Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/dd3fc8-47dc-4a36-8734-45d84da39874/1/bJHX1fXOV5JskDlz7L8RK_rhUw0.mft
File: bJHX1fXOV5JskDlz7L8RK_rhUw0.mft (raw, json)
Hash identifier: 0pAKhGDBpuWYb+yF7UIHxW+3+pgGoAz76o4OKcHuXuo=
Subject key identifier: 0D:BE:58:1B:73:2B:28:97:05:F2:76:3B:58:9C:41:B2:1E:C8:06:18
Authority key identifier: 6C:91:D7:D5:F5:CE:57:92:6C:90:39:73:EC:BF:11:2B:FA:E1:53:0D
Certificate issuer: /CN=6c91d7d5f5ce57926c903973ecbf112bfae1530d
Certificate serial: 0197C79418AF76F8DF02CE3CFEF62F8E57C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bJHX1fXOV5JskDlz7L8RK_rhUw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/dd3fc8-47dc-4a36-8734-45d84da39874/1/bJHX1fXOV5JskDlz7L8RK_rhUw0.mft
Manifest number: 15BE
Signing time: Tue 01 Jul 2025 20:01:01 +0000
Manifest this update: Tue 01 Jul 2025 20:01:01 +0000
Manifest next update: Wed 02 Jul 2025 20:01:01 +0000
Files and hashes: 1: bJHX1fXOV5JskDlz7L8RK_rhUw0.crl (hash: s/CJoiLiUhZCQpFNgqnV8vToUQ3YbUeJ8skS7vrnoAQ=)
2: eEvrSYjLUGg5GhW7JvZI3HWYfcI.roa (hash: GMSu0KMyD4SKyVpe+o1Z3AHIVpLBmKGk+5TuUmweIis=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/dd3fc8-47dc-4a36-8734-45d84da39874/1/bJHX1fXOV5JskDlz7L8RK_rhUw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/dd3fc8-47dc-4a36-8734-45d84da39874/1/bJHX1fXOV5JskDlz7L8RK_rhUw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/bJHX1fXOV5JskDlz7L8RK_rhUw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 20:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c7:94:18:af:76:f8:df:02:ce:3c:fe:f6:2f:8e:57:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c91d7d5f5ce57926c903973ecbf112bfae1530d
Validity
Not Before: Jul 1 20:01:01 2025 GMT
Not After : Jul 2 20:01:01 2025 GMT
Subject: CN=0dbe581b732b289705f2763b589c41b21ec80618
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:4b:e5:19:14:a9:94:eb:36:1f:5f:85:e4:70:
54:85:3c:c6:16:20:f1:1d:23:52:88:8a:07:88:56:
f7:32:8b:5d:3f:1a:92:47:43:c9:8c:d2:2a:46:12:
64:9e:f4:56:e4:0e:50:37:8e:f1:56:c5:66:2a:f8:
3c:6f:c2:aa:2c:f2:01:95:37:8f:84:9d:5c:bb:5d:
10:7d:9d:2a:82:96:55:16:7f:1f:80:df:a5:5c:00:
e0:8d:b7:5f:60:b7:e9:94:bc:69:c4:d5:1e:00:ca:
70:01:12:de:e5:8d:0e:d8:5e:4f:ee:54:06:04:2d:
3a:fc:09:12:b3:d1:34:e4:a4:a2:da:bc:b0:4a:91:
62:fd:1f:4f:f6:97:df:fb:9a:90:52:f3:4f:39:f9:
b8:d3:37:0d:b6:04:cb:51:c5:5d:5b:4e:86:0a:42:
80:6f:79:9b:76:90:7f:a9:5a:bc:46:be:a1:4a:8a:
74:a4:83:b1:19:85:15:74:8f:44:ad:75:f9:c4:2c:
40:b7:94:15:fe:73:29:01:dc:39:0a:b1:c9:da:f4:
81:f0:b6:c6:04:92:92:79:f7:bb:96:1e:13:71:47:
1a:1f:a9:74:11:6e:52:0b:30:17:38:16:df:70:8b:
58:d5:0d:42:b9:54:5b:c5:83:13:d2:b0:16:b0:8a:
ea:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:BE:58:1B:73:2B:28:97:05:F2:76:3B:58:9C:41:B2:1E:C8:06:18
X509v3 Authority Key Identifier:
keyid:6C:91:D7:D5:F5:CE:57:92:6C:90:39:73:EC:BF:11:2B:FA:E1:53:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bJHX1fXOV5JskDlz7L8RK_rhUw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/dd3fc8-47dc-4a36-8734-45d84da39874/1/bJHX1fXOV5JskDlz7L8RK_rhUw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/dd3fc8-47dc-4a36-8734-45d84da39874/1/bJHX1fXOV5JskDlz7L8RK_rhUw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:45:f3:6d:f4:d0:cd:a5:db:73:8e:bf:96:74:1d:48:c3:2d:
68:ac:3e:18:39:77:af:b3:4e:77:07:2e:2a:d4:07:88:fc:fc:
2d:44:1e:d2:f0:64:37:c6:71:a8:44:58:a0:cc:e5:18:57:01:
ed:fe:97:b6:6c:5e:45:d7:83:e3:f4:52:39:99:a8:7a:51:fd:
2a:57:29:c7:44:27:a9:b3:07:95:94:e9:64:85:3d:52:6d:86:
dc:0c:d4:74:bd:12:dd:29:fd:85:2d:8c:13:c9:ff:a0:fe:51:
88:5f:20:36:f5:6b:c7:8c:9d:47:f3:6b:4a:32:03:9f:cf:22:
f2:62:8c:7f:67:76:16:e5:cc:ca:59:84:2e:ae:71:98:65:d9:
8c:06:76:a2:28:4b:72:37:50:c3:39:61:01:6b:03:eb:fa:25:
4b:3c:e0:37:17:63:4c:b0:a0:6d:45:80:9a:79:83:5d:46:86:
3d:7f:de:51:16:f7:30:fa:bb:b5:9e:0d:b3:02:23:ff:f0:99:
4e:90:2c:fa:e3:83:15:70:42:fe:b1:e5:72:aa:e7:bd:9d:86:
a9:32:a7:aa:37:f8:33:df:4b:c4:89:86:1e:0b:01:53:7c:89:
16:02:ad:4f:b0:ce:4f:7f:64:5a:c7:9c:5b:aa:5c:12:2f:09:
e8:ee:3e:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 05:18:47 2025 by rpki-client