Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/0da8f7-fe22-42fb-a329-7d45a9fc4ffc/1/Bcij-qGLbXF6ovdiIYG62L5bVaM.mft
File: Bcij-qGLbXF6ovdiIYG62L5bVaM.mft (raw, json)
Hash identifier: 33H088WDwWezXped/MCJb6AGrpCAgHWBMja/6hsM/vM=
Subject key identifier: 65:D3:27:28:D1:BB:CD:A5:50:5C:A7:DD:3E:BF:B4:0C:04:8A:2F:47
Authority key identifier: 05:C8:A3:FA:A1:8B:6D:71:7A:A2:F7:62:21:81:BA:D8:BE:5B:55:A3
Certificate issuer: /CN=05c8a3faa18b6d717aa2f7622181bad8be5b55a3
Certificate serial: 01976DAB4AE9DBEDA2EB49C53241F12DA95B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bcij-qGLbXF6ovdiIYG62L5bVaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/0da8f7-fe22-42fb-a329-7d45a9fc4ffc/1/Bcij-qGLbXF6ovdiIYG62L5bVaM.mft
Manifest number: 158E
Signing time: Sat 14 Jun 2025 09:00:31 +0000
Manifest this update: Sat 14 Jun 2025 09:00:31 +0000
Manifest next update: Sun 15 Jun 2025 09:00:31 +0000
Files and hashes: 1: Bcij-qGLbXF6ovdiIYG62L5bVaM.crl (hash: fBHLRaxzTA71+Wd9cbHadycsoAgEAc4XnrNzTvmCLlg=)
2: tNEEVzPUvK-ygDPmYLA5K9Cm79o.roa (hash: /IY44KTu7ulQ8DUrvEAnJ6AB/WTV2xBTm/RnCC+27ZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/0da8f7-fe22-42fb-a329-7d45a9fc4ffc/1/Bcij-qGLbXF6ovdiIYG62L5bVaM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/0da8f7-fe22-42fb-a329-7d45a9fc4ffc/1/Bcij-qGLbXF6ovdiIYG62L5bVaM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bcij-qGLbXF6ovdiIYG62L5bVaM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:ab:4a:e9:db:ed:a2:eb:49:c5:32:41:f1:2d:a9:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05c8a3faa18b6d717aa2f7622181bad8be5b55a3
Validity
Not Before: Jun 14 09:00:31 2025 GMT
Not After : Jun 15 09:00:31 2025 GMT
Subject: CN=65d32728d1bbcda5505ca7dd3ebfb40c048a2f47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a4:03:91:52:95:3e:6c:a0:d7:76:78:45:eb:
f0:c2:34:ec:cb:9a:11:fc:95:b3:d5:f0:c8:66:97:
a2:f1:c8:6a:f4:a2:db:56:89:fb:94:50:e8:6c:be:
83:a7:11:a9:25:ca:88:b7:83:f1:45:8c:f4:06:b7:
d7:87:d7:47:e9:5d:41:ab:9a:c2:15:3b:d3:60:9b:
a4:25:65:d5:c9:3e:eb:45:9f:0f:c0:bb:2b:f7:16:
67:66:89:70:14:e0:aa:55:3f:c8:aa:5e:f5:1e:94:
06:eb:cf:6f:eb:cb:61:67:1a:84:38:97:a2:32:61:
b6:ee:17:4a:ec:24:ab:6d:7a:b6:71:29:38:1c:10:
c5:ba:37:9a:fd:da:0b:e9:12:4b:de:10:99:79:7e:
44:35:53:66:26:10:a7:fa:56:4f:3c:3a:34:55:d5:
cc:db:57:19:3c:0a:4a:2d:76:3a:4b:2a:cc:4b:f6:
b6:14:a6:b6:33:01:8a:ce:67:0b:d8:b4:a2:12:6e:
cb:0e:f3:fe:dd:6e:1b:2d:4f:f0:fc:85:d4:3e:a0:
ed:d0:f7:85:90:d4:76:75:5c:d4:a1:1c:61:7a:a2:
60:e1:fb:e7:49:1c:5a:d0:91:5b:e8:1b:1f:81:88:
99:e9:f1:55:f9:1d:6b:16:d5:e2:b6:3b:cc:32:b3:
0d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:D3:27:28:D1:BB:CD:A5:50:5C:A7:DD:3E:BF:B4:0C:04:8A:2F:47
X509v3 Authority Key Identifier:
keyid:05:C8:A3:FA:A1:8B:6D:71:7A:A2:F7:62:21:81:BA:D8:BE:5B:55:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bcij-qGLbXF6ovdiIYG62L5bVaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/0da8f7-fe22-42fb-a329-7d45a9fc4ffc/1/Bcij-qGLbXF6ovdiIYG62L5bVaM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/0da8f7-fe22-42fb-a329-7d45a9fc4ffc/1/Bcij-qGLbXF6ovdiIYG62L5bVaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:b1:9b:ca:e6:66:d2:6b:5c:25:95:cb:41:92:98:cd:5d:e8:
6d:f4:66:0d:77:7f:a4:ba:ee:44:79:87:5e:4f:c8:8d:f8:85:
07:19:2a:0b:bd:ac:ac:f8:30:68:de:8a:08:84:92:85:1c:61:
28:1a:34:2c:95:3a:68:00:4a:06:05:18:a7:e7:d3:5d:f9:a8:
73:0b:1c:3b:e3:82:3f:3b:82:1a:f5:6f:8b:28:0d:d2:3d:ad:
af:b8:88:2f:1d:76:d9:a4:c7:19:af:ef:94:a8:3d:91:5a:b4:
12:bc:61:05:71:7d:e3:27:27:07:29:43:67:9c:c7:fa:67:2a:
0e:d4:95:22:42:37:5f:58:41:86:f3:9e:17:64:cd:5a:36:4b:
56:70:28:3d:a7:4f:48:31:a4:7d:39:4f:97:30:b8:f8:b1:c7:
cd:82:2f:ed:80:81:44:ab:a7:9d:fb:8a:84:a3:39:c9:90:a7:
da:c8:a7:9c:49:bf:99:c9:86:99:0c:26:c5:02:9d:4a:91:8b:
0f:c8:01:f0:9c:99:c3:87:22:5b:5c:6d:47:82:3e:6d:67:b2:
c4:0e:87:7f:de:ed:66:31:0f:29:5e:3f:1d:63:6b:91:6a:e8:
03:75:6a:57:1e:2b:4a:f2:a4:a0:fc:92:e7:8b:03:21:08:41:
e1:de:e9:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:21:17 2025 by rpki-client