Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/ac8587-db0d-4fe1-a39d-452ef6abe00f/1/BPD3XK7T8miFrGVjD_qu53pw69k.mft
File: BPD3XK7T8miFrGVjD_qu53pw69k.mft (raw, json)
Hash identifier: t6/8ppodJmRx07dM40pdeFyOUtaZeJzMhAOQCyV3MOI=
Subject key identifier: 79:57:AD:D1:33:00:10:05:77:73:03:8C:A1:3D:AD:C2:34:67:94:9A
Authority key identifier: 04:F0:F7:5C:AE:D3:F2:68:85:AC:65:63:0F:FA:AE:E7:7A:70:EB:D9
Certificate issuer: /CN=04f0f75caed3f26885ac65630ffaaee77a70ebd9
Certificate serial: 01976EBDFDB3B9223229473C19FEB2CA3F08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BPD3XK7T8miFrGVjD_qu53pw69k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/ac8587-db0d-4fe1-a39d-452ef6abe00f/1/BPD3XK7T8miFrGVjD_qu53pw69k.mft
Manifest number: 132F
Signing time: Sat 14 Jun 2025 14:00:34 +0000
Manifest this update: Sat 14 Jun 2025 14:00:34 +0000
Manifest next update: Sun 15 Jun 2025 14:00:34 +0000
Files and hashes: 1: BPD3XK7T8miFrGVjD_qu53pw69k.crl (hash: 8IHyY2CI208vAYyfIEfpobE+07S70FjyPJL1ZvyXgoA=)
2: ilRpOqqhCRrukRL5kvILbezdwjw.roa (hash: 09XWT+P0AZf+EnMM2PlCmZMY0UVdVh5S35frUm5Llew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/ac8587-db0d-4fe1-a39d-452ef6abe00f/1/BPD3XK7T8miFrGVjD_qu53pw69k.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/ac8587-db0d-4fe1-a39d-452ef6abe00f/1/BPD3XK7T8miFrGVjD_qu53pw69k.mft
rsync://rpki.ripe.net/repository/DEFAULT/BPD3XK7T8miFrGVjD_qu53pw69k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:bd:fd:b3:b9:22:32:29:47:3c:19:fe:b2:ca:3f:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04f0f75caed3f26885ac65630ffaaee77a70ebd9
Validity
Not Before: Jun 14 14:00:34 2025 GMT
Not After : Jun 15 14:00:34 2025 GMT
Subject: CN=7957add1330010057773038ca13dadc23467949a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:64:3b:31:8d:29:69:88:29:47:e1:c5:98:07:
c0:4f:ed:aa:35:9e:c2:41:5d:74:af:31:ad:45:3d:
8c:00:60:1b:6d:79:81:e7:92:fd:fb:31:22:a4:6c:
6d:16:e4:cb:4f:5f:01:2e:26:9d:8d:19:dc:d9:02:
ec:ed:96:37:3b:3c:38:63:95:0c:68:c6:e2:59:2b:
3e:30:c6:ab:5a:e0:08:47:2b:1e:ac:1d:47:b0:d9:
27:0d:a4:83:78:4c:a1:79:7c:fb:fa:cd:5e:5e:b3:
5c:54:4b:c9:5b:b6:bb:a7:bd:e6:5d:82:24:ea:71:
84:3b:e9:a6:83:08:cc:4e:94:14:d6:07:f6:ba:b4:
7f:1d:33:83:24:0e:8b:60:f6:78:6e:f3:9d:ec:4f:
db:2d:99:db:44:23:85:bf:da:df:84:9d:55:e9:3b:
a0:dd:a5:c0:e0:70:a4:5c:62:88:00:d4:84:6d:93:
39:31:f2:86:76:cd:7b:5c:1d:9e:53:61:98:af:3c:
4d:65:43:dd:01:27:c6:12:f4:ff:19:9a:c2:da:5d:
2d:21:24:bb:f3:73:17:89:27:df:0c:c0:50:c0:07:
0f:68:d4:cc:4c:d5:12:94:0a:c1:25:30:17:2d:44:
8f:a1:db:49:79:18:b7:e7:b8:d8:e4:b1:79:07:c9:
ce:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:57:AD:D1:33:00:10:05:77:73:03:8C:A1:3D:AD:C2:34:67:94:9A
X509v3 Authority Key Identifier:
keyid:04:F0:F7:5C:AE:D3:F2:68:85:AC:65:63:0F:FA:AE:E7:7A:70:EB:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BPD3XK7T8miFrGVjD_qu53pw69k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ac8587-db0d-4fe1-a39d-452ef6abe00f/1/BPD3XK7T8miFrGVjD_qu53pw69k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/ac8587-db0d-4fe1-a39d-452ef6abe00f/1/BPD3XK7T8miFrGVjD_qu53pw69k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:79:1c:89:79:41:68:0a:b0:8f:42:33:d1:5b:cb:c7:c1:5e:
41:86:9b:69:c5:11:17:6e:6b:05:99:97:e3:45:f8:4f:4d:03:
8b:2d:8d:6c:f0:e6:5f:51:69:d4:e1:ae:f9:46:43:12:ff:f0:
6a:54:13:67:f9:05:68:32:35:89:41:3b:f8:65:6d:d0:b6:09:
5f:85:f9:12:3b:a1:a5:32:3a:4c:ea:41:15:f1:aa:44:97:4a:
d7:6d:f8:27:a6:d5:0c:0d:0e:ef:da:15:5f:4e:25:c3:3f:b5:
d2:2a:5d:8e:7b:95:d7:df:85:e2:27:98:e3:1a:0b:fb:b7:13:
d2:30:16:ea:73:62:95:6c:53:0f:3c:15:63:53:41:cc:44:20:
2a:c7:77:1d:a1:52:07:e9:1d:7f:1b:37:c6:92:8a:b2:70:77:
89:8b:0d:7e:39:8a:8c:31:62:e8:4c:df:9c:ab:5f:0c:93:b0:
18:41:1c:02:a8:2f:d8:92:30:db:2c:09:f9:16:3d:c4:b9:52:
4c:f9:16:a2:ef:ce:ea:9b:33:d2:ef:d9:39:62:51:e5:b1:52:
7f:3e:ab:bc:af:d0:f1:30:a1:fb:29:b3:91:96:34:df:84:d5:
a6:9f:f7:8a:d1:be:1c:f0:64:7c:c1:77:aa:84:4c:1b:5f:c9:
0c:e7:75:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:45:21 2025 by rpki-client