Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/228c48-0cce-4b82-8ad9-99a80700a55b/1/bn6xMYo8yINPXAaFS-wU9YN3Rtk.mft
File: bn6xMYo8yINPXAaFS-wU9YN3Rtk.mft (raw, json)
Hash identifier: QXZ9wRiHSRNkGimmpNzoJyUqJajcZVDvd0+IwR1Yh08=
Subject key identifier: 29:69:55:38:29:27:A2:2E:F4:A2:BD:1E:F6:59:5F:21:63:2F:A5:70
Authority key identifier: 6E:7E:B1:31:8A:3C:C8:83:4F:5C:06:85:4B:EC:14:F5:83:77:46:D9
Certificate issuer: /CN=6e7eb1318a3cc8834f5c06854bec14f5837746d9
Certificate serial: 0197B70EBDAD05CCB0F4D33E61CDF7045DF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bn6xMYo8yINPXAaFS-wU9YN3Rtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/228c48-0cce-4b82-8ad9-99a80700a55b/1/bn6xMYo8yINPXAaFS-wU9YN3Rtk.mft
Manifest number: 20
Signing time: Sat 28 Jun 2025 15:01:25 +0000
Manifest this update: Sat 28 Jun 2025 15:01:25 +0000
Manifest next update: Sun 29 Jun 2025 15:01:25 +0000
Files and hashes: 1: AOPS_RNUN6C_o_rOcZL9uTkJpmY.roa (hash: Px9yrVlBYtJJHli8YOeQSPpBhl1NXrWdG9JALrRzsfU=)
2: bn6xMYo8yINPXAaFS-wU9YN3Rtk.crl (hash: dIKT/kKYkWmRw7kvWl3VOuTtmY3Hfgf6yb7yo3HpGGM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/228c48-0cce-4b82-8ad9-99a80700a55b/1/bn6xMYo8yINPXAaFS-wU9YN3Rtk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/228c48-0cce-4b82-8ad9-99a80700a55b/1/bn6xMYo8yINPXAaFS-wU9YN3Rtk.mft
rsync://rpki.ripe.net/repository/DEFAULT/bn6xMYo8yINPXAaFS-wU9YN3Rtk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:bd:ad:05:cc:b0:f4:d3:3e:61:cd:f7:04:5d:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e7eb1318a3cc8834f5c06854bec14f5837746d9
Validity
Not Before: Jun 28 15:01:25 2025 GMT
Not After : Jun 29 15:01:25 2025 GMT
Subject: CN=296955382927a22ef4a2bd1ef6595f21632fa570
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6c:a8:95:af:4a:ad:f5:01:d6:dc:6c:2b:e9:
ab:ae:03:2a:4c:97:6c:3a:ed:b8:92:2e:55:e6:54:
e3:43:62:b3:3c:8d:ae:3a:a3:24:12:67:39:d1:74:
1c:11:3b:0e:5c:5f:c1:61:10:29:54:d2:d0:88:97:
cd:f4:7e:f0:46:6e:a3:15:2b:e0:61:04:74:b5:6e:
5f:40:9f:c5:bf:dd:42:75:2a:ae:cb:08:79:5a:cf:
fc:75:cb:1d:80:71:6a:be:c0:2a:cf:ec:cb:cf:96:
95:ae:b4:2b:05:f8:03:d5:51:80:e1:fc:b2:97:4b:
a3:e7:73:f1:7b:4d:07:1e:e5:39:ee:94:c7:f3:ce:
73:2f:de:c2:a0:88:02:76:9d:3c:79:2b:b3:a1:89:
5e:d3:58:6f:b6:da:ab:96:c8:b1:b0:a7:b9:3b:e8:
89:75:4b:b4:95:50:a6:33:e7:8e:db:f1:cc:64:c8:
c5:fe:cf:d5:05:4c:47:e2:9f:fc:27:01:d5:0c:12:
06:62:4a:0c:ea:f6:f9:27:d3:0b:1f:6b:b0:00:20:
5e:7d:35:0b:f0:65:ae:98:97:a5:bc:d0:ab:a2:c4:
58:d4:0f:9c:2f:5d:12:54:2a:9b:7a:14:2f:0d:46:
7a:d1:7b:b6:b6:13:0f:02:18:17:aa:dc:51:fd:50:
3a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:69:55:38:29:27:A2:2E:F4:A2:BD:1E:F6:59:5F:21:63:2F:A5:70
X509v3 Authority Key Identifier:
keyid:6E:7E:B1:31:8A:3C:C8:83:4F:5C:06:85:4B:EC:14:F5:83:77:46:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bn6xMYo8yINPXAaFS-wU9YN3Rtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/228c48-0cce-4b82-8ad9-99a80700a55b/1/bn6xMYo8yINPXAaFS-wU9YN3Rtk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/228c48-0cce-4b82-8ad9-99a80700a55b/1/bn6xMYo8yINPXAaFS-wU9YN3Rtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:83:8f:c6:fa:b5:fa:8c:49:96:14:3b:1c:37:6a:83:2f:a8:
72:d7:93:2b:5c:04:5e:86:11:02:e1:b0:f9:d6:4d:e7:d8:91:
f5:6a:c1:3d:ec:86:1a:c7:98:bc:fb:95:89:5f:96:a4:82:08:
0d:c6:b3:3c:c2:c4:bb:c6:0a:70:e0:c1:59:28:82:51:09:d5:
47:32:bc:34:11:cc:54:7b:4f:22:1a:1c:45:29:86:08:08:3a:
51:4e:9f:90:ba:1a:ad:01:94:00:c9:26:17:4b:41:01:8f:13:
f7:24:fe:fc:df:88:83:4b:2e:49:e4:75:0b:5b:c0:dd:b1:70:
91:77:55:f8:0a:e0:34:06:a4:6a:01:3c:a0:5c:3b:93:c1:86:
9c:cb:f9:2c:d1:c5:f4:50:9a:60:d9:7f:2f:7d:ed:5a:b0:d5:
bc:bc:5f:e2:f5:d4:2a:28:ae:df:6d:de:de:7e:05:1f:1a:6d:
f2:32:42:97:06:d0:28:c1:a2:ac:1b:d8:36:ee:b2:7e:13:50:
60:4e:dd:6b:17:ee:8c:23:c3:c0:a1:fe:ec:0e:4e:9b:e8:33:
5c:bb:fb:1c:d5:8b:85:cd:91:13:e7:41:40:6a:85:f1:9c:c6:
98:d3:3b:cf:bd:38:2e:0f:67:9d:ad:53:23:b7:ff:d8:a0:23:
37:bc:8a:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:59:30 2025 by rpki-client