Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/bE5-r-L_qpDK6UdoAwNNttp8Ehk.mft
File: bE5-r-L_qpDK6UdoAwNNttp8Ehk.mft (raw, json)
Hash identifier: vzBhn6GIHFozvtndGguO7oXY8J5PA7w8s+Afx92MVNU=
Subject key identifier: 63:60:E3:7C:C4:EF:CF:28:EC:A8:3C:D5:0A:C6:8F:D1:B0:F7:FA:0A
Authority key identifier: 6C:4E:7E:AF:E2:FF:AA:90:CA:E9:47:68:03:03:4D:B6:DA:7C:12:19
Certificate issuer: /CN=6c4e7eafe2ffaa90cae9476803034db6da7c1219
Certificate serial: 01976929BB9ACBD7830E3739A393CE0CE384
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bE5-r-L_qpDK6UdoAwNNttp8Ehk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/bE5-r-L_qpDK6UdoAwNNttp8Ehk.mft
Manifest number: 0EF9
Signing time: Fri 13 Jun 2025 12:00:32 +0000
Manifest this update: Fri 13 Jun 2025 12:00:32 +0000
Manifest next update: Sat 14 Jun 2025 12:00:32 +0000
Files and hashes: 1: bE5-r-L_qpDK6UdoAwNNttp8Ehk.crl (hash: We/IsEnInDMT1X/B7eXSMfEpv6a7wog4SzYEHPREVRg=)
2: pikr-Z1yZ7UUvvrmXqwotfJAjto.roa (hash: 68icAI19296YoC6/CDoRbYMVtIlmqXzI+o0fkE9+Wfc=)
3: qQqCuUJCewbsZNg09v9PamhTS90.roa (hash: OGwgmYMhdJtP2TfXi19zj/Lo5JjlQ5q60mMpyZb+YXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/bE5-r-L_qpDK6UdoAwNNttp8Ehk.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/bE5-r-L_qpDK6UdoAwNNttp8Ehk.mft
rsync://rpki.ripe.net/repository/DEFAULT/bE5-r-L_qpDK6UdoAwNNttp8Ehk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 12:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:29:bb:9a:cb:d7:83:0e:37:39:a3:93:ce:0c:e3:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c4e7eafe2ffaa90cae9476803034db6da7c1219
Validity
Not Before: Jun 13 12:00:32 2025 GMT
Not After : Jun 14 12:00:32 2025 GMT
Subject: CN=6360e37cc4efcf28eca83cd50ac68fd1b0f7fa0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:bd:75:ee:69:2c:d2:e6:3f:66:2c:c0:53:2e:
e3:09:a6:5a:36:0d:62:30:f0:8b:1c:37:2e:5d:c4:
5c:92:5f:64:fe:e6:a7:e9:7e:f6:ac:0f:7c:51:2a:
3d:73:3b:77:c0:a0:d5:aa:77:8a:83:89:cf:cd:5f:
1f:02:3c:68:88:fb:c8:18:9b:2a:f3:00:a2:83:b8:
35:3c:88:b4:cb:c2:53:55:63:49:15:41:88:63:03:
44:b2:63:6d:2e:e9:7e:3b:92:f4:10:04:1f:f7:76:
c5:e6:33:48:da:0d:f9:46:43:5e:d5:f4:da:14:bc:
49:8f:6f:55:bc:86:9e:26:c1:18:20:c4:be:84:3b:
79:08:0c:46:65:a9:c0:ab:80:e5:bc:e3:b1:78:ec:
90:6e:0a:8f:04:44:c2:d3:11:63:57:b8:eb:b3:c6:
b2:0c:2f:7b:a6:70:89:f7:de:c1:32:23:89:37:5c:
0d:c0:2b:63:1d:0f:1b:4b:f5:59:a2:43:9d:e7:d2:
0e:3e:38:12:65:d2:4c:ef:78:55:9d:3d:65:19:82:
8b:40:03:56:3a:d4:99:2a:73:bb:96:be:4f:ff:17:
9a:9e:1e:9e:66:65:7c:c5:92:80:ce:0d:af:e3:ba:
50:31:9a:ea:1c:04:7e:11:22:8d:05:99:3f:08:f8:
f9:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:60:E3:7C:C4:EF:CF:28:EC:A8:3C:D5:0A:C6:8F:D1:B0:F7:FA:0A
X509v3 Authority Key Identifier:
keyid:6C:4E:7E:AF:E2:FF:AA:90:CA:E9:47:68:03:03:4D:B6:DA:7C:12:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bE5-r-L_qpDK6UdoAwNNttp8Ehk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/bE5-r-L_qpDK6UdoAwNNttp8Ehk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/3deae4-720d-4eae-b3d9-b21dd3f68aba/1/bE5-r-L_qpDK6UdoAwNNttp8Ehk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:b9:4a:73:38:0c:ba:3a:2f:d2:ba:7d:9a:a5:ab:58:80:87:
a2:bd:69:ee:dc:2d:a1:41:12:d0:6a:43:f9:6d:36:f3:68:31:
39:33:36:52:9f:ca:95:fc:ab:a5:a3:89:4d:fc:90:97:b7:4f:
b7:7d:9f:7e:58:03:c5:1b:84:d0:1c:75:35:2e:b2:36:f3:6b:
d4:e8:73:88:00:54:d1:b3:a9:2b:28:85:3c:b1:ad:37:66:2d:
a3:22:20:e1:e9:50:5d:e9:b5:f8:e4:d3:15:a7:ca:98:7c:90:
1a:c8:22:0f:94:d7:60:74:23:0e:df:82:e3:6b:d8:e9:15:4f:
1c:77:06:fe:90:d8:17:4e:c1:b4:3c:cf:23:eb:31:f1:cc:df:
b0:6b:be:5e:e0:08:f3:c8:23:dd:50:66:02:e6:f6:0a:ca:df:
b0:39:da:7b:fe:1c:ad:4d:dd:10:f6:20:3f:01:a8:37:5c:98:
d9:8e:c4:c7:9a:92:eb:c0:9c:3a:0c:16:72:f9:fd:b8:24:17:
06:63:ee:ad:81:04:f8:9f:da:9f:6a:9e:b2:0f:a4:cc:21:c2:
16:b3:d4:fd:33:83:1f:10:39:14:4c:7a:58:bb:a9:88:d4:7a:
53:95:7c:df:c9:80:62:1c:95:ab:26:64:1f:eb:17:7a:50:88:
bd:93:0c:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 18:56:28 2025 by rpki-client