Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/316c8f-5e36-471f-9555-f6297a77a37b/1/bd2PHjjJH1sXw9GnI05JyccNwyQ.mft
File: bd2PHjjJH1sXw9GnI05JyccNwyQ.mft (raw, json)
Hash identifier: hpuLEAb9R/J+xYRaUKBZm8w4kXWtGOzfDW8tbaJKlR8=
Subject key identifier: CD:23:7D:64:54:25:DE:B5:13:1B:76:59:F7:FF:96:C8:17:EC:38:4D
Authority key identifier: 6D:DD:8F:1E:38:C9:1F:5B:17:C3:D1:A7:23:4E:49:C9:C7:0D:C3:24
Certificate issuer: /CN=6ddd8f1e38c91f5b17c3d1a7234e49c9c70dc324
Certificate serial: 0197CDCDE940EE33F31546ACF890DD1B458D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bd2PHjjJH1sXw9GnI05JyccNwyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/316c8f-5e36-471f-9555-f6297a77a37b/1/bd2PHjjJH1sXw9GnI05JyccNwyQ.mft
Manifest number: 15C2
Signing time: Thu 03 Jul 2025 01:01:53 +0000
Manifest this update: Thu 03 Jul 2025 01:01:53 +0000
Manifest next update: Fri 04 Jul 2025 01:01:53 +0000
Files and hashes: 1: BKts92Cgp762t7JNofBM7L5uftM.roa (hash: WTNLkBIvgvxJFEXIWZr47BOElViaMRJym9HooD5Dr3Q=)
2: bd2PHjjJH1sXw9GnI05JyccNwyQ.crl (hash: XlBux3eirjnB0iF2gqXpzIEPBQFxrAVWQa0PvL9KCX4=)
3: jypSqMvt2NprsB0DoEFG-cYXk3g.roa (hash: 20GE86V+BpBjF8cWsWZrxYRlzb0k0GNnTKWyu1nZsto=)
4: z53iYrx_shu0WdCaV4v6ZXfJyfA.roa (hash: ySckjx3fnBbjiCnJf7c10h+wH/jcKQr5e8Rmhk0EXE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/316c8f-5e36-471f-9555-f6297a77a37b/1/bd2PHjjJH1sXw9GnI05JyccNwyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/316c8f-5e36-471f-9555-f6297a77a37b/1/bd2PHjjJH1sXw9GnI05JyccNwyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/bd2PHjjJH1sXw9GnI05JyccNwyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 01:01:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cd:cd:e9:40:ee:33:f3:15:46:ac:f8:90:dd:1b:45:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddd8f1e38c91f5b17c3d1a7234e49c9c70dc324
Validity
Not Before: Jul 3 01:01:53 2025 GMT
Not After : Jul 4 01:01:53 2025 GMT
Subject: CN=cd237d645425deb5131b7659f7ff96c817ec384d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:09:3d:db:93:26:64:c6:c5:e2:96:f0:a8:d9:
6e:19:42:57:6c:2b:c8:12:08:f9:80:63:04:d4:d4:
5d:df:c5:a9:e0:3f:c1:62:2b:43:06:88:07:df:c9:
44:83:0d:fc:cb:ad:ec:63:23:ed:52:05:e5:d3:11:
80:fc:9e:dc:90:3c:88:e2:2c:80:13:3f:6b:41:6c:
8d:4a:10:99:a8:5b:b4:a3:76:7e:19:e4:40:82:07:
bd:1f:36:e1:9b:d0:ec:51:69:81:42:dc:96:a1:59:
9c:48:b1:5c:57:cc:4a:9d:bb:30:41:cc:cf:5d:dd:
72:b5:39:25:a0:ee:7f:53:f7:01:17:ef:1b:88:3d:
36:75:92:3d:0f:5d:93:50:39:ad:1f:0a:4a:9b:c7:
07:52:02:a6:c7:fc:2a:af:bb:dd:ac:a1:8b:f4:56:
dc:36:dd:ff:09:87:c4:f5:69:2c:a2:69:33:10:27:
23:3a:4f:20:7c:e4:59:56:77:db:85:df:cb:a0:a6:
cd:ab:d9:b2:88:2c:42:9a:a0:6c:f4:ff:15:be:64:
72:95:db:13:08:1c:63:fd:20:8c:5f:c5:ff:62:be:
e2:02:fd:a9:82:9a:68:79:8e:26:d8:b7:ec:6a:12:
55:f0:5c:5e:fe:ef:61:99:2a:99:44:9e:7e:d6:8b:
ad:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:23:7D:64:54:25:DE:B5:13:1B:76:59:F7:FF:96:C8:17:EC:38:4D
X509v3 Authority Key Identifier:
keyid:6D:DD:8F:1E:38:C9:1F:5B:17:C3:D1:A7:23:4E:49:C9:C7:0D:C3:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd2PHjjJH1sXw9GnI05JyccNwyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/316c8f-5e36-471f-9555-f6297a77a37b/1/bd2PHjjJH1sXw9GnI05JyccNwyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/316c8f-5e36-471f-9555-f6297a77a37b/1/bd2PHjjJH1sXw9GnI05JyccNwyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:54:79:f1:77:3a:28:d0:f7:28:90:6e:89:e9:5f:00:f4:83:
73:79:29:37:b2:a3:72:79:66:f3:89:8e:e7:7a:e9:6a:c3:78:
0c:cf:47:a9:13:8d:e2:76:10:cf:c2:dc:d2:42:a3:59:ad:a4:
1b:43:13:99:b0:53:67:16:43:0e:28:a6:ee:67:b0:1a:7b:c2:
fa:69:12:10:cb:53:2c:ec:76:a9:b0:5c:3d:5e:cd:50:29:e1:
e7:ad:cb:3b:d9:79:39:2a:31:45:8e:83:17:dc:db:7f:94:bd:
88:f5:99:cb:c8:eb:0f:53:ee:87:49:3a:2c:45:48:c8:6f:a5:
e2:0c:e9:1b:e1:b5:31:72:90:e6:a1:e9:f6:57:77:ae:e0:9f:
d9:82:7a:3e:5f:05:9f:38:de:b1:b6:8f:14:4a:52:71:8a:09:
31:10:e3:94:7e:19:fd:74:4d:2a:eb:a5:63:4c:a8:82:9b:60:
5d:67:f3:93:1f:44:61:e7:c8:c8:de:14:a8:57:f0:07:8c:b8:
87:37:ad:67:f7:7f:79:f9:e5:9d:cb:d4:40:cf:7d:5e:e3:8d:
9f:f5:2e:4b:f3:7a:ad:98:76:e2:20:fb:70:73:b3:6c:9f:80:
ad:37:2c:31:26:25:b8:6b:c5:bc:13:36:48:49:92:e9:85:77:
2f:ef:84:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 07:08:39 2025 by rpki-client