Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/02445c-81f9-47b3-9385-34f7d5131367/1/B4h86xy9ECnvinbfd_EVK7RztkM.mft
File: B4h86xy9ECnvinbfd_EVK7RztkM.mft (raw, json)
Hash identifier: mz0sO+uWGlVLbD+OkRmfsh31u9aeydObZ2q17oXvBsU=
Subject key identifier: 05:89:E6:B9:33:8E:18:BC:F7:5D:EE:50:0D:80:31:08:81:1E:D9:F5
Authority key identifier: 07:88:7C:EB:1C:BD:10:29:EF:8A:76:DF:77:F1:15:2B:B4:73:B6:43
Certificate issuer: /CN=07887ceb1cbd1029ef8a76df77f1152bb473b643
Certificate serial: 01976D064F9DFB7DB1F86608577A7A051EDA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B4h86xy9ECnvinbfd_EVK7RztkM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/02445c-81f9-47b3-9385-34f7d5131367/1/B4h86xy9ECnvinbfd_EVK7RztkM.mft
Manifest number: 1590
Signing time: Sat 14 Jun 2025 06:00:19 +0000
Manifest this update: Sat 14 Jun 2025 06:00:19 +0000
Manifest next update: Sun 15 Jun 2025 06:00:19 +0000
Files and hashes: 1: B4h86xy9ECnvinbfd_EVK7RztkM.crl (hash: NKP5iLl4kKjSPpxB4Hg0j3N5mEjiW3Rwz5Pep0zYvBo=)
2: Ks3MoM-JR5cSwUbE7LPlz8FV1Eo.roa (hash: cBU5pWYgZPrs12GC6WG1gFaq/k9W24N+lnE09kgu154=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/02445c-81f9-47b3-9385-34f7d5131367/1/B4h86xy9ECnvinbfd_EVK7RztkM.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/02445c-81f9-47b3-9385-34f7d5131367/1/B4h86xy9ECnvinbfd_EVK7RztkM.mft
rsync://rpki.ripe.net/repository/DEFAULT/B4h86xy9ECnvinbfd_EVK7RztkM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:06:4f:9d:fb:7d:b1:f8:66:08:57:7a:7a:05:1e:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07887ceb1cbd1029ef8a76df77f1152bb473b643
Validity
Not Before: Jun 14 06:00:19 2025 GMT
Not After : Jun 15 06:00:19 2025 GMT
Subject: CN=0589e6b9338e18bcf75dee500d803108811ed9f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:66:13:0a:9a:0d:91:5f:22:c2:ab:89:6f:a3:
a0:4d:a4:93:3f:fb:41:64:8a:df:2e:50:48:b1:ef:
82:90:3a:17:94:6f:47:8a:88:1c:d6:34:78:ea:eb:
3c:b0:f3:a9:78:78:c6:a4:ef:06:ee:c6:bb:8f:6c:
74:fe:1b:6a:98:76:c0:c4:c4:35:1b:29:73:9d:4d:
bf:a7:0c:2b:e4:13:13:dd:d4:e0:66:ff:b3:c8:ef:
d1:08:fa:45:4d:59:90:db:86:50:51:98:fa:75:0b:
62:31:c5:31:f0:40:94:43:9a:e1:21:52:ae:cb:06:
07:ac:0f:83:17:ff:32:9b:f8:be:09:64:ac:cf:d5:
a4:83:56:47:4d:eb:a3:33:69:8d:26:bb:fd:46:ea:
8c:21:15:75:b0:ea:9c:c5:38:a8:ba:43:50:36:01:
df:39:f1:7e:25:b8:4e:d8:28:39:0d:4b:6b:b2:35:
cc:8d:b3:86:82:e0:05:dc:29:60:71:06:3d:eb:21:
2f:00:6c:cc:ce:ce:26:5a:04:b1:e9:f5:05:48:47:
68:5f:78:d7:6b:85:8e:97:d3:fb:2d:97:79:9e:b9:
09:93:dc:d1:fa:3a:53:f3:7b:dc:70:9e:c1:e3:06:
92:3d:4d:ae:fc:65:79:b0:ab:29:24:33:41:5e:83:
0a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:89:E6:B9:33:8E:18:BC:F7:5D:EE:50:0D:80:31:08:81:1E:D9:F5
X509v3 Authority Key Identifier:
keyid:07:88:7C:EB:1C:BD:10:29:EF:8A:76:DF:77:F1:15:2B:B4:73:B6:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B4h86xy9ECnvinbfd_EVK7RztkM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/02445c-81f9-47b3-9385-34f7d5131367/1/B4h86xy9ECnvinbfd_EVK7RztkM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/02445c-81f9-47b3-9385-34f7d5131367/1/B4h86xy9ECnvinbfd_EVK7RztkM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:f7:37:36:5a:0d:af:1e:c3:7e:f4:3f:b7:b9:b0:c9:9f:9c:
8c:ef:b7:03:44:2b:59:58:a4:4b:81:da:f0:ea:8b:bf:14:be:
9c:c6:44:8b:00:f1:94:cc:48:41:31:8b:61:54:d3:d3:15:8b:
86:c7:a8:1a:26:bb:7b:a7:19:b1:ee:1a:f0:9f:47:28:5f:41:
4c:83:d2:9e:ae:9b:5f:58:03:ad:ec:21:bb:df:95:a1:0e:ae:
b7:37:25:b2:a9:6f:5e:38:5b:28:84:be:61:35:55:e4:a2:24:
ba:d3:eb:77:d0:18:04:4c:c0:da:30:c4:b9:89:15:89:22:cf:
20:48:ee:3e:9b:92:c2:95:39:21:53:cb:1d:35:ca:a0:5a:d0:
86:63:63:4e:70:f9:22:30:f3:58:97:f7:d9:6e:9a:67:c7:cd:
1a:06:74:34:df:83:eb:94:26:2c:0c:ff:16:d7:7a:33:e1:84:
42:14:94:89:ef:ea:3a:2a:05:19:c3:dc:20:c3:3e:13:f2:6a:
37:33:3b:94:81:c6:49:30:6e:dd:2f:ea:27:6b:e5:04:1b:a1:
f2:66:e0:13:28:5f:f8:ea:a1:20:61:43:46:dc:c4:d5:30:05:
37:74:2a:13:f7:23:5b:ae:4a:90:5b:75:6d:ab:f4:a5:32:de:
7f:8a:1f:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:31:11 2025 by rpki-client