Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/d31361-096d-4a8d-ab4f-c3dc739425a1/1/BpilU2SQ1wyON7dvMtpoTxIp2bo.mft
File: BpilU2SQ1wyON7dvMtpoTxIp2bo.mft (raw, json)
Hash identifier: x4XlSDRBw4bmd0QlXmVhgn/A7iJtmpKZR/ZOFX/ipik=
Subject key identifier: 4E:3B:CF:07:DD:3B:A7:9D:7F:09:BC:A5:AE:D3:75:FC:F2:EC:2F:05
Authority key identifier: 06:98:A5:53:64:90:D7:0C:8E:37:B7:6F:32:DA:68:4F:12:29:D9:BA
Certificate issuer: /CN=0698a5536490d70c8e37b76f32da684f1229d9ba
Certificate serial: 01976997654E3B30FF4F4ADDA15B3DF89A40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BpilU2SQ1wyON7dvMtpoTxIp2bo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/d31361-096d-4a8d-ab4f-c3dc739425a1/1/BpilU2SQ1wyON7dvMtpoTxIp2bo.mft
Manifest number: 42
Signing time: Fri 13 Jun 2025 14:00:18 +0000
Manifest this update: Fri 13 Jun 2025 14:00:18 +0000
Manifest next update: Sat 14 Jun 2025 14:00:18 +0000
Files and hashes: 1: 6I3Ul79wxRN6W37mo7nUpqwqt0s.roa (hash: J9bvPeLp8sfcjLoyxN9ggYT+mX3AB6I6+8a1daK3z1U=)
2: BpilU2SQ1wyON7dvMtpoTxIp2bo.crl (hash: 7DEBrDXpZOVvgo7s9GsGVNbkQxlyVdM+Gtxt2njEeV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/d31361-096d-4a8d-ab4f-c3dc739425a1/1/BpilU2SQ1wyON7dvMtpoTxIp2bo.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/d31361-096d-4a8d-ab4f-c3dc739425a1/1/BpilU2SQ1wyON7dvMtpoTxIp2bo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BpilU2SQ1wyON7dvMtpoTxIp2bo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:97:65:4e:3b:30:ff:4f:4a:dd:a1:5b:3d:f8:9a:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0698a5536490d70c8e37b76f32da684f1229d9ba
Validity
Not Before: Jun 13 14:00:18 2025 GMT
Not After : Jun 14 14:00:18 2025 GMT
Subject: CN=4e3bcf07dd3ba79d7f09bca5aed375fcf2ec2f05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f9:80:71:24:46:ce:e0:29:15:c8:31:c0:a8:
79:29:dd:b8:f7:03:1f:6f:a6:e7:d0:b0:b3:3b:1a:
80:22:04:af:91:74:3b:35:69:24:7f:b3:5d:a4:33:
f0:6a:3d:05:b0:45:f6:f0:1e:f8:2b:74:4d:ce:a0:
d5:39:6e:9c:ea:4a:b8:f3:10:95:dc:3c:1b:56:8d:
b1:81:c5:2f:fa:d3:3a:b0:4e:a1:61:29:37:83:94:
bf:07:65:33:c2:1f:9d:35:da:22:b3:23:ec:ba:cf:
06:97:c0:43:d0:68:10:e5:64:dd:bc:f2:90:2a:51:
ff:62:98:ec:da:32:97:3a:38:43:27:55:8e:69:9a:
6b:67:c6:01:91:06:86:6e:80:83:76:c5:be:8b:d5:
66:00:8e:18:9b:69:c7:41:4d:8c:52:7c:1e:7e:52:
cb:ea:5f:e7:3c:d4:07:77:19:15:30:a3:cc:97:80:
56:34:9f:14:f1:9a:fc:15:9e:b1:6c:78:56:00:0b:
23:c8:e8:8c:92:3a:4d:82:a9:e3:65:9b:b8:ba:1c:
4e:c7:87:37:5c:1f:4e:b3:75:c3:b9:65:a1:fd:1e:
93:eb:cd:7f:ec:03:4e:40:bd:de:a5:9b:a7:2d:4d:
71:42:ee:ea:e3:3e:d0:ff:ae:33:5f:91:61:47:e1:
3e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:3B:CF:07:DD:3B:A7:9D:7F:09:BC:A5:AE:D3:75:FC:F2:EC:2F:05
X509v3 Authority Key Identifier:
keyid:06:98:A5:53:64:90:D7:0C:8E:37:B7:6F:32:DA:68:4F:12:29:D9:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BpilU2SQ1wyON7dvMtpoTxIp2bo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d31361-096d-4a8d-ab4f-c3dc739425a1/1/BpilU2SQ1wyON7dvMtpoTxIp2bo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/d31361-096d-4a8d-ab4f-c3dc739425a1/1/BpilU2SQ1wyON7dvMtpoTxIp2bo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:4e:2e:6b:03:86:83:01:70:91:29:b9:3d:23:f5:a7:74:96:
d7:cf:bf:1b:77:a3:a7:a3:41:1a:47:e4:9b:b4:09:22:8d:f7:
36:c4:2a:cf:83:2f:3b:87:82:53:6a:81:d7:12:29:b8:e3:e7:
e9:6d:a4:9c:7b:41:7b:12:21:df:48:10:3b:79:88:24:c3:a0:
69:d0:a5:f8:c8:84:b2:3f:0b:53:c0:2a:12:5a:9d:aa:11:26:
88:ad:fe:9b:4e:4f:91:40:f4:af:8b:bf:bd:c0:d5:cd:ba:16:
99:75:a6:1d:fc:cc:64:1f:0d:9a:3b:d7:33:9b:32:aa:fa:af:
62:87:c8:e1:92:b6:cf:2c:d7:09:d6:c8:46:76:bc:4b:42:e5:
ef:2d:41:f1:5d:11:10:a4:24:31:41:69:2b:78:45:7f:9f:32:
8b:ca:4c:a4:50:64:21:fa:70:af:e9:7a:77:5e:23:42:48:01:
cf:1f:3b:3d:4a:e6:4a:dc:3d:87:f8:19:e1:b5:da:19:b2:0d:
5a:ab:6b:73:d3:b5:21:9d:f8:68:d8:5d:ca:fa:e6:f1:17:c2:
70:f3:f1:b4:33:7b:4e:c7:74:47:58:5e:82:ca:2c:ea:34:91:
0e:26:69:1d:84:61:1a:cd:e2:e9:22:34:e5:e2:7f:c3:6c:96:
81:5c:8e:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:58:41 2025 by rpki-client