Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/fab918-8f4d-4ede-bad1-31b950270536/1/BpCRPbvu2t3pXc5HBFJihOeufMo.mft
File: BpCRPbvu2t3pXc5HBFJihOeufMo.mft (raw, json)
Hash identifier: 0WybSX9X+09P6s+nzTXsR3nkalwERfd2XrDZcDYV1Dg=
Subject key identifier: 85:45:46:9B:10:31:35:0D:2B:7A:28:5E:C6:B2:66:B3:8D:F3:88:6F
Authority key identifier: 06:90:91:3D:BB:EE:DA:DD:E9:5D:CE:47:04:52:62:84:E7:AE:7C:CA
Certificate issuer: /CN=0690913dbbeedadde95dce4704526284e7ae7cca
Certificate serial: 01976997D8FB8C646841E52FCECFB6DBB54F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BpCRPbvu2t3pXc5HBFJihOeufMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/fab918-8f4d-4ede-bad1-31b950270536/1/BpCRPbvu2t3pXc5HBFJihOeufMo.mft
Manifest number: 151D
Signing time: Fri 13 Jun 2025 14:00:48 +0000
Manifest this update: Fri 13 Jun 2025 14:00:48 +0000
Manifest next update: Sat 14 Jun 2025 14:00:48 +0000
Files and hashes: 1: BpCRPbvu2t3pXc5HBFJihOeufMo.crl (hash: OX/PTLVfe2uBZJGYvi4NKaXJrQAhSAhWZQOL9h+DNg4=)
2: Iy7lkqpbyaSDL2grrU_SdETf7DQ.roa (hash: DorRUxYefmWL1rp1az3xVIzdxI7JSTisHh4gg2RZ6eo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/fab918-8f4d-4ede-bad1-31b950270536/1/BpCRPbvu2t3pXc5HBFJihOeufMo.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/fab918-8f4d-4ede-bad1-31b950270536/1/BpCRPbvu2t3pXc5HBFJihOeufMo.mft
rsync://rpki.ripe.net/repository/DEFAULT/BpCRPbvu2t3pXc5HBFJihOeufMo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:97:d8:fb:8c:64:68:41:e5:2f:ce:cf:b6:db:b5:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0690913dbbeedadde95dce4704526284e7ae7cca
Validity
Not Before: Jun 13 14:00:48 2025 GMT
Not After : Jun 14 14:00:48 2025 GMT
Subject: CN=8545469b1031350d2b7a285ec6b266b38df3886f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a9:9b:63:57:ab:11:31:de:7c:1d:06:b5:27:
e4:66:59:6f:e7:ce:b4:8a:81:0f:3d:ee:3e:e9:2f:
ce:f1:0f:22:6d:08:e8:06:5b:e2:d3:11:0a:d6:37:
2c:ff:6a:c7:c1:6f:6b:d6:9f:d0:c9:37:25:40:a4:
2e:9e:3c:6a:26:cd:2b:ad:30:28:bf:23:e3:ad:31:
14:78:6a:b1:28:58:da:eb:21:5c:28:0f:0e:3d:a9:
9d:f6:86:8e:17:31:41:94:fe:30:c2:ec:45:b3:fc:
70:f6:04:8e:83:55:52:74:5b:c0:a8:15:bd:85:cc:
e0:7f:eb:a7:5c:08:0e:94:78:cf:be:05:14:c6:95:
72:4d:2c:17:f8:e3:64:e5:da:b5:b1:1f:22:ae:03:
b5:84:e3:ee:57:a0:18:43:6c:a6:df:87:e2:e5:79:
a2:5b:b9:54:d2:ba:7e:0c:48:5d:03:6d:cf:e0:10:
39:42:38:7a:8b:aa:5e:7c:92:a5:1d:a4:af:34:6a:
b1:80:ee:55:e3:27:62:00:64:50:d5:15:9e:5e:29:
8c:66:cd:9a:d1:d2:96:5c:ed:e6:73:2f:f0:de:ab:
11:3a:2b:d6:53:6c:60:04:47:ed:30:ce:07:9c:b3:
8d:c8:d1:e8:9f:a2:b2:39:d5:6b:f8:56:28:5f:3f:
c7:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:45:46:9B:10:31:35:0D:2B:7A:28:5E:C6:B2:66:B3:8D:F3:88:6F
X509v3 Authority Key Identifier:
keyid:06:90:91:3D:BB:EE:DA:DD:E9:5D:CE:47:04:52:62:84:E7:AE:7C:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BpCRPbvu2t3pXc5HBFJihOeufMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/fab918-8f4d-4ede-bad1-31b950270536/1/BpCRPbvu2t3pXc5HBFJihOeufMo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/fab918-8f4d-4ede-bad1-31b950270536/1/BpCRPbvu2t3pXc5HBFJihOeufMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:79:04:7c:99:e1:2c:4c:5c:66:09:7b:e7:85:68:e5:0f:aa:
9a:93:ec:44:d2:f6:16:40:de:f2:1a:c3:2b:bd:66:82:93:b4:
1c:09:fa:32:e1:99:d6:77:83:24:e0:1b:ea:2c:53:b8:8f:cc:
3b:67:11:e1:61:38:9d:aa:9b:89:c7:97:e2:3f:0a:d5:7a:9b:
80:a4:9b:7b:19:13:da:c8:7b:96:e4:86:4d:eb:3f:10:42:73:
6a:ee:30:ce:f2:5b:cd:06:74:7a:ec:f4:72:46:9e:3c:c0:9c:
8e:df:66:78:da:e2:3f:dd:e9:e3:87:0e:e5:63:54:b9:27:58:
4d:58:50:7f:cf:5b:4f:1e:08:14:5d:09:96:c6:ac:cd:64:00:
6e:2b:de:32:99:e2:5c:93:39:b0:01:f0:6c:14:1a:25:a1:b8:
3f:a8:1e:d9:05:70:f1:a7:36:b5:4c:b4:b5:c4:f0:e2:82:d3:
29:72:92:fa:bb:bc:83:a6:29:9e:4f:d7:b2:0d:9c:80:fb:cf:
21:be:75:3a:46:b8:a6:a7:d0:49:61:d8:11:11:74:ad:12:aa:
77:6b:60:ef:a8:8b:69:23:59:ab:20:67:64:37:70:71:4f:12:
b6:12:11:69:3b:e4:05:81:d4:fb:80:e4:69:a2:6b:98:5a:57:
22:3b:52:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 20:02:21 2025 by rpki-client