Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/29cb2e-4680-4a36-b0a5-985182001e92/1/Bn3PV3ZU3KF6YQua9PLKdCHcu4E.mft
File: Bn3PV3ZU3KF6YQua9PLKdCHcu4E.mft (raw, json)
Hash identifier: k1a6gAwznYN98mxtDc2LKZmJYBqycvQ78kBWsCzVD1s=
Subject key identifier: 79:F2:A4:23:CE:95:55:31:52:6C:AC:3C:33:81:4F:E8:83:0E:18:00
Authority key identifier: 06:7D:CF:57:76:54:DC:A1:7A:61:0B:9A:F4:F2:CA:74:21:DC:BB:81
Certificate issuer: /CN=067dcf577654dca17a610b9af4f2ca7421dcbb81
Certificate serial: 0197B632D2BC5F1BD708F1124D281D0C9AEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bn3PV3ZU3KF6YQua9PLKdCHcu4E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/29cb2e-4680-4a36-b0a5-985182001e92/1/Bn3PV3ZU3KF6YQua9PLKdCHcu4E.mft
Manifest number: 1143
Signing time: Sat 28 Jun 2025 11:01:13 +0000
Manifest this update: Sat 28 Jun 2025 11:01:13 +0000
Manifest next update: Sun 29 Jun 2025 11:01:13 +0000
Files and hashes: 1: 1GqtXlpLHOQrMWA32pTa86lAWYQ.roa (hash: tnU3CSzBIjcvcUTrt2DgQBxjNJjtnLH3C2y91tIJFC8=)
2: Bn3PV3ZU3KF6YQua9PLKdCHcu4E.crl (hash: 1KIyh2jtWNCAE+zZbVR83uTjHgi1lTx8Al9Ek1H0db8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/29cb2e-4680-4a36-b0a5-985182001e92/1/Bn3PV3ZU3KF6YQua9PLKdCHcu4E.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/29cb2e-4680-4a36-b0a5-985182001e92/1/Bn3PV3ZU3KF6YQua9PLKdCHcu4E.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bn3PV3ZU3KF6YQua9PLKdCHcu4E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 11:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:d2:bc:5f:1b:d7:08:f1:12:4d:28:1d:0c:9a:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=067dcf577654dca17a610b9af4f2ca7421dcbb81
Validity
Not Before: Jun 28 11:01:13 2025 GMT
Not After : Jun 29 11:01:13 2025 GMT
Subject: CN=79f2a423ce955531526cac3c33814fe8830e1800
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c8:1d:7f:00:cc:27:1d:c8:23:58:a2:6d:3e:
81:51:c0:13:b9:87:84:ad:9d:4b:0b:8b:13:e5:97:
bf:3e:cb:d0:d7:8a:77:bf:2b:1f:69:34:a7:dd:b3:
ae:1c:8f:9f:66:d8:1c:34:8f:db:3d:fe:57:4b:09:
40:bb:6f:2f:c8:df:ce:80:1b:a5:6e:cd:3f:4d:e5:
cc:37:9f:a2:c9:da:b2:d6:a1:47:de:44:b3:70:5b:
54:f5:79:8f:ba:94:04:fc:90:8e:5b:64:2b:2e:24:
df:1d:54:65:f2:87:b7:a5:c2:e8:6e:6b:73:e9:43:
08:b5:d4:a0:3d:82:50:ad:8c:a6:d1:de:5f:41:ca:
31:f6:e4:2f:13:7e:fe:d6:d4:ab:1e:bd:bb:b8:c4:
51:05:19:82:73:30:be:7f:92:56:26:5b:b1:8c:24:
64:29:cf:ae:df:75:55:ac:c9:40:e9:61:f8:dc:87:
0d:23:c6:3a:01:79:00:a9:3d:db:ef:6c:a2:19:53:
c9:52:86:b4:c2:92:a6:7e:49:28:82:52:bf:95:8b:
01:2e:cc:11:7d:85:e3:5f:70:ad:b1:04:f5:92:e1:
9b:90:43:3a:ec:4b:48:e8:3e:9c:66:33:78:cf:97:
33:53:a4:fe:0b:ea:19:2a:bb:15:65:d3:59:c4:91:
b6:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:F2:A4:23:CE:95:55:31:52:6C:AC:3C:33:81:4F:E8:83:0E:18:00
X509v3 Authority Key Identifier:
keyid:06:7D:CF:57:76:54:DC:A1:7A:61:0B:9A:F4:F2:CA:74:21:DC:BB:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bn3PV3ZU3KF6YQua9PLKdCHcu4E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/29cb2e-4680-4a36-b0a5-985182001e92/1/Bn3PV3ZU3KF6YQua9PLKdCHcu4E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/29cb2e-4680-4a36-b0a5-985182001e92/1/Bn3PV3ZU3KF6YQua9PLKdCHcu4E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:df:37:0d:95:76:66:d8:dd:b0:ee:51:0d:2f:dd:f1:95:df:
c1:c9:64:38:52:4e:b5:3f:20:c1:10:0a:a6:b0:3f:f3:92:dd:
ec:dd:2d:62:fb:19:62:ea:8e:48:a9:96:fa:ef:c1:d3:8b:10:
9a:3a:ac:9c:40:36:98:86:03:40:76:0a:af:28:05:d2:b1:e4:
f6:c9:76:e1:f8:7d:4b:f9:09:18:58:19:ed:6f:65:1e:e1:a7:
23:88:a8:2c:b3:02:9c:6f:40:b1:67:96:41:26:e7:3c:f0:eb:
41:72:8b:f5:5a:a7:04:f0:e5:d8:d5:2d:c6:1d:b3:36:03:a6:
71:f0:bf:14:d9:56:3b:97:b5:36:13:e3:da:d8:ba:0d:dc:46:
dc:f2:50:00:8b:5a:93:29:3e:56:f5:ad:62:3e:9f:5a:fb:77:
a3:23:fe:8f:19:ac:0a:88:be:52:b2:27:4b:d5:15:31:3f:9f:
4b:2d:65:a5:36:a9:78:46:d7:ff:42:38:ed:17:41:7b:5b:f8:
fd:7b:c9:00:0d:de:cd:6a:33:db:61:8a:f8:e1:db:71:e9:e3:
9a:4a:66:02:b4:9e:20:84:18:b1:37:76:d1:19:44:07:bf:2c:
8c:c5:d0:fa:26:98:0f:00:15:d4:be:9e:43:23:4c:bd:cd:6d:
14:d0:45:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:38:57 2025 by rpki-client