Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/75b06d-6bcb-4b19-aebb-415845dc80fb/1/bmPW0xLWXuTqKNr0OvzIbs7UCA8.mft
File: bmPW0xLWXuTqKNr0OvzIbs7UCA8.mft (raw, json)
Hash identifier: 2m+ItRkLvJ5ZLdVk28dXlSHRdbnr25GX3Miu8MEoygM=
Subject key identifier: FD:1A:A5:7C:5E:36:1F:59:15:B0:B2:12:AA:F0:FC:3F:6D:BE:7F:74
Authority key identifier: 6E:63:D6:D3:12:D6:5E:E4:EA:28:DA:F4:3A:FC:C8:6E:CE:D4:08:0F
Certificate issuer: /CN=6e63d6d312d65ee4ea28daf43afcc86eced4080f
Certificate serial: 0197CA5E57E181AD008ED89CEEB4BF77332C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bmPW0xLWXuTqKNr0OvzIbs7UCA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/75b06d-6bcb-4b19-aebb-415845dc80fb/1/bmPW0xLWXuTqKNr0OvzIbs7UCA8.mft
Manifest number: 04C0
Signing time: Wed 02 Jul 2025 09:01:09 +0000
Manifest this update: Wed 02 Jul 2025 09:01:09 +0000
Manifest next update: Thu 03 Jul 2025 09:01:09 +0000
Files and hashes: 1: bmPW0xLWXuTqKNr0OvzIbs7UCA8.crl (hash: IBdolNfKegu7NJAt1tmOeLf6jNFllxyp56rgjwAgsTE=)
2: r5Tl8FZK_359mQAz5_71c6QsEr4.roa (hash: bw0mkbca6ZCZwDsSt10mqa+pHFhQP/m6hZej8E74Pw8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/75b06d-6bcb-4b19-aebb-415845dc80fb/1/bmPW0xLWXuTqKNr0OvzIbs7UCA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/75b06d-6bcb-4b19-aebb-415845dc80fb/1/bmPW0xLWXuTqKNr0OvzIbs7UCA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/bmPW0xLWXuTqKNr0OvzIbs7UCA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ca:5e:57:e1:81:ad:00:8e:d8:9c:ee:b4:bf:77:33:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e63d6d312d65ee4ea28daf43afcc86eced4080f
Validity
Not Before: Jul 2 09:01:09 2025 GMT
Not After : Jul 3 09:01:09 2025 GMT
Subject: CN=fd1aa57c5e361f5915b0b212aaf0fc3f6dbe7f74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:cd:44:92:d4:c7:df:d3:55:1b:e3:bc:6b:05:
96:a9:43:dc:13:3d:92:e9:03:2c:cc:0f:b3:11:e7:
ac:06:1d:38:d4:4e:4a:4a:d7:67:6e:3b:55:8d:6f:
5d:e0:54:3a:89:ab:fd:69:f3:79:02:c6:ee:94:01:
db:f7:82:29:d3:82:f7:2d:d9:72:9b:26:4b:38:72:
e6:8b:ac:4b:80:70:9f:03:49:b2:89:2e:63:c0:c1:
67:35:80:ef:6c:41:ee:c6:cb:62:a6:28:7d:f6:6e:
1f:35:59:85:43:b9:35:65:4a:63:83:ca:bd:77:67:
ba:b6:f7:d6:dc:f3:89:77:6d:3c:f0:e1:6f:4d:f0:
27:a4:fe:ae:97:97:28:a3:4d:9d:7c:3c:c8:05:59:
0d:1c:8e:09:56:b8:bc:65:bc:7c:93:86:2e:1d:46:
c8:75:07:bf:05:36:7f:62:e3:2b:4a:61:f7:97:cf:
85:ad:9c:cc:bc:fc:5f:2f:ec:e9:5e:9e:75:ca:bb:
a6:52:68:e3:bf:cf:57:1e:4f:ec:2c:bf:36:d5:4c:
bf:49:07:0e:8e:f9:15:05:6b:8b:a5:bf:d7:60:f9:
6f:bc:d1:33:c5:d7:41:0b:7a:f6:a0:7d:bb:20:f5:
b7:b4:2b:03:41:ac:3d:36:c4:31:6c:be:16:22:64:
3d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:1A:A5:7C:5E:36:1F:59:15:B0:B2:12:AA:F0:FC:3F:6D:BE:7F:74
X509v3 Authority Key Identifier:
keyid:6E:63:D6:D3:12:D6:5E:E4:EA:28:DA:F4:3A:FC:C8:6E:CE:D4:08:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bmPW0xLWXuTqKNr0OvzIbs7UCA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/75b06d-6bcb-4b19-aebb-415845dc80fb/1/bmPW0xLWXuTqKNr0OvzIbs7UCA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/75b06d-6bcb-4b19-aebb-415845dc80fb/1/bmPW0xLWXuTqKNr0OvzIbs7UCA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:4c:04:4b:23:e1:4c:bd:0d:3d:b7:88:0a:e5:c4:32:ab:22:
1b:c4:23:e0:96:97:a9:86:81:d0:cb:b4:b6:79:62:b8:b9:a9:
69:54:1e:6b:9e:19:ff:4f:88:db:0a:8e:99:ec:08:61:d7:42:
bd:d2:6f:16:14:ae:66:7c:f4:cd:12:39:c1:11:f0:1f:97:ec:
94:c2:de:d0:91:f9:62:fd:4d:2e:8a:40:8c:df:5b:1d:5d:0f:
d7:3b:98:e5:ed:93:cc:21:1c:8e:0d:7f:28:af:34:dd:0e:ef:
5e:33:55:65:98:3d:26:66:fc:70:8a:8c:3a:bd:19:d7:0b:ba:
fe:81:d1:e5:22:dd:7c:04:ca:0a:8a:72:27:f0:95:76:ba:50:
1d:20:b1:91:7f:16:67:1e:15:1a:cc:ab:1c:1d:fc:21:37:4d:
5e:ad:1b:ed:dd:f4:de:c1:a2:64:28:af:74:17:6b:2e:41:45:
eb:4b:31:8b:e7:10:6e:9d:3b:10:51:60:03:ce:1c:61:6c:6a:
1d:da:60:a7:10:eb:73:fa:b0:3d:b7:21:8d:bc:bd:9e:7d:f2:
f7:c3:fb:d3:86:65:75:b9:4e:f6:ae:d2:fa:03:9f:bc:14:52:
63:79:23:0e:be:e2:07:da:81:2b:33:2a:0b:b2:73:b2:c0:ac:
75:91:f6:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 11:44:44 2025 by rpki-client