Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/9a5599-d389-4836-8033-43dc2b5eeb5b/1/bCynx_AN7ET0jEnyKldylIaaqbo.mft
File: bCynx_AN7ET0jEnyKldylIaaqbo.mft (raw, json)
Hash identifier: R2srLvr7teOdkBJRJTTfwro/krN0B348DU6VpaMITX4=
Subject key identifier: 15:21:B9:71:6E:D0:7D:A3:A9:CB:BC:5D:E4:C7:CB:A7:AD:1C:2F:43
Authority key identifier: 6C:2C:A7:C7:F0:0D:EC:44:F4:8C:49:F2:2A:57:72:94:86:9A:A9:BA
Certificate issuer: /CN=6c2ca7c7f00dec44f48c49f22a577294869aa9ba
Certificate serial: 0197B7452FA6BB160D4F8C89833D8DD4CE38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bCynx_AN7ET0jEnyKldylIaaqbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/9a5599-d389-4836-8033-43dc2b5eeb5b/1/bCynx_AN7ET0jEnyKldylIaaqbo.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 16:00:54 +0000
Manifest this update: Sat 28 Jun 2025 16:00:54 +0000
Manifest next update: Sun 29 Jun 2025 16:00:54 +0000
Files and hashes: 1: CFjxJzCmd6HUFa7VuE6yI0I0AMQ.roa (hash: MIyflourwhBuhTA+A0FwkrenrfoY9JbHcdU1eop0jPQ=)
2: bCynx_AN7ET0jEnyKldylIaaqbo.crl (hash: mufn/JvOOnvtif4P93Z0l55JFaiEr106gv+D0ol+xDM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/9a5599-d389-4836-8033-43dc2b5eeb5b/1/bCynx_AN7ET0jEnyKldylIaaqbo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/9a5599-d389-4836-8033-43dc2b5eeb5b/1/bCynx_AN7ET0jEnyKldylIaaqbo.mft
rsync://rpki.ripe.net/repository/DEFAULT/bCynx_AN7ET0jEnyKldylIaaqbo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:2f:a6:bb:16:0d:4f:8c:89:83:3d:8d:d4:ce:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c2ca7c7f00dec44f48c49f22a577294869aa9ba
Validity
Not Before: Jun 28 16:00:54 2025 GMT
Not After : Jun 29 16:00:54 2025 GMT
Subject: CN=1521b9716ed07da3a9cbbc5de4c7cba7ad1c2f43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:f8:24:c5:a6:06:e4:8b:39:df:62:7d:37:db:
85:d1:a8:40:46:68:3f:b4:44:9f:9e:88:ad:cc:6c:
d2:a5:f5:21:f3:93:a5:52:24:3a:9e:b4:27:15:34:
55:28:3d:4b:62:e8:74:ef:81:7d:2f:04:ca:e7:dd:
3d:53:6b:e8:de:01:0b:89:43:b9:f7:e7:9c:d2:6c:
e7:0b:ad:08:b0:db:21:40:35:06:cf:7b:9b:68:e9:
92:bf:3a:8a:32:da:98:92:d8:61:07:ad:a0:46:68:
3f:19:bc:fe:64:66:2d:5e:42:bd:bd:56:25:d3:78:
93:4b:af:2f:ce:65:c7:59:81:46:c5:3e:e6:12:f0:
7f:a9:aa:96:17:81:bb:b1:2b:0d:a0:79:db:98:78:
54:26:2c:53:3f:f3:5c:3f:45:23:70:86:1f:cd:84:
ea:0f:90:3b:fc:25:e8:65:57:c5:a1:a5:80:01:8d:
4d:87:f3:63:f2:c0:2f:de:e5:16:30:70:e5:b1:94:
19:d5:18:cd:59:e4:1f:25:25:bd:91:fc:f6:a2:5a:
06:46:be:da:84:da:e2:d9:3f:25:38:b3:85:d3:c1:
7a:5e:e7:9f:ad:90:6b:48:29:d6:2f:dd:80:05:92:
fc:ed:b8:c6:7b:3c:0f:26:3d:bf:fb:77:2d:af:83:
93:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:21:B9:71:6E:D0:7D:A3:A9:CB:BC:5D:E4:C7:CB:A7:AD:1C:2F:43
X509v3 Authority Key Identifier:
keyid:6C:2C:A7:C7:F0:0D:EC:44:F4:8C:49:F2:2A:57:72:94:86:9A:A9:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bCynx_AN7ET0jEnyKldylIaaqbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9a5599-d389-4836-8033-43dc2b5eeb5b/1/bCynx_AN7ET0jEnyKldylIaaqbo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/9a5599-d389-4836-8033-43dc2b5eeb5b/1/bCynx_AN7ET0jEnyKldylIaaqbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:5b:af:ec:f2:fb:2b:5e:d2:24:ef:84:32:d1:09:97:29:4f:
21:5b:3b:d7:40:88:39:fb:33:dd:73:63:44:e7:d9:1c:b9:55:
4c:60:cd:ee:9e:08:3b:2f:34:a4:14:ca:55:98:d6:a6:18:3e:
30:50:5f:f1:2e:d4:b8:da:43:2b:17:c9:e0:63:4e:ea:44:33:
88:6b:a6:1f:c7:d6:6f:a0:1d:a4:75:81:8e:bd:b3:7f:2c:cd:
6c:43:ba:b8:91:3b:16:18:3c:3a:42:29:7d:0b:a7:62:ab:d2:
64:af:3f:2c:b3:c2:64:90:02:51:6c:d7:63:ea:31:91:76:63:
5b:68:41:33:37:c2:1f:7d:25:85:48:d2:2b:b6:d3:f9:b2:60:
ae:97:a5:6a:ed:3a:1d:69:35:e2:c2:c8:aa:94:a2:71:b7:95:
8b:40:9b:56:59:3d:81:c7:43:ef:57:1b:4c:15:41:8c:83:53:
3c:26:ca:8e:ef:83:7d:90:e7:3e:4c:9c:53:21:3a:93:58:b8:
4d:9b:7b:a5:60:53:ab:88:53:a8:9f:32:c1:10:92:18:dc:9b:
8a:c1:37:c9:fa:b2:2b:1c:1f:b8:2a:11:9e:cd:d1:16:cd:a3:
be:0e:bc:6c:be:f1:39:fa:25:35:02:d7:45:42:40:d2:0c:49:
cf:2a:47:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:16:32 2025 by rpki-client