Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/bPmyTywIR9BBweZqEvAeq6R4tPw.mft
File: bPmyTywIR9BBweZqEvAeq6R4tPw.mft (raw, json)
Hash identifier: nlbIe9ehHV/AM7n6cMNt+V3XuMV/XAAc9tuXLxVFRzs=
Subject key identifier: EF:26:D8:4B:18:B1:51:E6:E7:7C:EC:99:0B:A4:74:A9:52:57:41:D7
Authority key identifier: 6C:F9:B2:4F:2C:08:47:D0:41:C1:E6:6A:12:F0:1E:AB:A4:78:B4:FC
Certificate issuer: /CN=6cf9b24f2c0847d041c1e66a12f01eaba478b4fc
Certificate serial: 0197C5015F2000B2A5E0DA89483FEBD972BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bPmyTywIR9BBweZqEvAeq6R4tPw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/bPmyTywIR9BBweZqEvAeq6R4tPw.mft
Manifest number: 1308
Signing time: Tue 01 Jul 2025 08:01:30 +0000
Manifest this update: Tue 01 Jul 2025 08:01:30 +0000
Manifest next update: Wed 02 Jul 2025 08:01:30 +0000
Files and hashes: 1: 1-Dc1j-sDoajA4rj7PpUTOnwnU-0.roa (hash: NijhNjLNNvEG1LM/N8d14Oe4TjDIViDnHYlMTh5ifKg=)
2: bPmyTywIR9BBweZqEvAeq6R4tPw.crl (hash: lcK7PgJoRbXr+zbBWGmf5LllG/Ndbs7y4XjrgMTlnJs=)
3: bmSsChQ_uSfpackXOAYafu-z5Fo.roa (hash: uprpuovuYrWDW4OaKvbEYi0c7oMEH3+iYWDHio/5TEA=)
4: rnAMBNvdJk6nX3AxwpicmUlIk4I.roa (hash: 3CR6ieS5zbe1a7wxc2adFdSClMAuXiJukh48kNXSBX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/bPmyTywIR9BBweZqEvAeq6R4tPw.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/bPmyTywIR9BBweZqEvAeq6R4tPw.mft
rsync://rpki.ripe.net/repository/DEFAULT/bPmyTywIR9BBweZqEvAeq6R4tPw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c5:01:5f:20:00:b2:a5:e0:da:89:48:3f:eb:d9:72:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cf9b24f2c0847d041c1e66a12f01eaba478b4fc
Validity
Not Before: Jul 1 08:01:30 2025 GMT
Not After : Jul 2 08:01:30 2025 GMT
Subject: CN=ef26d84b18b151e6e77cec990ba474a9525741d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:7f:82:ca:9c:c1:b5:cc:53:f6:b7:ed:16:6f:
55:41:15:07:2e:89:da:1c:50:fa:31:ff:0c:16:f5:
48:24:af:35:62:d0:be:9b:57:9b:bb:b3:07:4a:f0:
46:09:16:33:c4:5e:09:e5:4f:01:b7:17:ac:96:c6:
0a:e6:8c:82:16:9d:d2:eb:ce:7f:0f:5d:5b:a5:62:
20:e3:c9:49:71:9c:02:37:d1:27:fb:1e:2e:3c:b4:
3b:01:55:81:d1:3c:a0:a5:db:fb:82:29:bb:48:88:
70:bd:aa:72:30:f3:c4:36:db:db:65:f8:5c:0b:de:
76:b8:f9:80:b8:1c:50:b9:b8:51:7d:af:60:39:f4:
b0:9d:41:f7:fb:82:9f:85:20:da:9b:74:3d:4e:91:
ce:da:a0:29:e3:f7:ed:49:ce:01:3b:54:cf:7c:70:
c6:eb:4f:8b:73:0b:f4:5b:e9:0d:25:e2:5f:83:89:
6a:f3:a8:dd:3d:48:60:32:45:5a:f6:da:8f:2a:1a:
9f:c0:ca:f5:94:d6:3c:7d:97:a9:5f:ac:6f:e1:bc:
4f:a5:03:f7:ba:c8:e9:b0:0c:a9:42:fe:29:83:a7:
2a:77:1a:e0:b6:9f:37:4c:51:f8:95:94:67:47:a7:
88:23:1c:46:eb:77:44:72:4c:6c:f2:9c:44:f8:25:
76:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:26:D8:4B:18:B1:51:E6:E7:7C:EC:99:0B:A4:74:A9:52:57:41:D7
X509v3 Authority Key Identifier:
keyid:6C:F9:B2:4F:2C:08:47:D0:41:C1:E6:6A:12:F0:1E:AB:A4:78:B4:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bPmyTywIR9BBweZqEvAeq6R4tPw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/bPmyTywIR9BBweZqEvAeq6R4tPw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/b45765-2c33-4a49-91eb-946892f88beb/1/bPmyTywIR9BBweZqEvAeq6R4tPw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:e6:7a:1a:34:09:97:7e:3a:b8:86:dc:04:5a:41:d0:33:40:
d3:76:de:64:eb:bf:b8:2c:f8:f5:41:40:ab:69:07:87:a8:11:
cc:59:7d:2f:db:c8:df:a5:29:d7:8c:ae:c0:63:ae:45:2e:45:
32:63:32:d6:a4:7d:63:f7:60:5c:d5:d6:8a:26:38:91:04:1f:
4d:0d:ad:a9:f4:e3:d0:d9:c8:2d:5b:c4:39:df:c6:e9:74:60:
0a:74:4c:36:5f:29:4f:7a:cf:8b:e7:49:d7:a9:66:5b:73:a1:
d0:dc:0d:d9:6d:26:75:c2:b1:ad:2d:c1:7c:03:be:e6:4a:ca:
b0:6c:1a:fb:90:5f:34:2e:37:fa:36:cf:ce:5d:cf:e4:ae:69:
86:7a:24:56:21:ed:17:99:2e:a2:95:4f:35:69:66:75:a0:4a:
51:ae:03:1c:81:cd:55:b3:9b:3e:b7:98:93:07:aa:e7:2b:e2:
8f:e3:86:bf:05:9c:f4:21:10:22:a9:8d:28:9f:31:b7:7e:71:
35:e1:9f:d3:ed:6b:08:64:7f:4f:12:43:33:88:8d:15:18:6d:
d3:89:61:5e:7c:77:92:53:5a:ce:0c:22:07:11:1e:74:ba:7a:
5a:b1:42:e1:d3:a5:e9:b4:d5:9d:ae:47:85:49:65:4e:3a:00:
c5:1e:66:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 17:09:33 2025 by rpki-client