Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/11a9ba-9d0e-4c44-ada4-4be127fa3118/1/bwyaERer1S7IA2tPN4ZE-nekuKc.mft
File: bwyaERer1S7IA2tPN4ZE-nekuKc.mft (raw, json)
Hash identifier: a+1euWDbElVIlLJ2h9hhRe0lFvd5QbCdDtlGgq6ppQw=
Subject key identifier: 4C:C7:FF:8C:29:DF:3C:B4:93:9B:52:94:AF:43:CB:64:36:23:81:DB
Authority key identifier: 6F:0C:9A:11:17:AB:D5:2E:C8:03:6B:4F:37:86:44:FA:77:A4:B8:A7
Certificate issuer: /CN=6f0c9a1117abd52ec8036b4f378644fa77a4b8a7
Certificate serial: 0197B77C053A222BDDDFDF80135A0FCC5949
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bwyaERer1S7IA2tPN4ZE-nekuKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/11a9ba-9d0e-4c44-ada4-4be127fa3118/1/bwyaERer1S7IA2tPN4ZE-nekuKc.mft
Manifest number: 069C
Signing time: Sat 28 Jun 2025 17:00:47 +0000
Manifest this update: Sat 28 Jun 2025 17:00:47 +0000
Manifest next update: Sun 29 Jun 2025 17:00:47 +0000
Files and hashes: 1: 5YbQ1lEYRu1FDVmUe9WtFEdIQq8.roa (hash: LLdAnT3T14ZMA8Ruwq6pBGBMT1LXc953lNErRWyZvjE=)
2: bwyaERer1S7IA2tPN4ZE-nekuKc.crl (hash: VUXqVsvX9lTGAGvGsrsCEcRk21xizo8nJeOo8vJwINA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/11a9ba-9d0e-4c44-ada4-4be127fa3118/1/bwyaERer1S7IA2tPN4ZE-nekuKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/11a9ba-9d0e-4c44-ada4-4be127fa3118/1/bwyaERer1S7IA2tPN4ZE-nekuKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/bwyaERer1S7IA2tPN4ZE-nekuKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:05:3a:22:2b:dd:df:df:80:13:5a:0f:cc:59:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f0c9a1117abd52ec8036b4f378644fa77a4b8a7
Validity
Not Before: Jun 28 17:00:47 2025 GMT
Not After : Jun 29 17:00:47 2025 GMT
Subject: CN=4cc7ff8c29df3cb4939b5294af43cb64362381db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:51:25:8d:11:70:14:6c:4c:1a:c9:20:44:88:
3b:8b:d5:f4:cb:4a:4e:f9:28:17:98:c0:ee:75:d0:
ce:74:62:f8:6d:3b:f3:1b:71:14:83:a1:da:5f:09:
a0:df:e6:e6:54:e2:93:df:86:6c:fd:c1:dc:d7:55:
bd:7a:29:fc:3f:de:c6:f9:52:e8:a8:88:04:93:40:
74:ef:0a:9d:56:2c:ef:8d:dd:ff:62:8e:3d:9a:a5:
42:55:01:e3:82:c5:bf:a5:ca:65:86:88:7a:12:88:
c8:1c:1a:04:3b:aa:13:8a:8f:aa:6a:7a:12:8b:d0:
4e:99:59:49:19:8a:ac:43:c8:f2:0d:21:56:21:2e:
fa:9b:95:92:99:3e:f3:a5:04:a9:d6:f2:af:ac:31:
81:70:b5:ad:3c:f4:b4:f0:2f:00:b2:d4:4d:b4:8e:
f0:43:81:ad:b1:21:c5:8d:f9:64:1e:91:d2:a1:21:
8e:dd:0a:96:1e:93:94:18:e8:19:8f:91:f8:ff:a9:
b0:51:2e:1d:22:19:de:17:9e:35:94:be:1c:ea:6c:
6b:c4:ce:a4:14:26:4c:53:e5:2d:aa:a5:ae:50:85:
9b:89:3a:3a:e7:3a:3c:9e:33:84:fe:ac:9e:db:73:
39:4a:aa:a4:29:24:c3:cc:f5:29:2d:c6:4b:09:cf:
ee:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:C7:FF:8C:29:DF:3C:B4:93:9B:52:94:AF:43:CB:64:36:23:81:DB
X509v3 Authority Key Identifier:
keyid:6F:0C:9A:11:17:AB:D5:2E:C8:03:6B:4F:37:86:44:FA:77:A4:B8:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bwyaERer1S7IA2tPN4ZE-nekuKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/11a9ba-9d0e-4c44-ada4-4be127fa3118/1/bwyaERer1S7IA2tPN4ZE-nekuKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/11a9ba-9d0e-4c44-ada4-4be127fa3118/1/bwyaERer1S7IA2tPN4ZE-nekuKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:52:ab:6c:33:ee:9b:3c:e9:c4:d4:2b:63:b1:4d:f8:c5:5a:
cc:02:53:0a:64:89:8c:f0:c4:3f:4e:94:00:05:c0:a9:8b:15:
2b:e0:43:5c:9d:83:28:14:ec:0e:cb:4a:9e:a2:2f:b9:02:e9:
85:4b:46:d4:da:46:60:b1:50:bf:16:7a:25:a9:23:99:b0:cd:
74:9f:de:3c:75:d5:88:b0:fe:3b:3d:fa:b5:4e:9d:ec:98:90:
52:15:ee:ad:9c:00:22:6b:5c:83:23:ef:47:00:36:07:d3:66:
5c:91:64:cb:86:01:b0:7a:34:42:65:b4:8a:6a:6f:54:ab:8e:
15:63:92:8e:1b:5e:e0:6f:3b:57:16:c5:f6:05:00:68:33:5d:
30:a8:91:92:3a:80:0d:ff:0a:65:bb:57:ae:a6:62:9a:0f:35:
82:f1:93:12:45:6c:9e:85:46:2a:e6:d2:b8:fe:9e:8d:60:b8:
36:e2:3c:3d:70:4c:7c:c0:80:80:d8:85:2a:9e:b9:31:a0:de:
22:dc:38:63:a5:c3:da:5b:4b:9f:88:e9:dc:31:12:14:6f:12:
c8:c2:18:eb:00:cc:43:5a:b4:ac:57:cb:80:5f:de:6a:4a:2f:
da:ad:df:3c:61:5e:6a:49:b5:25:da:ef:bc:e5:1e:f5:ed:ad:
7d:ed:59:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:45:58 2025 by rpki-client