Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/800b53-eb90-40d2-ac0a-5a0178ecac28/1/B6kIPgEhBVotScWTBfQ6g93l2bc.mft
File: B6kIPgEhBVotScWTBfQ6g93l2bc.mft (raw, json)
Hash identifier: 0IJZyPrM+GK2gkjJlfiLfMJHhiNnPfRgNvsBLbiMdo0=
Subject key identifier: EA:A3:24:A1:4B:9C:3E:D6:54:7A:71:17:BB:12:CB:A2:5C:77:43:EC
Authority key identifier: 07:A9:08:3E:01:21:05:5A:2D:49:C5:93:05:F4:3A:83:DD:E5:D9:B7
Certificate issuer: /CN=07a9083e0121055a2d49c59305f43a83dde5d9b7
Certificate serial: 01976F2C6F792492D4591B4C98AA24D6C138
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B6kIPgEhBVotScWTBfQ6g93l2bc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/800b53-eb90-40d2-ac0a-5a0178ecac28/1/B6kIPgEhBVotScWTBfQ6g93l2bc.mft
Manifest number: 158D
Signing time: Sat 14 Jun 2025 16:01:12 +0000
Manifest this update: Sat 14 Jun 2025 16:01:12 +0000
Manifest next update: Sun 15 Jun 2025 16:01:12 +0000
Files and hashes: 1: B6kIPgEhBVotScWTBfQ6g93l2bc.crl (hash: WzopKgPwih84FVa6NYRLVCNr2tQIRDidvfp01bsRJis=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/800b53-eb90-40d2-ac0a-5a0178ecac28/1/B6kIPgEhBVotScWTBfQ6g93l2bc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/800b53-eb90-40d2-ac0a-5a0178ecac28/1/B6kIPgEhBVotScWTBfQ6g93l2bc.mft
rsync://rpki.ripe.net/repository/DEFAULT/B6kIPgEhBVotScWTBfQ6g93l2bc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 16:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2c:6f:79:24:92:d4:59:1b:4c:98:aa:24:d6:c1:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07a9083e0121055a2d49c59305f43a83dde5d9b7
Validity
Not Before: Jun 14 16:01:12 2025 GMT
Not After : Jun 15 16:01:12 2025 GMT
Subject: CN=eaa324a14b9c3ed6547a7117bb12cba25c7743ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c6:3c:1a:0a:e4:3d:47:04:1a:22:cd:1a:af:
9f:eb:d7:44:e6:25:9e:71:85:03:65:f1:8f:c7:62:
2d:52:09:22:4f:21:d9:48:16:67:d9:4b:39:00:cc:
9c:64:0d:ba:38:c4:d1:f0:70:26:22:4a:d5:f5:a2:
7e:83:63:07:0d:b1:68:73:11:67:c6:60:da:68:58:
56:b5:28:8c:3b:07:b5:88:05:4a:99:56:03:75:26:
1d:b8:49:4a:b7:54:9b:76:81:68:1d:fd:a1:b4:19:
6a:de:4b:8f:c3:57:96:3c:b8:36:70:1e:0b:09:e2:
85:b9:b4:86:52:61:67:23:a4:e6:2a:47:40:4b:a8:
10:15:12:99:c4:aa:a8:c0:f7:c2:76:a1:34:0e:60:
52:1d:89:69:2b:1c:e3:89:ef:5c:7d:d5:70:bb:e3:
1b:01:8a:cb:d9:a0:90:d0:74:67:b2:81:be:75:d6:
ff:aa:8c:5f:eb:5b:94:86:8d:85:83:8c:33:fe:56:
48:5a:e2:be:df:82:89:b9:57:be:38:86:7b:65:57:
19:fa:d6:d8:60:6b:64:9a:7e:af:dd:5f:6f:0f:6e:
cd:da:11:dc:cf:ee:38:3f:c5:d4:d7:19:34:06:8e:
7e:3f:a3:d1:c8:f4:20:fa:cf:cb:71:c0:77:03:dc:
1f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:A3:24:A1:4B:9C:3E:D6:54:7A:71:17:BB:12:CB:A2:5C:77:43:EC
X509v3 Authority Key Identifier:
keyid:07:A9:08:3E:01:21:05:5A:2D:49:C5:93:05:F4:3A:83:DD:E5:D9:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B6kIPgEhBVotScWTBfQ6g93l2bc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/800b53-eb90-40d2-ac0a-5a0178ecac28/1/B6kIPgEhBVotScWTBfQ6g93l2bc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/800b53-eb90-40d2-ac0a-5a0178ecac28/1/B6kIPgEhBVotScWTBfQ6g93l2bc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:21:0a:13:76:dc:95:53:83:72:85:87:eb:5c:37:f6:16:29:
80:51:d2:99:24:05:7f:f6:e3:2b:50:bc:6f:b4:83:bc:2b:38:
17:62:bc:84:54:a7:4d:85:8a:f8:c3:b3:ca:09:d1:4a:81:a3:
c0:3a:ef:84:09:39:e6:41:0a:f4:d5:7a:2f:d1:3a:42:e1:14:
81:ba:78:ec:0a:8b:34:09:f5:7c:82:f6:f4:c0:bf:a3:75:67:
14:72:32:01:f3:64:f2:9e:e5:64:a7:c4:91:59:3d:54:56:e6:
4c:19:a3:8e:d4:87:9e:61:5f:db:1a:83:f3:2e:34:9f:1c:03:
93:03:9b:8b:23:6d:64:07:01:8f:6c:8c:4b:98:b7:73:0f:fc:
bf:b6:c7:2e:38:e4:3b:28:ac:3b:62:62:c2:d9:dd:c9:af:19:
33:17:f5:84:f1:aa:4f:7f:d2:c0:d4:2b:83:1f:6b:25:b0:76:
6e:b0:22:f5:76:05:5b:6f:fe:cf:e2:45:fd:a3:ce:08:43:08:
4e:ed:02:ac:6d:cd:69:88:85:cc:61:60:f3:66:b3:bb:b6:76:
a0:89:8c:4f:cc:18:d7:3d:6a:1e:4b:38:d9:b2:be:51:32:a0:
cb:d8:5b:01:ac:0d:79:0c:8f:e9:04:d3:28:4d:25:86:02:3c:
2e:7a:06:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 00:44:41 2025 by rpki-client