Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/b8575a-8b63-4532-81ed-efe5bfc79994/1/BhYY9tMA3yz1ni35f_6flWoj5jw.mft
File: BhYY9tMA3yz1ni35f_6flWoj5jw.mft (raw, json)
Hash identifier: 8DKue0TBPDEnNewRmqXrUM+VHw9LHs+v0hNlnqOBPHA=
Subject key identifier: CB:61:A9:30:76:A4:C1:EF:A1:B5:AB:C2:F3:27:25:3E:1D:A6:3E:74
Authority key identifier: 06:16:18:F6:D3:00:DF:2C:F5:9E:2D:F9:7F:FE:9F:95:6A:23:E6:3C
Certificate issuer: /CN=061618f6d300df2cf59e2df97ffe9f956a23e63c
Certificate serial: 01977187EAC7BCF1820FBFF4A1D570A507CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BhYY9tMA3yz1ni35f_6flWoj5jw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/b8575a-8b63-4532-81ed-efe5bfc79994/1/BhYY9tMA3yz1ni35f_6flWoj5jw.mft
Manifest number: 1590
Signing time: Sun 15 Jun 2025 03:00:22 +0000
Manifest this update: Sun 15 Jun 2025 03:00:22 +0000
Manifest next update: Mon 16 Jun 2025 03:00:22 +0000
Files and hashes: 1: BhYY9tMA3yz1ni35f_6flWoj5jw.crl (hash: uQqsZ+N5cZYCh774IVGATPg+YXnxob1i6CYHW42dqaA=)
2: PpLMyuWEi7GW-Zo7FScOzQEDqmw.roa (hash: tpDYLlf85669UfO2WjK12JWkdre1n2ZIYLt0uyeHU34=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/b8575a-8b63-4532-81ed-efe5bfc79994/1/BhYY9tMA3yz1ni35f_6flWoj5jw.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/b8575a-8b63-4532-81ed-efe5bfc79994/1/BhYY9tMA3yz1ni35f_6flWoj5jw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BhYY9tMA3yz1ni35f_6flWoj5jw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:87:ea:c7:bc:f1:82:0f:bf:f4:a1:d5:70:a5:07:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=061618f6d300df2cf59e2df97ffe9f956a23e63c
Validity
Not Before: Jun 15 03:00:22 2025 GMT
Not After : Jun 16 03:00:22 2025 GMT
Subject: CN=cb61a93076a4c1efa1b5abc2f327253e1da63e74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:94:74:c2:8a:c5:29:cc:af:6b:3e:9b:8e:06:
5c:c0:e0:26:c0:a2:de:e3:38:32:ee:9b:a0:ca:30:
89:be:2d:94:40:ff:0a:15:f7:4e:5e:4d:0e:42:53:
47:15:cd:a7:d2:81:c7:cd:b3:3a:a3:13:3a:bc:f1:
e4:7d:5a:bf:d3:40:68:da:6b:bf:b2:67:82:36:f2:
53:0a:db:48:71:06:95:89:f8:25:02:e9:26:47:e2:
c7:93:00:3e:f4:f5:b0:c5:e8:df:a1:58:ca:5f:26:
91:6d:42:1c:f3:95:b2:b5:04:b2:98:e8:8d:33:c1:
6c:e0:59:2d:9b:49:fc:6a:d3:da:e9:fe:17:5e:43:
eb:a8:56:95:a2:3b:e3:47:67:0f:9d:a6:3f:27:43:
dc:a4:bb:36:7a:11:f6:0f:38:01:cf:ec:6d:ca:79:
ba:70:59:60:e1:b6:26:19:36:ee:e3:f5:ee:51:8e:
49:15:23:cd:9f:c4:12:40:2c:79:99:a1:af:98:b5:
1d:fd:c8:87:bc:a1:5a:72:8b:45:53:f2:a3:f5:e0:
78:40:6d:c9:48:c0:72:ec:46:00:c5:bf:f6:03:de:
2d:b2:27:78:69:e2:1c:45:b4:ed:ff:36:98:10:aa:
bf:1a:4f:57:e7:fb:c9:9d:ae:4c:b5:08:98:e0:00:
d7:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:61:A9:30:76:A4:C1:EF:A1:B5:AB:C2:F3:27:25:3E:1D:A6:3E:74
X509v3 Authority Key Identifier:
keyid:06:16:18:F6:D3:00:DF:2C:F5:9E:2D:F9:7F:FE:9F:95:6A:23:E6:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BhYY9tMA3yz1ni35f_6flWoj5jw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b8575a-8b63-4532-81ed-efe5bfc79994/1/BhYY9tMA3yz1ni35f_6flWoj5jw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b8575a-8b63-4532-81ed-efe5bfc79994/1/BhYY9tMA3yz1ni35f_6flWoj5jw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:c8:5a:d6:c4:04:65:09:70:5b:55:6b:03:88:f7:bd:20:9b:
3e:d9:e3:92:ab:3b:4f:df:82:b7:04:12:8b:90:1e:d4:b8:87:
53:81:93:d5:89:6e:95:97:8f:ea:0e:6d:2e:4b:d8:4d:19:6f:
84:2e:f0:a7:1f:ae:01:30:51:bc:40:48:d7:ca:bd:6d:e4:4a:
6b:cb:2c:bb:9c:23:9b:04:35:2c:47:b1:27:51:b8:39:f8:34:
b1:43:39:d7:43:84:ac:9b:c9:e8:09:32:64:8c:e6:38:3c:ed:
6b:d9:18:6c:a6:f7:2d:8d:d9:90:89:b5:08:eb:0a:05:61:1c:
12:52:78:80:ad:7f:ab:be:03:21:00:73:a1:61:1e:3a:a5:9d:
80:05:07:18:fa:08:b7:44:f4:79:8b:25:3b:45:4e:35:3c:ce:
b3:fd:a3:db:2b:fb:ee:7d:39:09:7a:19:f8:6b:5f:dd:df:31:
7b:8e:86:68:b3:65:8c:b2:e9:84:ae:b0:ae:94:f8:16:d7:a3:
96:45:d8:3c:a0:b7:fc:41:7d:68:09:f1:da:df:e8:b6:e5:ff:
f7:34:28:17:d3:e9:d2:2a:a7:2f:af:e7:94:e6:87:cb:52:41:
59:32:f2:70:40:07:22:62:f0:5d:1e:cf:59:9e:01:00:4c:62:
7e:1c:8b:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 08:41:35 2025 by rpki-client