Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/BYgfNX6maA3eUqKpv7u27UOF2Nk.mft
File: BYgfNX6maA3eUqKpv7u27UOF2Nk.mft (raw, json)
Hash identifier: XLFCF64LpcjKDu09yc8ilhZg+19isLw0sFNWVuGE3ZU=
Subject key identifier: F8:B0:E2:8C:65:E8:06:A4:9B:07:23:3D:1B:FC:12:30:10:3C:F2:08
Authority key identifier: 05:88:1F:35:7E:A6:68:0D:DE:52:A2:A9:BF:BB:B6:ED:43:85:D8:D9
Certificate issuer: /CN=05881f357ea6680dde52a2a9bfbbb6ed4385d8d9
Certificate serial: 01977AF95D5B4745F99763DAEA0876FFF5BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BYgfNX6maA3eUqKpv7u27UOF2Nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/BYgfNX6maA3eUqKpv7u27UOF2Nk.mft
Manifest number: 14CB
Signing time: Mon 16 Jun 2025 23:00:51 +0000
Manifest this update: Mon 16 Jun 2025 23:00:51 +0000
Manifest next update: Tue 17 Jun 2025 23:00:51 +0000
Files and hashes: 1: BYgfNX6maA3eUqKpv7u27UOF2Nk.crl (hash: IjKyTJIDj5WJZXSYRNDAkorI3g98npMyC/6ntfjmA0E=)
2: J4NELhXbzsP0O-fo9Zwk6eyKSHs.roa (hash: PonpGKcr3QXOrmCtfTF4Hg7UZOzqXswPkTn+XjDFr7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/BYgfNX6maA3eUqKpv7u27UOF2Nk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/BYgfNX6maA3eUqKpv7u27UOF2Nk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BYgfNX6maA3eUqKpv7u27UOF2Nk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 21:51:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7a:f9:5d:5b:47:45:f9:97:63:da:ea:08:76:ff:f5:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05881f357ea6680dde52a2a9bfbbb6ed4385d8d9
Validity
Not Before: Jun 16 23:00:51 2025 GMT
Not After : Jun 17 23:00:51 2025 GMT
Subject: CN=f8b0e28c65e806a49b07233d1bfc1230103cf208
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:fb:1f:45:3a:0e:5d:f1:59:bc:e1:59:1e:e0:
e1:03:fb:61:bc:76:d1:9c:58:77:23:c4:4f:7a:50:
53:cc:4d:96:04:6b:a5:7f:44:b8:2a:ed:7c:41:78:
e0:dd:cb:16:92:be:8c:3f:01:13:e0:30:34:04:e4:
15:8c:59:dd:26:86:15:7c:75:9e:6c:38:b0:71:c0:
38:20:03:5e:12:7a:6e:c6:49:e2:10:5e:18:15:f5:
24:95:33:af:a8:c5:16:61:76:d5:15:93:4c:57:50:
df:19:7c:0c:bf:52:93:81:29:09:67:c9:63:a3:87:
bf:40:73:ff:9e:3f:d8:a2:20:5f:43:58:88:d8:00:
50:8d:7b:07:6d:0a:cf:b2:2f:f6:10:d8:df:da:ae:
85:cf:be:28:ba:5b:e5:c7:85:33:81:f7:c4:5e:46:
3f:d3:59:67:0d:a7:e9:5f:05:57:28:f6:6a:57:3f:
84:1e:3e:d5:d3:9e:9c:a0:80:50:02:49:e3:28:64:
08:bd:35:84:0e:8f:3f:3f:8c:25:be:c3:4e:50:cf:
48:f7:19:0c:a7:33:7b:72:4a:ae:56:db:46:fc:b0:
46:d6:b3:d5:71:6c:bc:94:3e:26:3c:7c:cc:e1:2f:
6e:79:7f:80:aa:2e:4a:12:a2:f3:f9:20:23:42:0a:
1b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:B0:E2:8C:65:E8:06:A4:9B:07:23:3D:1B:FC:12:30:10:3C:F2:08
X509v3 Authority Key Identifier:
keyid:05:88:1F:35:7E:A6:68:0D:DE:52:A2:A9:BF:BB:B6:ED:43:85:D8:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BYgfNX6maA3eUqKpv7u27UOF2Nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/BYgfNX6maA3eUqKpv7u27UOF2Nk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/BYgfNX6maA3eUqKpv7u27UOF2Nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:5a:cf:57:bd:82:8d:af:7a:94:51:e9:39:42:b9:a4:77:93:
09:01:33:ad:bb:c3:e0:29:11:4e:bf:68:89:d5:0c:fc:0a:69:
8f:bf:7a:3b:24:f1:a6:a1:3e:d4:6c:17:ea:97:c0:63:92:85:
a3:93:be:c7:40:7a:75:43:bc:42:b9:65:2b:40:35:28:6b:e0:
5c:82:98:ac:3e:af:4c:e0:19:24:91:f4:cc:12:e7:32:d2:08:
7a:4f:7c:f3:71:62:42:9e:91:43:f1:5f:7e:06:12:e9:d4:65:
78:62:29:5d:33:64:87:67:b4:ed:70:89:32:6d:ca:d0:35:5a:
48:33:e1:ce:8f:8d:23:7d:c3:b9:ee:92:27:35:2a:34:17:f4:
41:42:b2:0e:76:88:d2:ab:1b:00:a8:37:e0:a9:7d:8d:41:75:
f3:46:37:2e:9d:34:a8:6d:36:4f:90:9c:81:29:66:76:42:0a:
47:13:d3:83:2c:f2:7b:26:4c:60:73:b5:5f:85:96:1d:e8:8e:
2d:24:79:aa:ec:8a:f8:9a:f2:ae:54:9f:1d:29:6a:7b:0e:8e:
44:1f:35:c5:83:8f:83:3e:95:a3:45:07:07:f0:a3:ae:18:90:
2e:0d:dc:5c:ac:f3:ab:cf:23:57:83:5e:ad:c2:53:7a:63:37:
3b:62:21:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 02:36:13 2025 by rpki-client