Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/d983cd-3f8e-4d6e-a38c-4d8d62b18e89/1/bFMRpXzPy1E1Jh_zm9GaEV7z588.mft
File: bFMRpXzPy1E1Jh_zm9GaEV7z588.mft (raw, json)
Hash identifier: eZSd7YUxgCSaXOudmXJedKiFpa5YojDkb3f1HS7JVVM=
Subject key identifier: DC:54:EA:8C:83:2A:34:12:1C:50:F3:9E:B2:FE:C5:CD:2C:D2:05:08
Authority key identifier: 6C:53:11:A5:7C:CF:CB:51:35:26:1F:F3:9B:D1:9A:11:5E:F3:E7:CF
Certificate issuer: /CN=6c5311a57ccfcb5135261ff39bd19a115ef3e7cf
Certificate serial: 0197B745B8186E828740833BF17799E20B8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bFMRpXzPy1E1Jh_zm9GaEV7z588.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/d983cd-3f8e-4d6e-a38c-4d8d62b18e89/1/bFMRpXzPy1E1Jh_zm9GaEV7z588.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 16:01:28 +0000
Manifest this update: Sat 28 Jun 2025 16:01:28 +0000
Manifest next update: Sun 29 Jun 2025 16:01:28 +0000
Files and hashes: 1: YJycfGdeJ164QrjQ89Pquxal_pc.roa (hash: fDEXe9y2Vppryd4ojiqVG2aN2es1Vh/q/2xftzkXWbQ=)
2: bFMRpXzPy1E1Jh_zm9GaEV7z588.crl (hash: LIqTfKcATJc/4R2V9txkSFUBkUE+P6m+NY0yIfWrP5k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/d983cd-3f8e-4d6e-a38c-4d8d62b18e89/1/bFMRpXzPy1E1Jh_zm9GaEV7z588.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/d983cd-3f8e-4d6e-a38c-4d8d62b18e89/1/bFMRpXzPy1E1Jh_zm9GaEV7z588.mft
rsync://rpki.ripe.net/repository/DEFAULT/bFMRpXzPy1E1Jh_zm9GaEV7z588.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:b8:18:6e:82:87:40:83:3b:f1:77:99:e2:0b:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c5311a57ccfcb5135261ff39bd19a115ef3e7cf
Validity
Not Before: Jun 28 16:01:28 2025 GMT
Not After : Jun 29 16:01:28 2025 GMT
Subject: CN=dc54ea8c832a34121c50f39eb2fec5cd2cd20508
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:39:eb:3d:5f:11:89:32:fd:10:14:17:87:18:
6e:ad:ff:61:2c:64:c3:df:42:0a:a6:16:9a:0e:c9:
62:06:89:00:aa:87:27:f1:ee:f5:de:5d:f8:5b:f0:
08:47:7a:f0:6b:d3:54:2d:94:26:80:38:2d:fa:d4:
97:d1:f8:aa:ae:be:70:ae:32:3e:03:65:c8:32:76:
2d:6a:73:cd:ff:c7:4e:1a:26:06:40:8c:7a:cb:36:
57:17:4a:34:80:85:a6:9e:18:ba:97:eb:9c:50:33:
7e:be:9e:a5:a7:ef:9b:e8:32:c4:2c:95:a3:c6:4b:
ce:50:b0:37:25:9a:01:9a:12:42:99:10:71:65:af:
0d:28:7e:52:dd:27:5d:6e:e5:b4:4b:84:04:a1:a6:
35:7a:85:91:ea:c0:b5:9d:6b:45:9e:09:20:a4:81:
ba:e8:82:99:67:04:60:80:fa:3b:95:ac:35:85:78:
5f:44:51:55:9b:dd:6d:8c:fd:23:86:51:38:67:1e:
1a:2a:31:db:fa:b4:6f:fd:e5:96:f7:09:5d:48:09:
ce:0e:2f:a6:b6:6c:9b:a8:5c:60:4e:d6:4d:92:d4:
44:33:1d:44:15:4c:37:65:a4:57:a4:9a:32:0b:19:
4f:85:8c:86:73:21:36:d9:b1:8d:2c:d6:88:ac:c6:
41:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:54:EA:8C:83:2A:34:12:1C:50:F3:9E:B2:FE:C5:CD:2C:D2:05:08
X509v3 Authority Key Identifier:
keyid:6C:53:11:A5:7C:CF:CB:51:35:26:1F:F3:9B:D1:9A:11:5E:F3:E7:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bFMRpXzPy1E1Jh_zm9GaEV7z588.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/d983cd-3f8e-4d6e-a38c-4d8d62b18e89/1/bFMRpXzPy1E1Jh_zm9GaEV7z588.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/d983cd-3f8e-4d6e-a38c-4d8d62b18e89/1/bFMRpXzPy1E1Jh_zm9GaEV7z588.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:f5:29:fe:48:03:c4:cf:d9:0a:8e:31:4c:08:f3:99:7b:24:
eb:cc:4b:8a:d2:83:71:79:d5:28:27:42:c8:22:48:e4:ab:05:
c5:47:c5:17:44:9c:2e:28:4b:40:11:3d:8d:a3:5a:2d:1e:28:
3a:25:0c:2c:b9:c3:ac:0d:f8:de:2c:e2:36:e4:69:b0:06:46:
9f:c8:17:a2:e7:13:12:0c:2b:8b:85:9a:cc:a1:a3:ba:65:dc:
67:01:90:79:80:5e:c3:c8:f7:bf:99:53:48:25:ac:5e:4c:9a:
70:41:10:6f:65:06:f7:12:cd:cc:e7:5c:90:97:86:f7:ac:21:
a2:58:46:2a:2f:03:8b:70:b4:1e:cb:f3:16:89:29:19:42:45:
14:d0:8e:60:33:03:15:c2:dc:a8:32:c2:e9:cd:ea:7b:aa:40:
1e:89:64:d6:e9:48:22:90:a2:c4:7c:72:af:56:a2:c7:45:6a:
19:7e:6a:0b:b0:7e:1e:a3:c4:36:c8:d3:99:d2:c9:35:58:8f:
bb:7f:d4:57:82:4f:b1:90:03:ac:67:28:51:d8:5b:7a:bb:76:
7c:2b:54:3e:6d:c0:7c:58:e3:e7:9a:eb:4e:f2:44:ef:4e:40:
07:1f:05:c4:4d:9d:83:67:3b:2d:c0:0d:bf:c8:1f:3a:d2:9b:
89:b9:8c:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:38:01 2025 by rpki-client