Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.mft
File: bFN3u52kHKoRdvQyJi3KqZxHb5o.mft (raw, json)
Hash identifier: m2Dv6CQLZMzPVsReYFO6TGZ/9VAdu0jyifSaePUOO+Y=
Subject key identifier: 0E:04:09:52:A8:23:C6:08:34:69:BA:B3:E2:BD:41:7F:D3:D2:20:DE
Authority key identifier: 6C:53:77:BB:9D:A4:1C:AA:11:76:F4:32:26:2D:CA:A9:9C:47:6F:9A
Certificate issuer: /CN=6c5377bb9da41caa1176f432262dcaa99c476f9a
Certificate serial: 0197B8FCB3DE801F6F55A596A5EA315FCF29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bFN3u52kHKoRdvQyJi3KqZxHb5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.mft
Manifest number: 0724
Signing time: Sun 29 Jun 2025 00:00:58 +0000
Manifest this update: Sun 29 Jun 2025 00:00:58 +0000
Manifest next update: Mon 30 Jun 2025 00:00:58 +0000
Files and hashes: 1: 02ZPMrkxrv9TSRNG7JSudAlDYd8.roa (hash: 1pjHbb+bmeJiA9CJ5xGCBjxXea42uVA7wH4sLUyonyA=)
2: 3L6JAHHrLKqNS5i1HV40c9xyyEM.roa (hash: qyyZT9D9IGcDrviVnxZxLdBd6LOM1Me+aqwZJ6D1tPM=)
3: bFN3u52kHKoRdvQyJi3KqZxHb5o.crl (hash: n4z8IPXzT0kHZLEop5s9NfSl/Q2Huh/aFcJegi9/tvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/bFN3u52kHKoRdvQyJi3KqZxHb5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:fc:b3:de:80:1f:6f:55:a5:96:a5:ea:31:5f:cf:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c5377bb9da41caa1176f432262dcaa99c476f9a
Validity
Not Before: Jun 29 00:00:58 2025 GMT
Not After : Jun 30 00:00:58 2025 GMT
Subject: CN=0e040952a823c6083469bab3e2bd417fd3d220de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:9f:22:a1:87:a1:cf:ee:d2:3a:49:cb:42:56:
08:86:6c:88:bb:70:66:0d:36:0c:a5:fb:84:0b:0b:
47:63:4f:d5:f7:d3:0f:04:1a:73:e2:87:d3:7d:4b:
87:49:52:48:a0:ec:9e:8e:88:b6:58:d0:35:47:02:
c9:ee:ea:2f:14:da:e2:10:9e:3b:fc:10:4e:fd:09:
1b:ad:c7:78:52:db:7a:e0:1a:68:b7:8d:e5:b9:05:
e2:c4:cc:eb:c6:ce:0f:fd:25:a4:dc:c1:a4:0f:6b:
80:1f:28:9a:26:92:7b:ff:55:9c:70:27:65:e9:34:
c2:05:c4:fd:3f:d2:11:8b:3d:6c:ca:1f:34:8b:c9:
35:ba:99:dc:62:7e:b2:cc:80:e1:d9:c6:ac:f8:e4:
a3:66:67:29:b3:18:c7:26:e5:24:29:82:c4:84:be:
96:cb:49:ab:f6:88:cc:7e:de:c4:a6:22:91:1b:00:
69:a7:80:a8:1b:be:0f:31:f7:36:18:7c:f8:75:8b:
8b:1b:d8:25:6a:a4:73:a4:2f:bd:01:ee:2e:90:c3:
49:a7:ed:d4:b0:e0:3d:b3:2b:10:f7:f6:ff:dc:7f:
f4:64:c6:67:81:42:5b:00:99:d6:75:eb:6b:79:2d:
17:c4:e3:d7:b0:86:dd:fd:75:5e:81:28:e3:f6:38:
2f:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:04:09:52:A8:23:C6:08:34:69:BA:B3:E2:BD:41:7F:D3:D2:20:DE
X509v3 Authority Key Identifier:
keyid:6C:53:77:BB:9D:A4:1C:AA:11:76:F4:32:26:2D:CA:A9:9C:47:6F:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bFN3u52kHKoRdvQyJi3KqZxHb5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/9b19b5-43bb-4744-93cb-6ed10ebb933f/1/bFN3u52kHKoRdvQyJi3KqZxHb5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:43:80:bb:0c:78:0f:59:18:18:9b:f9:56:da:ea:9f:dd:ce:
9b:91:90:95:c5:9a:4f:d4:90:33:da:a2:e7:0d:97:34:d5:21:
ae:fa:a7:af:c5:70:fb:91:f8:40:7d:c9:ff:0c:ef:c9:13:e0:
ec:cd:15:73:ea:0b:ad:fb:1d:c3:7a:38:1f:1b:89:9e:18:4e:
83:13:35:6e:73:41:12:ee:e1:e5:d4:da:13:07:3e:f3:aa:9a:
67:ae:0b:f4:f8:5c:a3:ab:2b:ea:06:52:c0:e7:c9:a4:66:13:
a8:b6:99:80:ad:d3:03:ae:21:99:18:03:3c:f2:5d:6d:02:e0:
c2:b0:28:83:11:d7:54:6c:c3:cd:7b:4e:e0:47:6b:dc:33:94:
62:f0:08:cb:c0:ab:83:9b:43:e3:24:20:9e:8f:98:ba:fa:58:
13:d7:1b:05:36:76:bd:83:6e:4d:64:93:cb:2e:df:bd:6a:da:
97:20:5b:4a:e1:f5:15:6c:0e:f8:1e:cf:08:79:08:c0:5a:99:
e8:f1:3c:5d:5c:88:d1:69:11:98:65:61:d7:2c:43:2d:a8:4d:
77:15:83:25:bb:6b:0c:2e:cd:1e:bd:a3:b3:f4:bd:c9:b6:40:
ea:ab:5e:b4:b5:a3:26:71:71:d9:33:50:79:1e:b7:7c:e6:f9:
8e:e6:2f:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:34:49 2025 by rpki-client