Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/ebf169-be17-4ce9-9275-081786ab0748/1/bchbZ4jkUMBUE0row2V0iyP3Qmc.mft
File: bchbZ4jkUMBUE0row2V0iyP3Qmc.mft (raw, json)
Hash identifier: lvBSuIMKVTR3+50IaRQ2Zy5BKJKuAgMqyOzmiglGabg=
Subject key identifier: A4:93:4A:4C:25:50:16:16:9B:F5:62:6B:51:61:DE:DA:34:62:C7:61
Authority key identifier: 6D:C8:5B:67:88:E4:50:C0:54:13:4A:E8:C3:65:74:8B:23:F7:42:67
Certificate issuer: /CN=6dc85b6788e450c054134ae8c365748b23f74267
Certificate serial: 0197B6D79D4AAED2B4883825F2DE7C793116
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bchbZ4jkUMBUE0row2V0iyP3Qmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/ebf169-be17-4ce9-9275-081786ab0748/1/bchbZ4jkUMBUE0row2V0iyP3Qmc.mft
Manifest number: 072F
Signing time: Sat 28 Jun 2025 14:01:13 +0000
Manifest this update: Sat 28 Jun 2025 14:01:13 +0000
Manifest next update: Sun 29 Jun 2025 14:01:13 +0000
Files and hashes: 1: HuuruuJUnyizGG7iC01ujDUd5zE.roa (hash: zJUuXbnFQXiP5Cz81qdrVSNYrr0dHAG+T0ZkZ/sUgdY=)
2: bchbZ4jkUMBUE0row2V0iyP3Qmc.crl (hash: nB1zqUC1fRN9mz2tsDhultoQuHR6uA2gtzaWqCdME0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/ebf169-be17-4ce9-9275-081786ab0748/1/bchbZ4jkUMBUE0row2V0iyP3Qmc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/ebf169-be17-4ce9-9275-081786ab0748/1/bchbZ4jkUMBUE0row2V0iyP3Qmc.mft
rsync://rpki.ripe.net/repository/DEFAULT/bchbZ4jkUMBUE0row2V0iyP3Qmc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:9d:4a:ae:d2:b4:88:38:25:f2:de:7c:79:31:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dc85b6788e450c054134ae8c365748b23f74267
Validity
Not Before: Jun 28 14:01:13 2025 GMT
Not After : Jun 29 14:01:13 2025 GMT
Subject: CN=a4934a4c255016169bf5626b5161deda3462c761
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:54:a9:1b:05:5d:b0:42:f0:bf:a9:f1:e5:48:
7b:25:60:c4:6f:62:e2:2b:3d:c0:ff:16:ac:ed:9b:
8f:23:2c:bd:4a:0f:9c:d5:35:db:76:69:5d:a9:72:
3c:14:15:19:b5:f0:dc:60:da:54:d3:f0:8a:51:86:
81:39:32:8f:e8:19:0d:ba:3b:f8:ff:e1:21:f2:ad:
46:5a:7b:e3:6a:4e:25:00:25:86:71:bf:49:70:ab:
59:99:29:70:b5:ca:56:02:85:1c:a7:da:8b:e0:7f:
82:93:fa:b8:12:f5:00:fe:2d:68:f9:52:0b:76:f2:
52:dd:c5:8a:32:85:1c:e5:14:44:5b:9b:d5:78:4e:
11:01:e4:8f:59:03:be:41:8a:c6:f9:9f:ee:3b:3c:
67:15:9c:17:b1:9f:1f:97:ca:95:14:41:c0:61:a4:
2a:78:fd:f4:83:ec:87:f9:b0:88:a4:e1:72:9c:59:
1f:f0:be:35:6c:cf:b1:b1:d4:ad:73:80:99:ba:de:
4d:32:fc:ca:de:97:3c:55:ae:0c:75:83:0a:a2:c3:
81:6b:7a:65:24:cd:b1:f1:61:65:62:4c:3a:1b:ec:
24:f6:84:a1:81:ed:c0:0f:a1:32:c3:c5:be:0d:2e:
03:ec:77:5a:35:60:12:f0:2b:a7:ae:f0:c0:d7:b5:
bd:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:93:4A:4C:25:50:16:16:9B:F5:62:6B:51:61:DE:DA:34:62:C7:61
X509v3 Authority Key Identifier:
keyid:6D:C8:5B:67:88:E4:50:C0:54:13:4A:E8:C3:65:74:8B:23:F7:42:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bchbZ4jkUMBUE0row2V0iyP3Qmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ebf169-be17-4ce9-9275-081786ab0748/1/bchbZ4jkUMBUE0row2V0iyP3Qmc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ebf169-be17-4ce9-9275-081786ab0748/1/bchbZ4jkUMBUE0row2V0iyP3Qmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:3b:10:7f:0f:fe:df:93:68:69:ba:44:a9:57:dd:77:82:12:
ca:40:58:45:33:94:a3:7b:2b:8f:c3:8a:50:bd:69:73:81:03:
d9:8b:3d:18:5e:eb:da:2d:9f:41:c9:4c:dd:26:a8:97:b8:98:
1c:0f:04:c3:dd:50:a2:e4:25:da:ef:98:5b:88:f8:30:19:03:
f0:37:e1:1a:86:32:67:09:f0:78:18:2d:00:9f:95:d5:6c:a8:
0d:0f:87:46:4b:3e:5a:f7:93:a1:c2:86:0a:e4:1a:47:ff:7c:
45:e2:72:c7:f8:78:85:f2:fb:52:8f:e7:0f:ce:05:a1:90:31:
56:ad:a2:66:48:56:e7:48:5e:31:69:98:11:99:4e:a2:03:5d:
f3:e4:7c:8a:84:34:4c:9f:35:cc:f1:46:18:b4:0c:89:38:76:
15:54:51:97:33:65:e5:c5:82:2d:36:02:64:8d:46:77:f4:a8:
00:cb:e3:0a:4f:96:39:ca:4f:f9:96:7e:44:c7:65:62:c8:c4:
e1:1a:f9:3d:d9:73:de:48:1e:3e:13:58:c7:74:14:fe:21:37:
fa:72:5e:21:4f:5f:1b:6d:9c:4a:53:5d:e1:91:c7:43:18:e7:
dc:ac:a1:1c:97:00:47:78:0a:59:56:ba:12:20:c0:af:df:b4:
83:ac:f0:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:06:06 2025 by rpki-client