1/bXcB1YUEkfUCme-T8tdAm3jNbJY.mft
File: bXcB1YUEkfUCme-T8tdAm3jNbJY.mft (raw, json)
Hash identifier: qa1mpnfu4rSUU5K/+iotppeFnp+TVYcN2JSeXjF5P2A=
Subject key identifier: 93:74:4A:0F:34:42:7E:C2:85:64:BF:29:0F:24:37:7E:F5:7C:7A:E7
Authority key identifier: 6D:77:01:D5:85:04:91:F5:02:99:EF:93:F2:D7:40:9B:78:CD:6C:96
Certificate issuer: /CN=6d7701d5850491f50299ef93f2d7409b78cd6c96
Certificate serial: 0197C61517F1D6EF9AC22353176D167B0902
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bXcB1YUEkfUCme-T8tdAm3jNbJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/7f997c-07cf-44c2-bdf0-66a329b6afad/1/bXcB1YUEkfUCme-T8tdAm3jNbJY.mft
Manifest number: 142A
Signing time: Tue 01 Jul 2025 13:02:40 +0000
Manifest this update: Tue 01 Jul 2025 13:02:40 +0000
Manifest next update: Wed 02 Jul 2025 13:02:40 +0000
Files and hashes: 1: 2KIRExbLtGmhtukhHSshDYZqZYU.roa (hash: e/XJlDAv9fIgfof/gpzNCtKITxsPIC/gKrF0rJCVeE8=)
2: F_jHPU3_A3NtfG3Ak3x69UFaxVY.roa (hash: VOxoNM7Ut17hlIuVaKSt03PbZmGteVPLxGUSpYz/b7g=)
3: bXcB1YUEkfUCme-T8tdAm3jNbJY.crl (hash: wgatuhmJ9vl1emFqDkjlKn51Ca/iaX0eUGMVtKyIBkA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/7f997c-07cf-44c2-bdf0-66a329b6afad/1/bXcB1YUEkfUCme-T8tdAm3jNbJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/7f997c-07cf-44c2-bdf0-66a329b6afad/1/bXcB1YUEkfUCme-T8tdAm3jNbJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bXcB1YUEkfUCme-T8tdAm3jNbJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 13:02:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c6:15:17:f1:d6:ef:9a:c2:23:53:17:6d:16:7b:09:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d7701d5850491f50299ef93f2d7409b78cd6c96
Validity
Not Before: Jul 1 13:02:40 2025 GMT
Not After : Jul 2 13:02:40 2025 GMT
Subject: CN=93744a0f34427ec28564bf290f24377ef57c7ae7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:05:af:4b:16:3b:4f:cf:57:77:40:8f:a0:58:
87:8f:50:6d:f7:a2:52:54:1c:32:69:52:57:d7:9f:
ba:36:1e:0a:b4:47:22:ad:e6:0e:57:01:a4:ec:42:
00:78:0a:71:4e:0d:59:14:18:0a:e2:44:fe:25:d6:
a0:64:f8:33:6b:7b:4b:31:b0:9a:2b:d8:8c:8a:71:
49:6e:1d:8d:01:b4:e6:66:92:3c:85:26:47:9e:bc:
fd:f3:0a:0c:bc:d9:da:1e:14:b1:31:3e:02:ac:ec:
b0:8e:e5:83:e2:40:8a:cf:2d:c8:82:bd:34:5f:c4:
50:21:46:19:8f:34:9f:54:a7:af:9c:2e:18:e6:ea:
81:c8:d2:79:b5:46:9f:b8:3e:b7:08:cf:74:eb:8e:
24:ae:02:29:fa:c7:c8:a9:e1:b3:04:79:ab:29:5e:
1d:c8:6a:02:30:92:51:a7:f3:c2:6d:bb:11:94:12:
c7:fb:cf:e9:f6:4f:0f:eb:6f:71:6e:d4:10:f9:33:
e6:ee:ed:45:20:8c:01:35:2f:1a:00:0e:bb:52:0d:
87:3a:05:b0:ca:20:4b:d3:ab:c2:e8:b5:52:a4:0a:
39:b3:2b:f8:5f:d7:15:4c:37:10:34:ad:58:9c:9f:
ca:4e:5d:ad:76:39:44:21:a5:92:93:b7:01:47:9a:
aa:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:74:4A:0F:34:42:7E:C2:85:64:BF:29:0F:24:37:7E:F5:7C:7A:E7
X509v3 Authority Key Identifier:
keyid:6D:77:01:D5:85:04:91:F5:02:99:EF:93:F2:D7:40:9B:78:CD:6C:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bXcB1YUEkfUCme-T8tdAm3jNbJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/7f997c-07cf-44c2-bdf0-66a329b6afad/1/bXcB1YUEkfUCme-T8tdAm3jNbJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/7f997c-07cf-44c2-bdf0-66a329b6afad/1/bXcB1YUEkfUCme-T8tdAm3jNbJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:26:20:7f:0e:01:2e:37:48:c0:98:71:d2:99:2a:8e:21:91:
ef:b9:d0:b2:ad:29:fa:0e:f0:18:b5:a7:46:87:38:42:98:a3:
fc:4a:14:b3:cb:d3:b2:81:06:10:4a:5e:8e:2d:b1:ed:c7:2d:
c9:a9:a2:bd:ab:2b:65:8b:3c:4e:94:d5:b3:d4:21:f4:97:10:
c8:be:e6:8b:b0:78:36:42:d1:ba:aa:9e:3a:16:78:e2:5c:28:
78:25:7e:63:c1:c6:df:25:21:31:0a:4d:da:23:b4:f6:76:29:
16:95:3e:0f:97:8d:94:f1:15:84:fe:52:b2:a4:2c:29:35:64:
3f:05:fb:1e:b7:3d:99:76:97:3e:66:ff:83:c4:47:04:57:64:
c6:6f:d7:30:74:e2:27:cc:91:40:ed:d4:99:86:c5:be:9c:d8:
38:8a:e2:7d:f7:8b:81:ea:77:c3:72:b9:3f:4f:93:2b:49:cc:
5c:b6:ac:cd:e5:7f:85:09:27:e1:42:c8:50:83:b8:1c:2c:b2:
ef:a4:37:62:bb:2f:79:6d:12:01:1f:6b:36:91:14:f6:39:44:
27:18:01:82:12:9d:8e:b8:1d:f7:e2:22:01:47:39:0b:8a:50:
90:ef:67:0b:2a:9c:72:75:09:9f:c6:6f:54:ac:ac:cb:41:0c:
ce:d9:66:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 21:59:52 2025 by rpki-client