Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.mft
File: bRULQ4zGj2LcFdNZWTFh95neU68.mft (raw, json)
Hash identifier: VIi1nMl6Qdhg6eo4QM2/ss2c9kuLimEfQaLAk2TEhJI=
Subject key identifier: 37:10:FF:FF:03:F5:DD:0D:62:5B:E8:E8:66:FC:EE:2C:AC:A9:CE:1D
Authority key identifier: 6D:15:0B:43:8C:C6:8F:62:DC:15:D3:59:59:31:61:F7:99:DE:53:AF
Certificate issuer: /CN=6d150b438cc68f62dc15d359593161f799de53af
Certificate serial: 0197B8210E716C31216ED99D49F3ABF56379
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bRULQ4zGj2LcFdNZWTFh95neU68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.mft
Manifest number: 15BB
Signing time: Sat 28 Jun 2025 20:01:03 +0000
Manifest this update: Sat 28 Jun 2025 20:01:03 +0000
Manifest next update: Sun 29 Jun 2025 20:01:03 +0000
Files and hashes: 1: bRULQ4zGj2LcFdNZWTFh95neU68.crl (hash: pghpN0u+KiCqEH1e6DBIq+C/Z4EHO9RnGio7d2AOH5s=)
2: eOJh9jPF2rg62QTnhjhlK1Lrg1w.roa (hash: r7IjyXmhMKmvdhLF1sofBUJOM+GxOvLawDA1jM5V0lA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.mft
rsync://rpki.ripe.net/repository/DEFAULT/bRULQ4zGj2LcFdNZWTFh95neU68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:0e:71:6c:31:21:6e:d9:9d:49:f3:ab:f5:63:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d150b438cc68f62dc15d359593161f799de53af
Validity
Not Before: Jun 28 20:01:03 2025 GMT
Not After : Jun 29 20:01:03 2025 GMT
Subject: CN=3710ffff03f5dd0d625be8e866fcee2caca9ce1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:04:a2:be:f1:d2:9b:2d:3a:e8:ba:c4:0f:c3:
52:8e:11:a6:a6:23:24:d2:e5:7d:68:f1:de:95:9c:
40:ed:56:44:9d:35:f4:cf:9c:6c:4c:0f:ea:0b:2e:
7b:9d:d2:3e:5d:b2:df:32:0e:b9:cc:c1:94:dd:a8:
5b:cb:c2:a6:aa:66:38:e4:d9:d5:9c:53:c5:5b:40:
45:a3:75:c9:7a:b9:df:9b:32:6e:6a:71:6d:ac:c5:
69:b1:8b:e2:6c:e1:75:9b:a0:00:7e:3a:33:27:19:
cf:87:24:64:48:69:60:b8:12:d1:81:51:78:0f:c3:
d2:47:14:65:d3:69:2a:8a:f2:f3:32:a7:ad:84:ff:
05:10:da:39:9f:d0:88:26:06:1b:e9:33:3a:42:a9:
94:ed:42:c1:a0:d1:91:ec:d6:98:4b:68:94:0d:e9:
6c:64:2a:51:59:24:7f:23:f7:9b:30:34:28:9d:c8:
6e:fd:1b:c5:a0:b6:75:0f:ff:38:c2:d3:bf:a2:7b:
27:b2:3c:f0:04:7b:0f:76:bf:42:59:b4:72:da:24:
71:07:9b:90:ca:08:e5:3f:03:52:67:37:a9:bd:ed:
ee:ec:05:96:9b:2b:fc:b6:6c:c1:a0:54:dd:42:41:
f1:29:8b:80:0a:51:5c:fe:eb:cf:9a:0f:80:b8:4c:
d3:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:10:FF:FF:03:F5:DD:0D:62:5B:E8:E8:66:FC:EE:2C:AC:A9:CE:1D
X509v3 Authority Key Identifier:
keyid:6D:15:0B:43:8C:C6:8F:62:DC:15:D3:59:59:31:61:F7:99:DE:53:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bRULQ4zGj2LcFdNZWTFh95neU68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/2fa86f-7f4e-4aab-9dfd-1b3d98bef1e9/1/bRULQ4zGj2LcFdNZWTFh95neU68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:12:02:cc:68:8d:db:33:98:29:cc:8b:47:28:94:4f:34:9c:
09:f8:30:85:40:37:96:d3:45:7c:86:e1:9f:00:67:57:52:b0:
fb:7f:e4:6a:7d:12:ff:10:2c:ab:b3:86:6c:b7:d9:36:53:1b:
2c:ff:57:ea:89:92:5c:a4:c1:74:ff:9a:4a:84:4e:d4:24:99:
b0:c3:9e:9a:92:44:67:85:fe:f7:c8:4c:8e:0a:cb:5d:c7:25:
8d:99:b0:a4:1d:c8:bb:be:c8:f3:46:69:87:f6:ed:d2:35:11:
c0:89:d6:f5:7b:fa:27:ea:fc:51:b7:6e:9c:77:18:4f:81:a9:
7c:e6:73:1b:bc:16:5c:92:43:41:da:3a:3e:2f:7f:60:30:b3:
2a:d3:6a:0a:1a:d2:aa:c0:a4:83:4a:1e:d9:e7:35:2f:b5:2f:
b5:14:29:2d:f6:e2:a9:0b:bc:e8:8d:69:13:92:03:db:e8:79:
2e:c8:dd:ea:7e:a9:05:94:b2:62:25:2c:ce:28:93:f3:59:b8:
39:c7:ef:d9:bf:27:be:ff:b4:9b:9a:72:1f:cd:b5:89:e3:2e:
df:1f:8c:ff:78:18:25:a9:ac:5f:2d:e1:14:be:db:b2:1a:dd:
86:fa:6c:ac:83:ee:ab:f6:9b:89:aa:f5:9c:4f:ad:82:f3:38:
ba:b5:bc:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:40:27 2025 by rpki-client