Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/9dfcd5-07d6-4ad8-ad1d-b60fd67997bb/1/B-pSPsf5N3oanl1vqGgX7T1sCoI.mft
File: B-pSPsf5N3oanl1vqGgX7T1sCoI.mft (raw, json)
Hash identifier: SmCm0teNrVcFcbgFQG3glvrqmz9FSdHrmxkhMknK9qU=
Subject key identifier: 2B:E1:F8:0F:F4:B7:3B:7B:4A:8A:C8:78:1C:EC:8F:45:EB:05:14:12
Authority key identifier: 07:EA:52:3E:C7:F9:37:7A:1A:9E:5D:6F:A8:68:17:ED:3D:6C:0A:82
Certificate issuer: /CN=07ea523ec7f9377a1a9e5d6fa86817ed3d6c0a82
Certificate serial: 019776AE6A96F4A9A9C2A5F6E58F4554137F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B-pSPsf5N3oanl1vqGgX7T1sCoI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/9dfcd5-07d6-4ad8-ad1d-b60fd67997bb/1/B-pSPsf5N3oanl1vqGgX7T1sCoI.mft
Manifest number: 1591
Signing time: Mon 16 Jun 2025 03:00:31 +0000
Manifest this update: Mon 16 Jun 2025 03:00:31 +0000
Manifest next update: Tue 17 Jun 2025 03:00:31 +0000
Files and hashes: 1: B-pSPsf5N3oanl1vqGgX7T1sCoI.crl (hash: mD+kDUuxvcpqBNQd0EOlamLwmN16wP+3WBYV9IkE1Nw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/9dfcd5-07d6-4ad8-ad1d-b60fd67997bb/1/B-pSPsf5N3oanl1vqGgX7T1sCoI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/9dfcd5-07d6-4ad8-ad1d-b60fd67997bb/1/B-pSPsf5N3oanl1vqGgX7T1sCoI.mft
rsync://rpki.ripe.net/repository/DEFAULT/B-pSPsf5N3oanl1vqGgX7T1sCoI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 03:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:76:ae:6a:96:f4:a9:a9:c2:a5:f6:e5:8f:45:54:13:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07ea523ec7f9377a1a9e5d6fa86817ed3d6c0a82
Validity
Not Before: Jun 16 03:00:31 2025 GMT
Not After : Jun 17 03:00:31 2025 GMT
Subject: CN=2be1f80ff4b73b7b4a8ac8781cec8f45eb051412
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f4:98:03:be:42:b4:74:ec:1b:2e:58:02:e8:
c2:6c:0c:c5:c5:7a:3d:27:5b:56:60:e4:8b:af:1f:
76:f7:6a:02:16:12:44:84:2c:c1:e4:20:af:d1:7d:
92:90:fc:8b:22:7e:b1:d9:c5:9a:c8:f8:10:1f:b3:
9c:f3:54:5a:ea:21:61:49:4e:0e:93:51:5d:91:2e:
e2:8b:ef:66:f2:e7:f0:4c:25:9c:2f:0b:a2:39:f0:
39:a5:0f:32:df:08:bd:da:bc:43:68:c0:6a:8c:57:
7e:ef:00:c1:e3:4e:dd:b8:65:15:45:02:2d:6a:e4:
fe:69:c5:53:28:9d:9f:75:41:35:a5:cf:4b:2c:c8:
5a:f7:0d:0e:35:fe:77:82:91:80:89:4e:0d:7e:92:
c4:4f:c7:53:9b:cf:43:bd:1f:5c:99:3f:9e:cd:9b:
2b:8d:31:0a:7e:b8:9e:9a:02:b6:8f:a9:81:cb:e4:
62:44:b2:91:69:bb:d1:4c:d7:5b:d7:bc:fb:fe:eb:
17:64:d8:e9:cf:d4:8b:8d:10:8e:ef:4c:ff:e3:c1:
b5:92:38:d1:a5:dd:aa:ba:98:07:e4:29:0e:d1:09:
bf:42:bc:63:00:31:50:ab:db:46:be:62:59:bc:b6:
80:ce:a4:7e:57:e0:c5:5b:7e:29:cf:c5:29:e2:62:
99:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:E1:F8:0F:F4:B7:3B:7B:4A:8A:C8:78:1C:EC:8F:45:EB:05:14:12
X509v3 Authority Key Identifier:
keyid:07:EA:52:3E:C7:F9:37:7A:1A:9E:5D:6F:A8:68:17:ED:3D:6C:0A:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B-pSPsf5N3oanl1vqGgX7T1sCoI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9dfcd5-07d6-4ad8-ad1d-b60fd67997bb/1/B-pSPsf5N3oanl1vqGgX7T1sCoI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9dfcd5-07d6-4ad8-ad1d-b60fd67997bb/1/B-pSPsf5N3oanl1vqGgX7T1sCoI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:2c:bf:3d:a0:8b:2f:24:b5:49:6f:b1:ac:ba:c1:57:96:be:
f0:3e:24:8b:5e:30:4e:7d:80:3b:80:c5:12:cd:09:85:32:0b:
a1:d8:39:f0:8a:9f:f4:f9:b0:53:f1:3c:e7:50:b0:ea:a6:10:
fa:56:87:19:42:6a:79:85:31:64:2e:da:ce:18:39:40:ee:2c:
b5:51:58:dc:25:11:cf:fe:b6:27:c1:48:b4:89:dd:0e:f1:ac:
5d:8c:8a:06:61:1d:26:8c:2d:dc:f4:ba:41:1d:e8:a9:6a:d6:
81:f5:f9:e2:b5:c2:af:89:37:dc:c6:9d:9e:16:9b:7b:de:23:
f0:bb:5c:68:a5:56:ec:74:ab:7b:48:c8:e5:c8:21:99:d4:2e:
23:4a:b2:c5:a8:71:05:5c:6c:63:52:ce:2a:3f:db:76:49:22:
86:16:33:97:fa:8a:63:12:e4:2e:7b:97:bf:76:96:94:f5:1b:
8f:81:86:46:1d:96:78:a7:c2:bf:bb:27:5d:e8:0e:7a:13:33:
c7:eb:02:f0:8e:2e:9c:6d:ad:b4:35:bb:47:41:93:64:f3:e4:
bb:c4:71:47:9e:29:36:4d:6d:76:c8:dc:45:55:f1:9c:f8:5b:
b1:10:d2:af:e3:07:f3:68:c0:10:16:e8:50:cf:b3:98:23:90:
4f:5e:1f:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 10:41:58 2025 by rpki-client