Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/B-pOiEZt5MiWCUAo8c8NtmU2DTI.mft
File: B-pOiEZt5MiWCUAo8c8NtmU2DTI.mft (raw, json)
Hash identifier: 6Hm94olmnaMRsLsA1zHp/EcmxIISYUPBxZHl+2y8vLQ=
Subject key identifier: A0:0D:14:CB:A2:B9:7A:8C:CF:B3:1F:D8:E1:3A:7F:E2:CF:FD:03:52
Authority key identifier: 07:EA:4E:88:46:6D:E4:C8:96:09:40:28:F1:CF:0D:B6:65:36:0D:32
Certificate issuer: /CN=07ea4e88466de4c896094028f1cf0db665360d32
Certificate serial: 019768F2BB405505A18157118337D486F100
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B-pOiEZt5MiWCUAo8c8NtmU2DTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/B-pOiEZt5MiWCUAo8c8NtmU2DTI.mft
Manifest number: 158D
Signing time: Fri 13 Jun 2025 11:00:27 +0000
Manifest this update: Fri 13 Jun 2025 11:00:27 +0000
Manifest next update: Sat 14 Jun 2025 11:00:27 +0000
Files and hashes: 1: B-pOiEZt5MiWCUAo8c8NtmU2DTI.crl (hash: +bK6buHREcO72Z/es6xCrRhRbtIPDj4A6BJikLHoPec=)
2: bxA8JQu2uTNMxZPugWxy8BA9JuM.roa (hash: Z+hupgw09gxg+qKwTC7uynG2+KfBGjPZ8fjXe4JaS6c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/B-pOiEZt5MiWCUAo8c8NtmU2DTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/B-pOiEZt5MiWCUAo8c8NtmU2DTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/B-pOiEZt5MiWCUAo8c8NtmU2DTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 11:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:f2:bb:40:55:05:a1:81:57:11:83:37:d4:86:f1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07ea4e88466de4c896094028f1cf0db665360d32
Validity
Not Before: Jun 13 11:00:27 2025 GMT
Not After : Jun 14 11:00:27 2025 GMT
Subject: CN=a00d14cba2b97a8ccfb31fd8e13a7fe2cffd0352
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:fe:9c:3d:3c:9c:81:b3:da:d3:14:9e:1a:1b:
8e:94:2d:fb:6b:46:5e:22:84:4e:f3:a2:2e:d5:92:
bb:d6:fa:13:69:2f:91:bd:20:ba:b1:a6:c0:76:c4:
6d:5b:8b:2e:18:f9:a5:cd:33:e0:20:bb:01:2a:62:
ba:c8:16:56:9e:77:0d:99:78:3a:74:74:4e:35:00:
7d:dd:69:00:f3:f3:8c:29:6c:af:c4:3e:09:fe:2d:
c1:f3:f1:cb:48:e1:bc:e8:fa:cd:78:62:ac:c3:3f:
47:cf:91:d6:34:10:c0:eb:4e:ed:af:4b:02:71:91:
fe:65:33:69:5b:8e:df:59:68:dc:ab:ff:a1:df:d4:
65:d3:a4:c0:f9:c1:fb:04:d8:15:19:06:57:4b:9b:
7e:d9:8d:99:18:13:68:23:f9:11:f9:73:f3:f5:1c:
65:f3:3d:bc:3f:59:15:e7:f9:51:2d:7c:93:df:8b:
6d:ba:39:b2:96:f4:37:15:0f:c4:ee:d9:9e:2b:3a:
e0:10:c4:11:d4:d3:ce:60:0b:65:c5:b7:df:1a:a7:
f5:40:67:9c:4f:91:b5:ac:5a:a6:77:a3:05:d0:1a:
59:f5:ce:b9:c8:38:e0:e6:52:5a:64:08:64:46:40:
89:d3:fd:5f:09:18:28:89:31:7a:59:05:11:5f:c2:
9a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:0D:14:CB:A2:B9:7A:8C:CF:B3:1F:D8:E1:3A:7F:E2:CF:FD:03:52
X509v3 Authority Key Identifier:
keyid:07:EA:4E:88:46:6D:E4:C8:96:09:40:28:F1:CF:0D:B6:65:36:0D:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B-pOiEZt5MiWCUAo8c8NtmU2DTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/B-pOiEZt5MiWCUAo8c8NtmU2DTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f800f1-74ae-4c19-a7cf-31b36f579f06/1/B-pOiEZt5MiWCUAo8c8NtmU2DTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:fc:a2:59:1a:11:33:3a:71:49:c3:3c:13:31:6b:0a:78:9f:
3c:35:8b:23:a4:e3:4e:83:0b:a2:db:79:ac:82:53:77:63:84:
36:50:60:53:9a:0c:4e:7b:3b:72:4f:a7:8e:75:96:90:3e:9d:
ff:37:28:f6:25:56:77:d0:d7:e6:f3:14:7c:de:5d:69:ed:a8:
d2:e9:8b:95:2a:21:ac:dd:45:88:dd:2f:0a:dd:c4:a7:61:f7:
57:92:5b:29:7a:5d:59:39:ee:ef:3d:da:2f:2b:dc:5c:9d:ab:
e4:27:e4:bc:d3:1c:e5:2d:4e:e1:7d:ff:c5:aa:72:3b:3d:1b:
fa:67:5a:e8:de:27:a1:50:53:d5:2d:68:bd:3c:e6:c0:00:6c:
30:dd:10:c2:97:7f:57:9a:55:ff:64:4f:61:79:10:4d:74:03:
73:6e:76:25:43:0b:09:20:ca:8b:45:fe:08:a2:82:f8:ac:ad:
4e:a0:9f:3d:d0:2d:62:c5:cc:19:6d:cf:68:2d:b5:df:8c:0e:
41:43:42:d0:a8:65:8b:ea:a0:73:dc:ec:e9:34:33:38:67:54:
c8:7e:f1:81:35:7e:c1:a8:3e:14:84:d2:ef:fd:5c:ae:78:39:
3f:fc:3f:ab:22:ea:06:11:d9:5f:ca:44:91:1a:89:50:cb:bb:
87:20:f1:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:22:38 2025 by rpki-client