Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.mft
File: B5S3AHBeC6pzal3QkKzRy5EsFxk.mft (raw, json)
Hash identifier: +s2CodG9/CmzUmOWvp32dwcHPWUxVa5McxphEgbFc+o=
Subject key identifier: C8:B2:D9:51:F0:33:31:60:74:4B:BA:74:FD:7C:05:AC:45:17:D8:2D
Authority key identifier: 07:94:B7:00:70:5E:0B:AA:73:6A:5D:D0:90:AC:D1:CB:91:2C:17:19
Certificate issuer: /CN=0794b700705e0baa736a5dd090acd1cb912c1719
Certificate serial: 01976D74546B399F39BC0D4E2C7BCE652295
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B5S3AHBeC6pzal3QkKzRy5EsFxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.mft
Manifest number: 12B2
Signing time: Sat 14 Jun 2025 08:00:29 +0000
Manifest this update: Sat 14 Jun 2025 08:00:29 +0000
Manifest next update: Sun 15 Jun 2025 08:00:29 +0000
Files and hashes: 1: B5S3AHBeC6pzal3QkKzRy5EsFxk.crl (hash: +ZPMjYPJXM+6YX+6RYYm6wKwgf7aYAiB69OW2GbSZrQ=)
2: S3W2ppn5lk20Aj8MVEUOEbDf3k4.roa (hash: R7kQC03lqKwuWWDRl2P6LnNUl2gU+UQxb/V3srvulwI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.mft
rsync://rpki.ripe.net/repository/DEFAULT/B5S3AHBeC6pzal3QkKzRy5EsFxk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:74:54:6b:39:9f:39:bc:0d:4e:2c:7b:ce:65:22:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0794b700705e0baa736a5dd090acd1cb912c1719
Validity
Not Before: Jun 14 08:00:29 2025 GMT
Not After : Jun 15 08:00:29 2025 GMT
Subject: CN=c8b2d951f0333160744bba74fd7c05ac4517d82d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b2:ff:90:e0:77:4b:b8:81:6e:18:3a:cf:27:
e3:57:3c:65:d7:30:13:04:de:9c:19:a0:a3:5c:a2:
2e:4e:89:c3:97:47:1c:fd:55:b0:3d:17:77:02:83:
6a:8f:11:91:bd:f4:71:dc:e0:d1:c7:95:38:34:ce:
86:b2:4a:34:05:83:8a:a4:e0:01:0f:a8:f5:46:81:
73:61:52:0d:ac:62:4a:74:78:0c:44:0d:ca:84:69:
93:52:c7:15:df:f1:4c:cb:d8:eb:8b:c7:22:e6:d8:
d3:be:c6:f7:2d:12:54:0e:d7:53:34:46:74:38:c9:
e8:1f:0d:41:da:39:d2:fe:ce:ee:5c:4d:1e:e1:49:
ed:5f:e8:3f:1c:d7:30:65:f7:3c:8a:56:41:32:1d:
90:9b:d5:34:a2:83:e9:46:fc:a3:9c:a1:1b:bd:3a:
4a:43:6d:7d:1f:1c:83:16:f2:59:15:70:94:40:1a:
35:1f:95:35:54:4e:9e:71:68:40:54:ea:d8:4f:d8:
48:1d:46:90:54:aa:66:5d:bc:d3:63:da:ef:71:f4:
6b:7c:4f:e4:f9:62:0e:57:14:20:8b:e7:b6:8f:70:
db:1c:2d:2c:01:cd:6e:e6:ee:29:99:12:ca:9d:4f:
4c:fa:6a:c4:b9:70:40:ec:86:e4:5d:e3:88:86:c8:
bc:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:B2:D9:51:F0:33:31:60:74:4B:BA:74:FD:7C:05:AC:45:17:D8:2D
X509v3 Authority Key Identifier:
keyid:07:94:B7:00:70:5E:0B:AA:73:6A:5D:D0:90:AC:D1:CB:91:2C:17:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B5S3AHBeC6pzal3QkKzRy5EsFxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/6bac3b-3d0a-41c8-8936-94e02c9f150c/1/B5S3AHBeC6pzal3QkKzRy5EsFxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:c3:ce:74:72:48:76:bb:5e:9c:69:f8:54:01:81:12:0d:96:
85:a7:6a:43:1a:ce:ab:54:61:a1:7c:c8:79:77:a7:c8:ae:38:
35:87:ff:f6:31:8e:6b:7d:ce:22:df:e2:9f:b6:55:16:75:38:
a9:a6:5f:61:ac:9f:6f:3b:98:55:1f:1a:6e:00:9e:bd:b9:a1:
61:f6:d4:e5:b9:43:a5:51:3c:54:9f:e1:3b:53:fe:db:52:32:
43:98:58:88:48:79:8e:5f:53:6c:cb:26:3e:63:a6:aa:ee:54:
24:a4:da:20:a0:1b:11:04:d5:6f:a0:5b:68:1d:e8:40:43:cc:
82:5b:bd:e5:6f:9a:dc:b5:7d:8a:9f:a8:8f:3e:43:b7:d2:64:
a0:60:ac:d4:bb:fe:03:fa:f6:98:71:13:21:41:af:ed:44:fd:
fc:78:46:3f:a9:c6:bf:a8:2d:42:28:74:41:70:bb:8d:ba:f9:
42:d1:51:47:0f:a6:7c:92:fb:ef:2e:15:8c:33:8c:dc:05:23:
44:cd:3c:0d:50:7d:a4:53:da:bc:cb:53:29:96:74:34:f7:f5:
cf:d3:d6:23:b6:e9:92:92:06:09:03:52:9d:99:67:94:1b:aa:
6c:68:23:34:09:20:ce:b5:82:5b:b1:40:cc:11:55:7b:b0:47:
2c:de:fa:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:22:35 2025 by rpki-client