Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/985a27-0818-4ca5-a377-061f5cc6ad52/1/B1u0EyX9YF4guvwvBllFQ57AX-A.mft
File: B1u0EyX9YF4guvwvBllFQ57AX-A.mft (raw, json)
Hash identifier: 3k5EofqOrNwj9t1Ujn7zAiGQH9J1R4DNtNQDFBBUlZQ=
Subject key identifier: B3:84:A4:41:F6:43:C6:7C:B8:0A:43:42:8B:A0:E4:68:87:8C:E2:CC
Authority key identifier: 07:5B:B4:13:25:FD:60:5E:20:BA:FC:2F:06:59:45:43:9E:C0:5F:E0
Certificate issuer: /CN=075bb41325fd605e20bafc2f065945439ec05fe0
Certificate serial: 01978EED620290C0214BAF764ED362583040
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B1u0EyX9YF4guvwvBllFQ57AX-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/985a27-0818-4ca5-a377-061f5cc6ad52/1/B1u0EyX9YF4guvwvBllFQ57AX-A.mft
Manifest number: 0D2A
Signing time: Fri 20 Jun 2025 20:00:11 +0000
Manifest this update: Fri 20 Jun 2025 20:00:11 +0000
Manifest next update: Sat 21 Jun 2025 20:00:11 +0000
Files and hashes: 1: 9NXcCPCGYp1JlQR62uCWgbVja78.roa (hash: 28uUXvy/7SzavknoRbkScbCSEecBm4cD32qSoQXRRak=)
2: B1u0EyX9YF4guvwvBllFQ57AX-A.crl (hash: g9/1Z1MRKBipImb5FgCoSx1svPN1O4c3EO/PcJN7qdE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/985a27-0818-4ca5-a377-061f5cc6ad52/1/B1u0EyX9YF4guvwvBllFQ57AX-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/985a27-0818-4ca5-a377-061f5cc6ad52/1/B1u0EyX9YF4guvwvBllFQ57AX-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/B1u0EyX9YF4guvwvBllFQ57AX-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Jun 2025 19:42:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:8e:ed:62:02:90:c0:21:4b:af:76:4e:d3:62:58:30:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=075bb41325fd605e20bafc2f065945439ec05fe0
Validity
Not Before: Jun 20 20:00:11 2025 GMT
Not After : Jun 21 20:00:11 2025 GMT
Subject: CN=b384a441f643c67cb80a43428ba0e468878ce2cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:40:7d:71:96:a1:17:b9:f1:78:63:c8:3f:9b:
d0:19:7a:8c:c9:52:28:eb:da:d8:5b:2c:16:64:7a:
b4:eb:09:25:2d:c5:c9:7e:76:4d:e5:71:c3:8c:e6:
c8:32:b4:1c:b2:25:27:6f:a8:a2:09:32:72:3d:b0:
6b:40:aa:74:d1:5f:c6:41:1a:58:e4:91:c0:94:36:
9e:04:25:be:a7:d5:00:e1:1d:83:c3:46:d7:f4:58:
7f:3d:76:ee:5b:64:b9:96:a3:18:3a:ed:e0:f8:e7:
55:a1:16:10:8c:b8:8c:77:2e:17:14:e1:d6:e6:ac:
2d:ca:b0:a1:23:6f:2c:47:e3:3e:c2:77:65:38:25:
29:46:18:29:0c:52:e3:2e:5b:e8:f9:29:bc:ca:e2:
16:39:ad:47:0c:04:38:17:ba:50:f3:df:a0:97:ed:
56:15:5e:ae:85:6e:89:78:1e:b9:61:2b:c1:21:da:
6b:2a:18:ac:b2:ed:c9:6f:44:36:83:8f:4b:4f:c5:
07:52:c3:10:88:08:d8:bd:3c:fc:20:83:01:6c:12:
f8:ff:15:ae:76:d5:c6:72:65:41:c2:8b:78:e2:7d:
0c:de:14:59:57:7e:a2:1b:bb:f5:1f:8a:68:4c:fa:
45:91:e1:ed:f3:3d:24:e8:ad:d3:60:1d:00:d6:24:
65:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:84:A4:41:F6:43:C6:7C:B8:0A:43:42:8B:A0:E4:68:87:8C:E2:CC
X509v3 Authority Key Identifier:
keyid:07:5B:B4:13:25:FD:60:5E:20:BA:FC:2F:06:59:45:43:9E:C0:5F:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B1u0EyX9YF4guvwvBllFQ57AX-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/985a27-0818-4ca5-a377-061f5cc6ad52/1/B1u0EyX9YF4guvwvBllFQ57AX-A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/985a27-0818-4ca5-a377-061f5cc6ad52/1/B1u0EyX9YF4guvwvBllFQ57AX-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:4d:75:21:ba:37:07:35:09:36:07:61:91:55:8c:49:18:64:
26:7d:d8:59:3a:f0:8b:3c:1d:8b:e7:6d:4d:52:7f:8c:0c:67:
86:a7:c9:9b:ed:90:4b:fd:48:47:76:6e:6f:bb:2d:5a:19:c2:
2e:1b:b0:0b:53:06:70:74:f8:d6:ee:c7:17:b5:fe:2a:f2:ac:
48:82:46:67:6e:01:96:be:40:1c:1d:14:fa:c3:8d:10:43:a9:
9c:54:a2:60:5f:7d:fa:7b:6d:0d:f6:4b:2b:b0:c8:65:29:aa:
78:fb:02:3e:f6:6e:e2:65:73:22:18:84:bd:15:7a:75:af:c1:
8e:79:82:7e:57:ca:ec:03:d3:44:09:78:30:1b:30:a4:33:81:
29:0d:f7:c8:73:c4:05:55:5f:17:89:24:db:f1:20:7d:8f:4e:
b3:c8:8e:00:87:21:66:77:a9:92:58:18:ef:34:50:28:6c:9a:
22:cf:b3:0c:b4:e1:8a:fd:12:52:71:06:44:34:db:c1:50:cf:
6d:0c:86:10:48:3b:2a:04:a5:e9:23:d5:90:40:5d:d2:5b:45:
48:93:60:82:69:bb:45:1d:44:6f:10:57:b0:a1:d2:73:3f:b4:
3e:18:e8:e2:7a:d0:1c:15:f2:07:1d:1f:68:a0:bb:9f:65:fb:
09:19:05:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 21 01:30:10 2025 by rpki-client