Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.mft
File: BbzeMZo9yiz2dE0ogcqRuD25veo.mft (raw, json)
Hash identifier: MLzXZDA/w2BArbCYasB1f50EHiRht10sVWkhsgN/58k=
Subject key identifier: 63:7E:CD:4C:C8:4C:70:DA:60:3F:C0:8F:93:80:D7:45:6F:FA:55:27
Authority key identifier: 05:BC:DE:31:9A:3D:CA:2C:F6:74:4D:28:81:CA:91:B8:3D:B9:BD:EA
Certificate issuer: /CN=05bcde319a3dca2cf6744d2881ca91b83db9bdea
Certificate serial: 01976DAB1A2DAEB6A19116D5061479C34DF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbzeMZo9yiz2dE0ogcqRuD25veo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.mft
Manifest number: 1591
Signing time: Sat 14 Jun 2025 09:00:19 +0000
Manifest this update: Sat 14 Jun 2025 09:00:19 +0000
Manifest next update: Sun 15 Jun 2025 09:00:19 +0000
Files and hashes: 1: BbzeMZo9yiz2dE0ogcqRuD25veo.crl (hash: tDmrjt9bv7YR00R+Ctp0QQTZFLpSICXrunlsJ0SRZ4U=)
2: ck-X2BfQ9kaJsQaa7rG7LeZYXCw.roa (hash: Vx8Qp2RSKtofWMLQTgGJh1cPfywMtoxWpA5K76Nqi/E=)
3: r0iNlWVybkZPXXX8CrK7kPQfO9w.roa (hash: GWx2ullzYNJcpT/3moVRB7/EJjtrJ5KZY1A9CN9OvSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BbzeMZo9yiz2dE0ogcqRuD25veo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:ab:1a:2d:ae:b6:a1:91:16:d5:06:14:79:c3:4d:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05bcde319a3dca2cf6744d2881ca91b83db9bdea
Validity
Not Before: Jun 14 09:00:19 2025 GMT
Not After : Jun 15 09:00:19 2025 GMT
Subject: CN=637ecd4cc84c70da603fc08f9380d7456ffa5527
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:47:c0:e9:ae:51:b0:2c:9d:2a:4f:e8:3a:62:
83:cd:9a:9a:7b:98:23:8a:7f:4e:37:04:66:ac:0f:
f8:21:23:2d:de:7c:59:61:da:7a:3f:3b:66:a1:dc:
c1:f1:8f:c1:91:d8:09:93:b5:b3:1d:de:f0:28:81:
74:2a:92:2f:0a:30:82:9b:41:1c:54:08:44:33:92:
de:6f:b1:bf:40:ef:c8:dd:bd:50:5a:f8:c9:f5:bc:
44:08:31:fc:76:24:86:ee:dc:1b:99:e6:b6:dc:bd:
05:c3:77:5f:15:17:96:53:07:30:5d:ae:5d:6f:90:
1b:be:c5:2a:fb:d5:86:d2:8d:9b:52:19:85:dd:3e:
04:82:8b:85:c2:cc:dc:b0:a3:ef:c2:b0:9d:ec:37:
e8:97:cd:32:8e:50:08:e1:a8:00:ab:b7:f8:36:d8:
6d:ca:24:14:e2:12:2a:c9:c6:54:ae:a9:04:00:a4:
6f:71:34:14:32:44:2f:0c:ed:a8:fa:a7:e6:34:66:
73:25:38:80:64:4b:de:45:c5:ac:21:ea:7e:1b:e8:
e2:81:1e:7c:36:10:6d:9f:d3:e1:4b:60:c0:ce:a5:
f6:3d:b5:b5:a1:58:d1:f8:5a:ea:4f:4a:17:5b:e9:
9c:91:59:cb:26:6a:59:3a:e5:77:15:70:41:82:d6:
08:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:7E:CD:4C:C8:4C:70:DA:60:3F:C0:8F:93:80:D7:45:6F:FA:55:27
X509v3 Authority Key Identifier:
keyid:05:BC:DE:31:9A:3D:CA:2C:F6:74:4D:28:81:CA:91:B8:3D:B9:BD:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbzeMZo9yiz2dE0ogcqRuD25veo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/ed28d5-78d3-45e2-a7d3-6867c4ae3161/1/BbzeMZo9yiz2dE0ogcqRuD25veo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:ed:6b:c3:17:31:54:35:39:cf:01:fc:9b:c6:90:df:34:46:
b3:10:de:d2:0d:36:e5:44:78:36:95:3f:0d:e0:e1:68:03:7f:
f3:0d:36:32:5f:33:4a:bc:cf:98:23:d8:e0:2a:9f:95:28:dd:
57:78:a4:bc:98:66:e6:9a:c3:80:ca:a1:3b:24:d6:b1:df:55:
54:ea:e1:42:2a:19:b0:64:ec:59:1e:7f:18:40:ec:98:c9:11:
d8:cb:9b:f1:36:03:3b:bc:80:2a:3a:3e:5f:b8:a3:d5:8c:16:
55:4d:17:08:4d:a6:91:a4:ea:50:61:d4:0f:cc:42:1c:28:9e:
1a:86:d2:e1:05:da:5c:02:2f:f4:cb:cd:5a:a2:09:bc:b9:de:
69:a3:99:51:4c:4b:de:69:e2:65:27:8f:7c:13:83:3e:f0:0d:
ed:c0:7e:b8:7d:cb:d3:f4:ed:bb:9e:75:46:31:d1:76:b1:ff:
a1:8d:36:c5:4b:40:58:f6:9e:0c:b6:1c:e7:3e:4d:77:ca:23:
ac:3b:9a:98:5d:ca:8d:22:59:8b:c9:32:c8:a4:73:95:66:2e:
04:cc:34:28:a3:0c:36:7e:4c:23:94:d8:87:9a:2a:d0:cc:9d:
d4:5a:bb:3f:05:67:9d:be:5f:00:87:dc:b1:8c:33:85:27:6b:
92:eb:cf:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:59:33 2025 by rpki-client