Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/fa6f43-7dd1-405b-8dce-29b038084aa6/1/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.mft
File: Bh4lVOUgN3gdEHyPgxnJPlmYbwU.mft (raw, json)
Hash identifier: Dqrh9bn+t5fkZXd69dhCRygruVBoU5eGqGA8awU8Y70=
Subject key identifier: DC:03:0A:80:07:7E:2D:83:E0:81:07:FD:6B:B2:FD:AB:79:04:11:E6
Authority key identifier: 06:1E:25:54:E5:20:37:78:1D:10:7C:8F:83:19:C9:3E:59:98:6F:05
Certificate issuer: /CN=061e2554e52037781d107c8f8319c93e59986f05
Certificate serial: 0197B77CC6A421984AE41F2D4523B184827B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/fa6f43-7dd1-405b-8dce-29b038084aa6/1/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.mft
Manifest number: 0934
Signing time: Sat 28 Jun 2025 17:01:37 +0000
Manifest this update: Sat 28 Jun 2025 17:01:37 +0000
Manifest next update: Sun 29 Jun 2025 17:01:37 +0000
Files and hashes: 1: 1uAuKLt072-ZQlDEaEvJ4cVZt0U.roa (hash: VxasM346e46c28SKyluMBsYSF6rJX7VQBKo0/PUfiM8=)
2: Bh4lVOUgN3gdEHyPgxnJPlmYbwU.crl (hash: SqtVqlQEYHX8maxkTfoKDga7KIFbN+4Qcbk593i4XZc=)
3: FOTPh9BPoJbjEvO_XqYw0Ecj8wo.roa (hash: Tk8RIwgbHfyEByRiqFBz9C7JpjarILl3F0YIF0cWF/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/fa6f43-7dd1-405b-8dce-29b038084aa6/1/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/fa6f43-7dd1-405b-8dce-29b038084aa6/1/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:c6:a4:21:98:4a:e4:1f:2d:45:23:b1:84:82:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=061e2554e52037781d107c8f8319c93e59986f05
Validity
Not Before: Jun 28 17:01:37 2025 GMT
Not After : Jun 29 17:01:37 2025 GMT
Subject: CN=dc030a80077e2d83e08107fd6bb2fdab790411e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:04:29:b7:63:8c:78:27:19:ad:bf:e7:39:7f:
76:60:ca:ce:6c:30:27:74:bc:df:6a:fe:db:84:8b:
9d:d0:af:9f:dc:d2:ff:69:4f:a7:44:85:4b:85:b5:
b0:78:d8:98:61:52:0f:71:2f:31:81:ea:06:b9:04:
d2:16:94:3e:37:06:29:8a:2d:41:e9:71:c9:02:df:
bc:06:27:38:65:74:58:44:a6:ca:ae:50:58:43:16:
3c:61:2d:21:e0:39:d8:c8:54:e3:17:f2:6c:98:a2:
68:16:9c:c5:cc:4e:3f:a3:02:6c:40:0c:23:91:06:
1d:ec:34:c9:2e:f6:66:a6:3d:9b:cf:7b:4c:93:82:
21:a3:8b:9e:9c:3d:62:53:eb:23:1f:6a:e2:1f:f7:
24:b5:48:9c:e2:9f:26:9c:6a:df:6e:ed:2d:f8:06:
fa:b7:c2:72:28:d7:e2:cc:ce:f5:ab:bc:fe:1e:5b:
a6:f1:64:8a:14:45:2a:3e:6a:23:0d:96:57:1a:fa:
2f:bc:12:bb:f7:8f:db:4c:72:7e:ab:01:9e:a6:a4:
51:4e:0c:5f:25:4d:35:fb:46:3b:47:0f:5c:2c:5e:
62:d7:95:1f:2a:25:3f:9b:16:27:68:00:3e:04:7c:
42:bb:50:52:34:47:7d:d6:57:7c:f7:da:85:3a:d4:
bf:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:03:0A:80:07:7E:2D:83:E0:81:07:FD:6B:B2:FD:AB:79:04:11:E6
X509v3 Authority Key Identifier:
keyid:06:1E:25:54:E5:20:37:78:1D:10:7C:8F:83:19:C9:3E:59:98:6F:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/fa6f43-7dd1-405b-8dce-29b038084aa6/1/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/fa6f43-7dd1-405b-8dce-29b038084aa6/1/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:68:d6:bd:91:25:ff:b2:45:c1:53:2a:cb:8b:6b:e0:22:55:
3e:ea:00:09:8f:3f:95:11:ac:43:02:24:2c:56:02:51:53:48:
bd:3f:f1:1e:34:fc:f1:99:36:4a:e5:55:dd:a4:8d:9d:2d:d0:
82:5e:e6:ed:d9:7f:d7:00:6e:b7:c7:a0:e7:08:84:47:1e:24:
5d:57:a5:ee:22:1a:bf:b0:fe:5b:cc:1c:e3:5a:23:bc:7b:ef:
57:a4:f2:68:a4:57:e2:fa:d3:74:c9:2f:8e:49:3e:ff:f1:dd:
9f:8e:f1:c0:d9:32:7d:be:69:a4:4c:a6:fe:47:08:54:f5:24:
32:8b:26:40:4c:77:b5:38:53:45:e0:6c:39:cb:30:a0:b9:00:
28:c6:37:10:24:ad:ee:9c:aa:a1:b2:9e:36:6a:21:98:a5:35:
44:46:52:7e:ae:c2:70:19:a2:66:d8:7c:ca:6f:ce:99:e6:f0:
7c:de:cc:e3:e1:7c:23:1e:3c:bd:81:f0:6c:2f:5a:61:28:ae:
ec:69:2d:9e:0b:4e:ee:c5:7b:2c:f5:77:32:5b:21:9a:4e:e7:
34:4b:24:be:d6:8c:0a:42:95:7f:22:83:6b:7a:a5:ab:ae:40:
f0:2c:1d:d5:48:f2:79:33:d9:04:ef:58:77:e5:35:64:57:0d:
7d:c8:ff:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:26:09 2025 by rpki-client