Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/336ddd-3833-4bb0-8668-9af7d2b59a4c/1/bpTN6pNlYSrfdhEURmglSziPphI.mft
File: bpTN6pNlYSrfdhEURmglSziPphI.mft (raw, json)
Hash identifier: lVr7pa/QrTwUcpGe+KjSuuIkd5T3HSddYPRdiUwNFpY=
Subject key identifier: A1:58:6D:83:D6:3E:63:D8:D6:38:90:20:F1:51:D1:48:5C:84:E8:47
Authority key identifier: 6E:94:CD:EA:93:65:61:2A:DF:76:11:14:46:68:25:4B:38:8F:A6:12
Certificate issuer: /CN=6e94cdea9365612adf7611144668254b388fa612
Certificate serial: 0197B6D7BACFB6500DFEE2BA16A83273AF42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bpTN6pNlYSrfdhEURmglSziPphI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/336ddd-3833-4bb0-8668-9af7d2b59a4c/1/bpTN6pNlYSrfdhEURmglSziPphI.mft
Manifest number: 1544
Signing time: Sat 28 Jun 2025 14:01:20 +0000
Manifest this update: Sat 28 Jun 2025 14:01:20 +0000
Manifest next update: Sun 29 Jun 2025 14:01:20 +0000
Files and hashes: 1: EISyMOnc-5eOjKIrD9k72tY8RJc.roa (hash: NvuPqYNjAsbNaJVzrvYdoO9D6Yxanaqgvz+JVlXSpwM=)
2: bpTN6pNlYSrfdhEURmglSziPphI.crl (hash: OkWCPTry8DKxt/wMGNqa2H2KMeDgvELx8+NVn7fu+2Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/336ddd-3833-4bb0-8668-9af7d2b59a4c/1/bpTN6pNlYSrfdhEURmglSziPphI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/336ddd-3833-4bb0-8668-9af7d2b59a4c/1/bpTN6pNlYSrfdhEURmglSziPphI.mft
rsync://rpki.ripe.net/repository/DEFAULT/bpTN6pNlYSrfdhEURmglSziPphI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:ba:cf:b6:50:0d:fe:e2:ba:16:a8:32:73:af:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e94cdea9365612adf7611144668254b388fa612
Validity
Not Before: Jun 28 14:01:20 2025 GMT
Not After : Jun 29 14:01:20 2025 GMT
Subject: CN=a1586d83d63e63d8d6389020f151d1485c84e847
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:40:3d:19:1f:5c:e4:dd:cc:a2:c1:a3:8f:b1:
2a:50:3f:47:a3:3f:14:7c:ed:e1:45:15:44:5a:7b:
1d:d7:3a:97:5c:82:2b:ff:87:be:f9:d6:f7:b4:03:
8a:cc:cd:a5:1e:26:8f:b6:99:be:eb:cf:fb:96:8d:
b5:c6:3c:63:4f:0c:bb:5d:28:bb:fe:4d:4c:ee:fe:
a4:b3:93:a7:ad:9b:f7:45:68:91:a6:6d:51:00:69:
98:05:0f:7a:ae:35:70:0c:fc:d6:98:88:25:62:0b:
6c:aa:24:ca:12:e8:73:0a:a3:d7:6f:db:20:cf:25:
07:6c:67:a0:cf:b4:10:fb:59:61:ca:97:ea:c3:8d:
5b:82:8e:24:ac:3e:b1:74:b5:69:6f:42:62:46:3e:
47:e7:3f:53:97:1c:39:82:54:b2:66:85:a0:74:a9:
c5:53:fd:e1:2a:e5:ff:37:72:7c:e7:82:8a:ab:c7:
39:76:de:5a:7f:2e:88:a0:51:7b:37:66:54:08:18:
51:d3:a4:35:18:92:d5:14:7b:af:66:0b:18:e8:5d:
c5:a5:48:23:fa:e9:17:2b:61:de:c8:21:f0:95:ad:
4c:7d:19:86:8c:e2:d9:c5:48:03:1d:73:72:fa:e6:
11:b7:1c:0d:27:97:1f:8e:5b:9d:43:86:21:70:ae:
64:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:58:6D:83:D6:3E:63:D8:D6:38:90:20:F1:51:D1:48:5C:84:E8:47
X509v3 Authority Key Identifier:
keyid:6E:94:CD:EA:93:65:61:2A:DF:76:11:14:46:68:25:4B:38:8F:A6:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bpTN6pNlYSrfdhEURmglSziPphI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/336ddd-3833-4bb0-8668-9af7d2b59a4c/1/bpTN6pNlYSrfdhEURmglSziPphI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/336ddd-3833-4bb0-8668-9af7d2b59a4c/1/bpTN6pNlYSrfdhEURmglSziPphI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:b0:58:6c:9a:b6:99:59:75:6f:39:ec:3f:3e:06:72:d9:41:
66:25:76:9a:ec:fd:99:8d:a6:13:4a:88:c4:97:39:ed:f1:06:
33:9c:8a:9d:8f:6b:bd:a4:53:97:6b:0a:c7:33:5c:66:71:71:
60:e9:cc:97:1a:08:87:df:49:d5:ad:09:15:af:67:0e:24:15:
2a:41:90:f1:28:14:bb:3f:3e:6e:7a:d5:fe:d8:09:f0:56:8a:
62:42:9d:ec:ff:95:c3:02:cd:2e:1b:fc:be:5d:06:77:bc:fc:
56:ce:79:02:b1:20:1b:7c:3e:67:ec:7b:e4:52:bc:c9:05:dc:
94:de:00:b1:14:16:30:7f:5a:d5:53:21:20:36:f8:74:75:e2:
35:48:92:30:06:8b:74:c7:b0:ae:96:a2:2a:8e:9f:48:d9:2c:
8d:b3:d2:fe:70:2f:93:82:56:ac:bb:c4:37:b4:e6:38:16:f2:
9b:af:5a:12:bc:c1:58:ae:de:87:09:3e:60:3c:82:3c:e6:12:
12:54:ba:94:f2:c0:62:20:d9:57:46:f4:98:a5:75:f0:68:d0:
1a:ee:82:61:10:75:3f:29:d7:ba:0a:19:81:82:b5:5d:6b:74:
9c:9a:fa:9e:06:66:ba:2c:04:de:ed:47:f0:c5:c3:e4:31:67:
38:65:79:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:27:01 2025 by rpki-client