Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.mft
File: bMV2kcFcnrOjeZF4BtKU_TkXXgc.mft (raw, json)
Hash identifier: vE+fy8jENdx/WGZu1GPm0+XSAgPn5tz2ktzeg9AuK7M=
Subject key identifier: 48:DB:B2:7A:8A:8B:93:4C:FE:F7:08:AB:3C:71:06:15:06:1A:07:0F
Authority key identifier: 6C:C5:76:91:C1:5C:9E:B3:A3:79:91:78:06:D2:94:FD:39:17:5E:07
Certificate issuer: /CN=6cc57691c15c9eb3a379917806d294fd39175e07
Certificate serial: 0197C0B683EBA2F61C02892C7FC54DF26949
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bMV2kcFcnrOjeZF4BtKU_TkXXgc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.mft
Manifest number: 15BD
Signing time: Mon 30 Jun 2025 12:01:16 +0000
Manifest this update: Mon 30 Jun 2025 12:01:16 +0000
Manifest next update: Tue 01 Jul 2025 12:01:16 +0000
Files and hashes: 1: NEV_-oCqja9NUg4iDlmgfjuQWbE.roa (hash: ReSei0m0CMnR22mGMZi2S582O1et/LA16EgWBVKTiLE=)
2: bMV2kcFcnrOjeZF4BtKU_TkXXgc.crl (hash: KLVtQpuBC8uX7FucaHa3HNI01oHksP/KzaRmpdCMM5k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.mft
rsync://rpki.ripe.net/repository/DEFAULT/bMV2kcFcnrOjeZF4BtKU_TkXXgc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 07:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c0:b6:83:eb:a2:f6:1c:02:89:2c:7f:c5:4d:f2:69:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cc57691c15c9eb3a379917806d294fd39175e07
Validity
Not Before: Jun 30 12:01:16 2025 GMT
Not After : Jul 1 12:01:16 2025 GMT
Subject: CN=48dbb27a8a8b934cfef708ab3c710615061a070f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d4:cf:d1:df:89:0e:3a:a3:dc:12:29:63:79:
50:4e:80:32:63:1f:62:e3:ff:8e:3b:b4:54:50:46:
6c:f9:57:e6:3d:cf:4c:85:59:b5:3d:97:37:49:0e:
2d:2f:06:5b:23:ed:85:c6:8f:92:96:a7:7c:14:7a:
20:7b:b8:62:56:71:82:89:be:32:c5:1c:98:ab:bb:
cb:f4:b0:1a:4b:04:e0:69:56:c8:c7:25:bf:f5:4a:
66:bf:10:4f:67:4c:fd:82:09:eb:08:1e:95:de:18:
56:8d:89:7d:86:9f:ca:66:9e:be:ff:6a:41:91:3c:
0c:30:b6:b7:9a:a1:bc:cc:4b:0b:fc:02:1b:f7:39:
f5:d6:07:59:18:15:f0:61:48:2b:da:48:85:d0:be:
df:2e:bd:a2:af:ac:e0:7f:b1:8c:e5:2c:75:27:55:
9e:fd:90:1d:b4:12:52:f0:50:86:3d:0b:54:e6:6e:
b2:54:39:e0:07:60:b2:a5:ed:0d:5f:e7:e2:a5:b4:
24:77:c7:28:69:4d:0b:49:bc:a2:b6:52:55:48:d8:
4e:b2:4e:0f:d5:e9:e4:87:2a:a3:a9:bc:1b:d4:33:
9e:54:60:1b:f3:54:eb:07:99:f0:14:d1:cd:e8:3d:
24:5d:9c:f9:73:96:75:ed:af:fe:94:ba:3b:69:35:
5d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:DB:B2:7A:8A:8B:93:4C:FE:F7:08:AB:3C:71:06:15:06:1A:07:0F
X509v3 Authority Key Identifier:
keyid:6C:C5:76:91:C1:5C:9E:B3:A3:79:91:78:06:D2:94:FD:39:17:5E:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bMV2kcFcnrOjeZF4BtKU_TkXXgc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3c42db-1565-4ebe-b4bc-fddb96e6dad1/1/bMV2kcFcnrOjeZF4BtKU_TkXXgc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:07:75:8b:fd:3a:79:ad:1b:06:06:bb:f7:c2:a7:97:0d:1f:
f0:48:f3:31:36:90:a4:38:e7:d1:58:de:cd:f4:7b:ba:bf:10:
5d:e6:37:90:8f:5a:7b:cf:1c:64:13:47:26:b0:a0:ec:a3:8c:
c2:e9:ec:a7:bb:45:07:76:a3:66:cb:ae:85:9b:76:6f:59:c2:
51:f4:3c:e2:51:46:27:e5:07:d1:d8:cf:1f:e7:da:3b:30:4c:
44:5c:fb:11:3e:48:8d:93:87:2a:9c:72:8f:e2:3f:e2:f3:ae:
2a:ef:2f:1f:52:30:9e:6c:47:36:03:d7:eb:21:8e:7d:86:e2:
2c:93:14:1b:17:89:d3:c1:54:67:75:6a:68:a4:e5:91:a8:96:
cb:07:71:4f:9f:44:b5:61:ed:cd:17:28:9b:89:fd:ea:db:b9:
1e:34:0e:3a:e9:e1:9f:7d:46:69:a5:23:68:97:e0:e6:cc:d2:
ae:c0:1c:13:e5:2e:d3:ae:34:1b:4d:ba:30:28:9a:52:e0:00:
2b:b2:03:e6:57:b3:a0:66:f7:c9:a2:44:ec:a0:ea:17:9a:ba:
56:67:7b:f2:7c:6b:da:9d:58:47:30:bd:07:aa:98:42:e9:e0:
fe:90:12:10:c0:a3:32:79:8d:a7:e0:db:88:6d:92:73:86:b0:
b1:14:bd:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 14:26:44 2025 by rpki-client