Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/1e3846-9c42-4998-a960-b1d73797a29f/1/BjyTAb89LhVgz69-3EGnw-yKFqY.mft
File: BjyTAb89LhVgz69-3EGnw-yKFqY.mft (raw, json)
Hash identifier: VIC2KTa1Brn+8ziTnlwOyIo87fkYh9pxhIXMrDhM8hI=
Subject key identifier: C3:49:86:C7:F9:66:23:AF:2A:F7:0F:5C:E5:10:25:93:06:95:E4:EA
Authority key identifier: 06:3C:93:01:BF:3D:2E:15:60:CF:AF:7E:DC:41:A7:C3:EC:8A:16:A6
Certificate issuer: /CN=063c9301bf3d2e1560cfaf7edc41a7c3ec8a16a6
Certificate serial: 01977075BB01C979C7C29F016664D73AC2B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BjyTAb89LhVgz69-3EGnw-yKFqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/1e3846-9c42-4998-a960-b1d73797a29f/1/BjyTAb89LhVgz69-3EGnw-yKFqY.mft
Manifest number: 158E
Signing time: Sat 14 Jun 2025 22:00:53 +0000
Manifest this update: Sat 14 Jun 2025 22:00:53 +0000
Manifest next update: Sun 15 Jun 2025 22:00:53 +0000
Files and hashes: 1: BjyTAb89LhVgz69-3EGnw-yKFqY.crl (hash: SnI4FVOW/3TLeRLDCBfzFrECgFKrkjahgAiViXr0rN8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/1e3846-9c42-4998-a960-b1d73797a29f/1/BjyTAb89LhVgz69-3EGnw-yKFqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/1e3846-9c42-4998-a960-b1d73797a29f/1/BjyTAb89LhVgz69-3EGnw-yKFqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BjyTAb89LhVgz69-3EGnw-yKFqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:75:bb:01:c9:79:c7:c2:9f:01:66:64:d7:3a:c2:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=063c9301bf3d2e1560cfaf7edc41a7c3ec8a16a6
Validity
Not Before: Jun 14 22:00:53 2025 GMT
Not After : Jun 15 22:00:53 2025 GMT
Subject: CN=c34986c7f96623af2af70f5ce51025930695e4ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:28:e4:55:54:02:be:4b:fa:d6:30:e6:82:82:
44:55:52:e6:14:a0:80:6c:af:bc:4a:b9:cc:2d:e8:
ef:19:a6:26:3b:38:a2:57:d2:89:7c:91:88:8b:81:
7d:05:35:99:ab:4f:89:a3:4c:b5:74:18:8d:48:5b:
6e:f0:35:bf:bf:89:1b:21:8e:df:58:ec:a7:fb:0f:
55:dd:0c:66:b3:04:2d:66:cd:f4:2a:f1:2d:26:1f:
3b:87:74:a0:38:c2:fd:6c:78:2f:e7:3d:e1:f7:0d:
ad:f1:46:7e:83:c1:a2:9d:6a:5e:ff:9f:3c:3f:40:
01:dd:df:1e:f9:71:db:cd:19:fc:68:2d:98:c9:d3:
42:b1:40:a8:48:bc:89:63:45:45:86:d0:3e:c1:14:
fb:21:c3:b5:c7:aa:fd:dc:c5:38:e6:aa:29:d1:e7:
72:50:18:59:da:54:c0:57:14:0d:5a:8d:c8:6d:2b:
a4:16:11:96:b0:bf:9b:d6:05:91:f7:f7:9e:45:0d:
24:ba:d3:33:80:9e:f1:af:61:a4:f8:e3:7e:3b:4e:
4a:bc:68:3a:3a:b3:1b:4a:18:3d:7f:dd:81:ea:68:
dd:21:05:7d:81:5f:6d:1f:6f:2d:57:86:53:ce:39:
63:28:ae:59:e9:3e:86:fd:a4:32:8b:e0:95:ac:5b:
ff:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:49:86:C7:F9:66:23:AF:2A:F7:0F:5C:E5:10:25:93:06:95:E4:EA
X509v3 Authority Key Identifier:
keyid:06:3C:93:01:BF:3D:2E:15:60:CF:AF:7E:DC:41:A7:C3:EC:8A:16:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BjyTAb89LhVgz69-3EGnw-yKFqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/1e3846-9c42-4998-a960-b1d73797a29f/1/BjyTAb89LhVgz69-3EGnw-yKFqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/1e3846-9c42-4998-a960-b1d73797a29f/1/BjyTAb89LhVgz69-3EGnw-yKFqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:cd:31:4a:9d:06:2e:03:c7:ea:1d:1b:86:12:8d:0a:ad:bb:
9f:13:32:c7:5c:c6:45:2e:2b:a7:d5:a0:df:94:ab:f5:60:d4:
12:86:5e:6f:27:4c:4b:dc:13:4a:1c:79:a2:28:0b:5a:33:a7:
f8:e0:86:ae:c3:c5:77:f7:fc:57:31:82:a3:b6:1b:84:12:83:
4f:3f:bc:ee:6f:21:24:48:de:17:cd:30:1a:70:0b:05:6c:be:
3b:41:3d:05:28:39:b4:c1:40:0e:7c:0e:44:2d:f1:a4:84:0f:
3a:f6:97:5e:1e:a6:da:96:1c:8a:d2:c3:88:50:38:11:6b:de:
75:44:e2:f5:06:7c:e5:11:6c:61:80:10:9f:34:49:b2:5e:06:
27:92:df:1c:e1:7b:2e:79:b7:cf:a4:b1:da:11:a4:55:6f:4f:
d1:6a:49:10:2a:ba:65:5e:d3:e1:ca:ee:eb:f7:86:3d:c4:48:
25:df:ff:0a:43:80:8e:54:5e:0e:8e:ac:88:f3:b3:5b:6f:85:
b8:3e:0a:24:31:12:40:9b:a1:23:78:a4:db:21:1d:88:8a:b6:
c8:27:ea:1e:7f:20:7b:59:4f:9a:0a:b4:52:38:54:30:c6:09:
53:81:1f:c4:e0:30:11:e3:42:99:8a:46:0d:13:33:73:d4:aa:
56:24:18:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:18:14 2025 by rpki-client