Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/f9503e-da85-45fc-b032-b2e7feff402f/1/bV-D7gKxc3SL5d47O5wlMXmSaOg.mft
File: bV-D7gKxc3SL5d47O5wlMXmSaOg.mft (raw, json)
Hash identifier: YEEGUPM23t2UcmLPuYna1CsabwkPsSLg0SWBLQ0Ho4U=
Subject key identifier: BE:F0:29:10:30:88:CC:38:D0:AA:03:4D:A0:DD:F0:03:B6:15:8E:2B
Authority key identifier: 6D:5F:83:EE:02:B1:73:74:8B:E5:DE:3B:3B:9C:25:31:79:92:68:E8
Certificate issuer: /CN=6d5f83ee02b173748be5de3b3b9c2531799268e8
Certificate serial: 0197C0ED16F713E8624AA757FD254D6F4E14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bV-D7gKxc3SL5d47O5wlMXmSaOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/f9503e-da85-45fc-b032-b2e7feff402f/1/bV-D7gKxc3SL5d47O5wlMXmSaOg.mft
Manifest number: 15BB
Signing time: Mon 30 Jun 2025 13:00:52 +0000
Manifest this update: Mon 30 Jun 2025 13:00:52 +0000
Manifest next update: Tue 01 Jul 2025 13:00:52 +0000
Files and hashes: 1: TOEiqlLp3YhnuZt00V4Ge_gWm3w.roa (hash: 7eGYzt0fIboqSotZXLbGSLMqFgnc7lNxn1f/rJYyeyA=)
2: bV-D7gKxc3SL5d47O5wlMXmSaOg.crl (hash: JaajcC6y4gwrzIycN6nAW4VzQDWDM40yysrDF7+Ojd8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/f9503e-da85-45fc-b032-b2e7feff402f/1/bV-D7gKxc3SL5d47O5wlMXmSaOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/f9503e-da85-45fc-b032-b2e7feff402f/1/bV-D7gKxc3SL5d47O5wlMXmSaOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/bV-D7gKxc3SL5d47O5wlMXmSaOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 13:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c0:ed:16:f7:13:e8:62:4a:a7:57:fd:25:4d:6f:4e:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d5f83ee02b173748be5de3b3b9c2531799268e8
Validity
Not Before: Jun 30 13:00:52 2025 GMT
Not After : Jul 1 13:00:52 2025 GMT
Subject: CN=bef029103088cc38d0aa034da0ddf003b6158e2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:42:6a:c5:43:b4:7d:2d:8a:8b:e6:ea:2d:d3:
cd:16:62:a0:bf:a8:41:e6:7f:27:46:2c:70:11:b4:
0b:86:6f:88:da:47:24:bb:fe:2e:c3:88:54:25:8e:
08:7f:38:eb:56:86:7b:17:03:dd:64:5b:3c:56:cb:
ce:32:48:77:1c:ca:66:70:33:22:80:75:d4:89:5b:
d1:ca:42:52:45:a2:38:fa:c4:fe:eb:c0:fe:ad:ec:
41:85:8a:23:96:a5:d1:08:3a:d7:76:6c:e4:7b:45:
75:3d:17:12:29:30:ef:be:8c:7e:10:6b:90:59:b9:
41:80:8a:66:53:3c:fc:1f:a3:0d:7e:13:80:b6:8e:
5d:8f:4d:b3:4e:40:d8:78:65:b8:47:1e:be:a1:8a:
49:d5:78:29:ec:b0:0d:3b:f6:f3:f3:91:9b:95:f4:
b5:d6:49:2b:55:9f:7d:8d:c0:96:80:b4:ff:48:e6:
6a:ae:4e:9b:a9:06:df:c6:a3:9f:6a:1b:2f:68:ad:
1c:95:4c:0b:92:e6:ef:97:92:f7:ed:d8:dc:2f:95:
dc:5d:d5:8c:0a:01:ce:6d:0e:4a:77:55:40:54:ba:
63:ce:b2:4a:20:01:9b:60:bc:74:83:c9:e8:e8:34:
af:ba:d5:98:a0:d6:26:99:b3:ab:df:87:d1:9a:d7:
30:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:F0:29:10:30:88:CC:38:D0:AA:03:4D:A0:DD:F0:03:B6:15:8E:2B
X509v3 Authority Key Identifier:
keyid:6D:5F:83:EE:02:B1:73:74:8B:E5:DE:3B:3B:9C:25:31:79:92:68:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bV-D7gKxc3SL5d47O5wlMXmSaOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/f9503e-da85-45fc-b032-b2e7feff402f/1/bV-D7gKxc3SL5d47O5wlMXmSaOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/f9503e-da85-45fc-b032-b2e7feff402f/1/bV-D7gKxc3SL5d47O5wlMXmSaOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:95:60:0e:09:5d:ab:5c:9b:24:e0:af:50:73:64:7c:47:a6:
f7:9d:ee:dd:cb:b5:a2:5f:25:5f:66:95:9f:ea:51:23:52:16:
67:ae:a7:0f:da:28:86:55:32:52:15:41:87:8e:6b:1a:b9:fb:
7c:af:5d:e7:b6:91:f9:4d:f0:5a:99:d1:64:76:d0:76:b8:33:
1d:1d:6a:9a:d5:b8:d6:c4:62:c6:34:27:65:53:eb:5d:fc:20:
d6:2f:52:84:7d:3c:49:f5:cb:26:fc:f5:60:36:5a:98:2a:76:
20:2c:9c:a0:dc:19:cc:e8:9e:8f:0b:21:9c:ea:5a:43:a7:32:
f7:e5:34:84:fd:58:44:7f:34:4d:9e:fe:02:e7:55:4c:3f:0a:
49:7c:88:85:af:c1:d9:73:f8:bc:b6:86:53:73:e8:d0:9b:ec:
69:ad:c0:35:72:0c:24:b6:ec:5b:73:2e:57:e0:48:a5:9d:cd:
1d:20:9c:a1:a1:52:0b:29:e8:f4:b8:bf:9b:68:e5:da:31:30:
83:8d:e4:b5:c0:d9:cf:72:a7:7f:cf:45:32:e5:a9:f9:c3:0c:
c7:ef:98:79:16:4d:d1:0e:0f:63:f0:e3:c5:6d:b8:5b:39:f2:
56:cc:37:3f:d8:c8:55:ed:12:f4:22:82:2f:e0:bb:1b:7b:d5:
85:fb:45:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 19:34:41 2025 by rpki-client