Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/9db87f-a31a-4b4d-8624-280f5a4b5e03/1/bLyEAvCSNDucA9OGBpco-Jg-YAg.mft
File: bLyEAvCSNDucA9OGBpco-Jg-YAg.mft (raw, json)
Hash identifier: JxOsgRgwZuaflhjc00SfiTi+fxXhY9c04VK2KGx8EhQ=
Subject key identifier: F1:5D:5F:90:AF:85:95:F6:89:06:82:65:FE:CC:49:64:DE:F7:5B:A6
Authority key identifier: 6C:BC:84:02:F0:92:34:3B:9C:03:D3:86:06:97:28:F8:98:3E:60:08
Certificate issuer: /CN=6cbc8402f092343b9c03d386069728f8983e6008
Certificate serial: 0197B8FCBFA46661B4EAE991FDB468133F19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bLyEAvCSNDucA9OGBpco-Jg-YAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/9db87f-a31a-4b4d-8624-280f5a4b5e03/1/bLyEAvCSNDucA9OGBpco-Jg-YAg.mft
Manifest number: 0E1F
Signing time: Sun 29 Jun 2025 00:01:01 +0000
Manifest this update: Sun 29 Jun 2025 00:01:01 +0000
Manifest next update: Mon 30 Jun 2025 00:01:01 +0000
Files and hashes: 1: bLyEAvCSNDucA9OGBpco-Jg-YAg.crl (hash: x/F44jk7iTRP6ZKSFXOza7s1lKpqmIbPJe72DMRqyjM=)
2: cdM459bUqR9CDHxK6hkgW3z_lyI.roa (hash: yGuDalXNxH1KMB1e5SARV7XMjke+R1A0tgbxBSQwq0g=)
3: gDWc6H7uj9ibkrZP4t2rHY2dAjc.roa (hash: kA5V7O8+i9I2snnuaBTFlKTpJopDxBn7UIT61zUY590=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/9db87f-a31a-4b4d-8624-280f5a4b5e03/1/bLyEAvCSNDucA9OGBpco-Jg-YAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/9db87f-a31a-4b4d-8624-280f5a4b5e03/1/bLyEAvCSNDucA9OGBpco-Jg-YAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/bLyEAvCSNDucA9OGBpco-Jg-YAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:fc:bf:a4:66:61:b4:ea:e9:91:fd:b4:68:13:3f:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cbc8402f092343b9c03d386069728f8983e6008
Validity
Not Before: Jun 29 00:01:01 2025 GMT
Not After : Jun 30 00:01:01 2025 GMT
Subject: CN=f15d5f90af8595f689068265fecc4964def75ba6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:87:c5:cc:5f:9f:60:d7:10:94:2b:35:b8:89:
e7:51:43:6a:5c:bb:13:c3:e4:4b:d4:f8:fb:9a:5e:
8a:09:c8:02:2f:43:0b:3a:5d:31:14:56:78:82:97:
1a:5d:ab:e4:2a:5d:9f:1b:0b:74:0d:c7:2d:f5:66:
4d:09:2b:1d:88:ca:ac:0c:49:3e:fa:e8:5c:ad:07:
42:b8:e0:76:62:51:e5:b3:8f:46:af:5c:7f:97:26:
ad:82:02:b7:ce:74:7d:fe:c1:54:23:12:2a:7d:96:
61:30:a4:62:bc:c3:0a:95:3b:c2:4d:a6:05:3e:bb:
fd:47:00:00:3a:ba:9c:5c:c0:57:42:56:57:75:00:
8d:64:e4:ea:02:e3:0c:8f:4c:86:22:68:3c:1b:d9:
c3:88:4b:01:39:cc:99:0b:de:45:ef:d6:35:43:f2:
e2:e1:2d:a7:87:a2:c2:13:6f:96:88:b8:77:74:09:
18:e6:84:40:bf:77:fc:3e:e2:68:b6:ab:f6:1e:b8:
59:d8:a1:85:98:7a:6a:03:ac:2e:78:77:96:dc:8b:
f1:5e:fa:b1:b2:dc:9c:e1:2c:f9:67:29:da:fa:37:
7f:27:00:05:14:a2:5c:fc:e5:42:af:d5:8b:70:41:
c2:1a:43:9f:c8:4b:60:91:5c:4d:0a:fb:a2:39:7e:
40:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:5D:5F:90:AF:85:95:F6:89:06:82:65:FE:CC:49:64:DE:F7:5B:A6
X509v3 Authority Key Identifier:
keyid:6C:BC:84:02:F0:92:34:3B:9C:03:D3:86:06:97:28:F8:98:3E:60:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bLyEAvCSNDucA9OGBpco-Jg-YAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/9db87f-a31a-4b4d-8624-280f5a4b5e03/1/bLyEAvCSNDucA9OGBpco-Jg-YAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/9db87f-a31a-4b4d-8624-280f5a4b5e03/1/bLyEAvCSNDucA9OGBpco-Jg-YAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:4f:ad:11:14:b4:51:38:f9:6b:0e:65:65:bb:61:7d:8f:33:
dc:cf:4a:b0:f3:99:5d:b6:a2:5b:81:05:5b:17:52:ef:20:d7:
3a:15:6e:f2:14:61:70:ca:be:76:67:79:3e:18:71:65:59:7c:
6a:be:97:c2:9c:8f:6e:9e:f1:ed:49:68:69:84:38:a0:43:9d:
5b:b2:dd:45:9c:36:66:76:49:5f:32:66:2b:f9:64:f7:2e:ad:
97:66:40:26:aa:c3:40:de:f8:a7:20:e5:74:19:96:c2:a4:b6:
ee:8c:0b:7c:8f:61:15:66:39:d5:57:a1:4a:16:7f:c2:bc:8f:
b3:25:3d:fc:2b:e9:73:f8:70:f8:56:70:00:79:fe:1c:c9:a7:
43:68:90:45:13:25:17:37:74:ef:ca:d1:14:5c:64:d0:9e:a4:
8c:c3:e7:32:29:37:13:01:76:3f:8b:e9:7a:04:84:32:cc:81:
67:e6:10:26:24:cc:76:fd:32:27:51:85:25:e6:bd:bf:e2:46:
22:06:7e:2d:77:23:1b:61:8b:db:5d:51:36:3a:27:64:1f:f6:
e8:4c:e0:da:40:d9:64:01:b4:a1:d6:66:d2:cb:af:ed:71:30:
db:9b:6e:f0:d4:5b:3d:0f:17:dc:0c:13:0e:06:29:be:c5:e5:
86:2f:76:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 09:37:05 2025 by rpki-client