Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.mft
File: Bk3NDucBTvsuO1VPu3BjhO8R0FE.mft (raw, json)
Hash identifier: JBGn8tI0TWQcqRWcXIeNp8KAEOdsf3BENznS8/J0Tl4=
Subject key identifier: 37:B6:F8:F7:BF:FE:2B:1C:EA:E5:4E:EF:7B:02:A9:6B:B1:46:56:15
Authority key identifier: 06:4D:CD:0E:E7:01:4E:FB:2E:3B:55:4F:BB:70:63:84:EF:11:D0:51
Certificate issuer: /CN=064dcd0ee7014efb2e3b554fbb706384ef11d051
Certificate serial: 01976C2B1E27EB2364A21034ADDE0643E017
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bk3NDucBTvsuO1VPu3BjhO8R0FE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.mft
Manifest number: 158F
Signing time: Sat 14 Jun 2025 02:00:54 +0000
Manifest this update: Sat 14 Jun 2025 02:00:54 +0000
Manifest next update: Sun 15 Jun 2025 02:00:54 +0000
Files and hashes: 1: Bk3NDucBTvsuO1VPu3BjhO8R0FE.crl (hash: CU1iZT2qEr/IG+60NzGBi5bDPxAwjsORpjrk6VFU3KM=)
2: GCU6ctyJbqAMhWQYVpX0QaP8Qy4.roa (hash: dW5jCxXLX0Q6KCT48fWLPtjZskUAawNAnNuHkyFw1ow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bk3NDucBTvsuO1VPu3BjhO8R0FE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2b:1e:27:eb:23:64:a2:10:34:ad:de:06:43:e0:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=064dcd0ee7014efb2e3b554fbb706384ef11d051
Validity
Not Before: Jun 14 02:00:54 2025 GMT
Not After : Jun 15 02:00:54 2025 GMT
Subject: CN=37b6f8f7bffe2b1ceae54eef7b02a96bb1465615
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:27:fd:b0:f4:af:16:9b:a2:d1:ce:51:30:ed:
5f:19:a7:c2:07:7e:01:76:c3:d4:a6:20:11:ae:26:
96:b9:b8:a0:8d:7e:e6:33:99:e1:f6:72:f0:93:3a:
5a:5e:86:47:82:78:e5:b8:7c:ef:5f:21:70:9a:67:
4a:a7:de:55:5a:e7:6d:b7:26:6b:3e:f2:1a:6f:ce:
72:a2:02:54:8c:37:0c:a1:59:13:d4:c6:9e:5c:cb:
48:58:84:07:0d:0d:b6:7e:b7:ce:a8:5c:d7:f7:44:
48:da:fa:90:94:89:3b:b1:6d:7a:ab:05:6d:11:fd:
da:bc:8b:78:4d:d1:d3:f8:71:fb:c1:91:3d:42:94:
ee:0a:65:88:db:cf:e3:b6:98:66:3c:3c:11:d4:7f:
31:25:a5:87:22:d8:55:03:98:d3:25:b5:96:6a:73:
45:fd:7f:eb:ee:bf:d2:c8:6e:76:c6:68:49:9d:c7:
78:65:97:41:f4:5d:ce:88:3f:17:23:0c:78:a7:70:
be:ed:f8:b2:de:0c:c7:97:00:ee:24:f8:c5:44:ed:
f9:b0:79:2d:66:f3:91:db:68:b9:c0:bf:87:51:71:
6a:00:1a:d5:96:7e:c8:b6:29:fb:1d:90:cd:1a:c7:
84:39:86:9d:16:6b:85:c8:d2:de:fb:f9:55:3e:73:
e0:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:B6:F8:F7:BF:FE:2B:1C:EA:E5:4E:EF:7B:02:A9:6B:B1:46:56:15
X509v3 Authority Key Identifier:
keyid:06:4D:CD:0E:E7:01:4E:FB:2E:3B:55:4F:BB:70:63:84:EF:11:D0:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bk3NDucBTvsuO1VPu3BjhO8R0FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dcb08c-5515-445c-ad99-fb4740fda250/1/Bk3NDucBTvsuO1VPu3BjhO8R0FE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:e8:51:fd:e8:1e:d2:d9:37:1a:c0:96:f4:0b:68:93:d8:92:
bb:90:35:62:56:41:66:58:d4:32:19:2f:5a:62:71:c5:ea:07:
94:99:aa:8c:df:73:b3:56:5d:71:74:a4:9a:a9:b5:72:b2:74:
bd:66:1c:ac:38:5c:3e:13:80:0d:22:10:61:c6:d6:50:3e:e1:
51:db:52:03:ab:56:da:11:39:bd:50:9d:bb:2a:bc:1b:39:76:
41:37:b2:e1:29:b4:77:cc:6c:b1:cd:1b:62:b9:1b:eb:a8:de:
91:ab:cf:ad:d5:67:8f:bd:7c:02:a6:7f:4a:ee:62:89:2e:07:
84:cd:07:a1:27:e6:ef:86:56:cc:6c:99:a2:24:24:e2:8a:53:
39:55:f1:00:43:a7:33:54:ac:8e:5d:bd:40:8e:6a:e1:79:d8:
f6:55:38:f2:7a:4a:d7:50:f3:74:fd:dd:a9:ab:26:7c:a0:e1:
ab:51:bc:9f:23:0f:bf:d0:ef:b1:28:75:9b:05:db:01:75:60:
77:d1:4a:f2:82:13:32:a6:6f:e4:95:51:e2:f0:c9:f9:f7:4b:
e1:29:49:97:f2:a0:d2:6c:a2:ec:ba:39:0f:67:34:ce:92:5d:
e7:c0:25:06:86:9d:b3:b5:d2:20:71:a9:a2:b9:a8:a4:70:28:
22:c8:c3:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:36:41 2025 by rpki-client