Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/92d33c-8a69-4db3-b628-b62db772bbfa/1/B47RoBU3Yqki5V4PlIzRpUEceok.mft
File: B47RoBU3Yqki5V4PlIzRpUEceok.mft (raw, json)
Hash identifier: 0sQUfBzwXW+RETKNna02LB3phqmYvbOuZZ/VlC2t/VU=
Subject key identifier: 5A:E4:5E:9C:CD:89:D6:75:F0:26:28:10:20:6A:D6:06:38:CC:2E:26
Authority key identifier: 07:8E:D1:A0:15:37:62:A9:22:E5:5E:0F:94:8C:D1:A5:41:1C:7A:89
Certificate issuer: /CN=078ed1a0153762a922e55e0f948cd1a5411c7a89
Certificate serial: 01976DAB8AD3583D9DBD94E85F84B972D5C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B47RoBU3Yqki5V4PlIzRpUEceok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/92d33c-8a69-4db3-b628-b62db772bbfa/1/B47RoBU3Yqki5V4PlIzRpUEceok.mft
Manifest number: 10FF
Signing time: Sat 14 Jun 2025 09:00:47 +0000
Manifest this update: Sat 14 Jun 2025 09:00:47 +0000
Manifest next update: Sun 15 Jun 2025 09:00:47 +0000
Files and hashes: 1: B47RoBU3Yqki5V4PlIzRpUEceok.crl (hash: Ym+6l1VtOM23WQFhY19yDb82Fmws8oLgqIg74VV6AOw=)
2: c4TFBL4EL5IADMniHZ0GVJJb_4Q.roa (hash: ZOFMhPaK+bFDPt6Ze8LlHlzvSqEu3m14aAhhA1S86RQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/92d33c-8a69-4db3-b628-b62db772bbfa/1/B47RoBU3Yqki5V4PlIzRpUEceok.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/92d33c-8a69-4db3-b628-b62db772bbfa/1/B47RoBU3Yqki5V4PlIzRpUEceok.mft
rsync://rpki.ripe.net/repository/DEFAULT/B47RoBU3Yqki5V4PlIzRpUEceok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:ab:8a:d3:58:3d:9d:bd:94:e8:5f:84:b9:72:d5:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=078ed1a0153762a922e55e0f948cd1a5411c7a89
Validity
Not Before: Jun 14 09:00:47 2025 GMT
Not After : Jun 15 09:00:47 2025 GMT
Subject: CN=5ae45e9ccd89d675f0262810206ad60638cc2e26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:74:1b:99:3a:9e:09:0c:77:29:11:38:66:f4:
b1:b3:b8:d3:3b:7c:63:59:67:a1:e6:91:67:18:fd:
16:2b:16:f7:67:ff:6a:46:67:f2:3b:7f:0e:d7:7b:
75:ba:f4:97:ae:e8:90:95:89:8c:93:55:56:74:c6:
82:bb:1a:b9:f5:ec:bc:25:d2:e1:7a:c0:52:8a:b6:
09:33:2b:97:e2:0f:68:a2:16:3b:1e:3b:6f:af:26:
b7:7b:bb:2d:95:f4:f9:15:86:91:e6:11:61:c9:0b:
7c:3e:96:5c:b6:ba:4b:96:c0:85:fc:88:43:1c:67:
0f:a3:87:25:e7:16:e9:c1:a4:e7:14:d1:52:7b:79:
71:1d:9f:7b:de:84:1f:e2:7b:74:fe:ed:33:30:1d:
47:3f:10:9a:e8:4e:f4:c6:02:e3:d7:89:9a:86:d2:
78:c3:67:87:4f:6f:4c:1e:38:d1:fa:51:13:41:4e:
94:b3:86:ea:6e:bc:03:1c:4e:66:41:a1:b8:5b:58:
3c:f0:7d:b0:2a:a7:00:f9:51:d7:5c:19:5e:31:52:
d0:86:44:0f:c8:13:63:cf:6b:28:23:b5:6a:20:c5:
c9:0f:67:86:58:e3:5a:7d:f2:46:a4:e9:04:29:07:
07:72:88:0f:6d:27:f3:bc:fd:4e:86:4f:62:d9:a9:
76:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:E4:5E:9C:CD:89:D6:75:F0:26:28:10:20:6A:D6:06:38:CC:2E:26
X509v3 Authority Key Identifier:
keyid:07:8E:D1:A0:15:37:62:A9:22:E5:5E:0F:94:8C:D1:A5:41:1C:7A:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B47RoBU3Yqki5V4PlIzRpUEceok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/92d33c-8a69-4db3-b628-b62db772bbfa/1/B47RoBU3Yqki5V4PlIzRpUEceok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/92d33c-8a69-4db3-b628-b62db772bbfa/1/B47RoBU3Yqki5V4PlIzRpUEceok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:41:e5:68:f7:c3:af:13:a4:9c:b4:20:fc:1e:ef:02:06:dc:
d6:1b:9d:ac:91:39:d0:8c:7e:dd:a0:7e:00:74:50:ed:8b:0a:
40:f6:98:73:4e:ce:9b:e9:3d:fb:24:58:d2:b7:2c:0f:6b:8b:
da:d8:91:a3:a6:46:37:dc:e8:8d:b3:c6:0d:9a:e1:4c:8f:6e:
3a:2a:3b:06:27:26:93:e1:21:50:92:d2:dd:b1:0b:e1:6d:0c:
7a:bc:1e:5b:95:e3:ea:b8:b9:71:03:d0:29:2b:09:c3:e5:79:
2f:50:2c:1d:67:62:1e:b1:4b:60:8d:fb:a1:c1:9b:49:ce:83:
6f:4f:db:c8:45:3a:d5:79:ad:e6:dc:23:a3:2e:b2:06:26:a4:
c7:c9:c5:d8:cd:32:ed:67:79:36:55:28:4d:61:f4:c9:ae:16:
ef:9d:4b:f7:87:3a:94:19:bb:20:bd:37:d8:bc:a8:db:ee:28:
05:53:29:99:83:c6:47:21:35:49:54:06:4e:73:60:b2:13:36:
e3:5f:78:6a:f4:46:b0:e2:1e:60:51:b6:9b:e1:fe:f0:8a:b4:
c9:78:da:30:62:33:a1:dc:19:33:13:87:ee:e0:2c:a1:b2:9a:
e3:85:ad:44:87:e9:0a:89:f8:61:13:89:77:7c:b7:7c:76:19:
3d:f9:ba:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:42:03 2025 by rpki-client