Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/f14bc3-1f96-4da8-a16f-7b45be0465aa/1/B2sBhcq7ZoQ9Z_iGAbwKeaLuvK0.mft
File: B2sBhcq7ZoQ9Z_iGAbwKeaLuvK0.mft (raw, json)
Hash identifier: rv8Rle7p0Qd3/v35Z8Q3YNQ03JsaAEci4/tMmVLA3x8=
Subject key identifier: 1E:60:A6:E7:F0:F2:3A:60:9C:B3:1F:C4:A6:6F:7C:DE:17:C6:88:5F
Authority key identifier: 07:6B:01:85:CA:BB:66:84:3D:67:F8:86:01:BC:0A:79:A2:EE:BC:AD
Certificate issuer: /CN=076b0185cabb66843d67f88601bc0a79a2eebcad
Certificate serial: 019777C10EECF5CDEC2D6EF79C6BC53941B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B2sBhcq7ZoQ9Z_iGAbwKeaLuvK0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/f14bc3-1f96-4da8-a16f-7b45be0465aa/1/B2sBhcq7ZoQ9Z_iGAbwKeaLuvK0.mft
Manifest number: 0CB6
Signing time: Mon 16 Jun 2025 08:00:30 +0000
Manifest this update: Mon 16 Jun 2025 08:00:30 +0000
Manifest next update: Tue 17 Jun 2025 08:00:30 +0000
Files and hashes: 1: B2sBhcq7ZoQ9Z_iGAbwKeaLuvK0.crl (hash: jWNJBojvB4Oq1hTdSUah1wzWeMTBk+ryYzkoLKwujxE=)
2: bKjmtKZ3Q_dbBV89_TPqXOrr9l8.roa (hash: fkweW281SglBT4coSKgBxiwmush3g6XftqB0c+xmAws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/f14bc3-1f96-4da8-a16f-7b45be0465aa/1/B2sBhcq7ZoQ9Z_iGAbwKeaLuvK0.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/f14bc3-1f96-4da8-a16f-7b45be0465aa/1/B2sBhcq7ZoQ9Z_iGAbwKeaLuvK0.mft
rsync://rpki.ripe.net/repository/DEFAULT/B2sBhcq7ZoQ9Z_iGAbwKeaLuvK0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:77:c1:0e:ec:f5:cd:ec:2d:6e:f7:9c:6b:c5:39:41:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=076b0185cabb66843d67f88601bc0a79a2eebcad
Validity
Not Before: Jun 16 08:00:30 2025 GMT
Not After : Jun 17 08:00:30 2025 GMT
Subject: CN=1e60a6e7f0f23a609cb31fc4a66f7cde17c6885f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:aa:88:e2:27:9d:f3:56:64:b5:03:38:8f:88:
4e:29:9f:72:c2:2d:66:91:16:c5:c7:af:5f:73:91:
36:17:24:ba:43:2d:8e:71:28:86:b6:d5:1d:70:22:
d3:1a:7e:5a:b0:0f:f5:eb:f8:48:b1:2f:b9:01:b9:
d3:ef:75:4d:69:64:f2:ee:af:a2:8b:d8:67:8a:01:
91:15:d3:31:32:c6:1c:be:b7:7c:7b:93:47:58:db:
10:d9:e8:f3:b8:4a:99:ea:37:7c:b4:58:d4:eb:fc:
2a:a9:81:bb:f6:c2:3a:19:6c:4d:3f:c6:ea:03:7b:
99:cd:d0:34:bd:af:00:04:6a:e8:4a:16:a3:fc:36:
92:99:58:77:96:4b:3a:4b:7d:2c:a0:a9:be:1c:49:
42:69:62:0b:fb:be:3e:1f:3a:92:b1:e2:6b:10:7d:
58:28:b6:d6:71:d2:39:c9:3e:b1:ea:2a:0b:70:f1:
5b:1d:2a:84:09:5d:f8:43:f7:60:f4:8e:f8:d9:e1:
64:db:10:84:ea:31:1a:23:58:99:d9:86:29:d6:80:
bf:e9:30:3f:2f:84:84:5d:1a:b4:8b:e7:5c:14:f9:
67:bc:de:60:bf:bc:39:5a:4b:46:9b:4d:93:c6:b2:
7c:f0:89:0c:ec:ca:81:31:73:fe:9a:13:cf:63:47:
3c:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:60:A6:E7:F0:F2:3A:60:9C:B3:1F:C4:A6:6F:7C:DE:17:C6:88:5F
X509v3 Authority Key Identifier:
keyid:07:6B:01:85:CA:BB:66:84:3D:67:F8:86:01:BC:0A:79:A2:EE:BC:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B2sBhcq7ZoQ9Z_iGAbwKeaLuvK0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/f14bc3-1f96-4da8-a16f-7b45be0465aa/1/B2sBhcq7ZoQ9Z_iGAbwKeaLuvK0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/f14bc3-1f96-4da8-a16f-7b45be0465aa/1/B2sBhcq7ZoQ9Z_iGAbwKeaLuvK0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:31:d2:9f:1c:15:d7:ed:81:8b:05:b5:25:18:1c:10:87:46:
09:2b:6c:23:df:4f:3e:c8:ef:eb:2b:2b:45:1f:f7:36:77:2c:
59:3c:72:c1:34:e2:66:f6:c5:18:da:bb:a6:7e:58:af:a3:66:
19:3c:19:5b:36:69:b1:ba:22:93:4c:2a:14:c7:b3:08:1d:40:
13:cf:e3:b4:53:89:90:10:64:a8:57:e3:2e:6d:d6:63:f8:0e:
92:6a:11:62:ab:9a:c2:c1:63:5c:d5:23:71:4e:69:d7:88:f2:
90:41:b5:cb:90:be:20:62:96:4a:e7:d1:75:20:e0:10:f6:5f:
eb:b2:ee:9a:8d:8f:1f:de:21:d8:9c:e1:30:2f:a2:9e:f2:3f:
6f:6c:69:db:d3:25:bb:74:c9:86:14:4e:a7:4d:89:34:23:6f:
d6:14:1c:ed:5a:00:91:af:60:11:78:a6:0e:d4:03:59:3f:2c:
07:fc:48:c8:dc:a9:7c:46:3a:1c:b1:86:28:69:a1:92:b7:25:
65:c8:17:5f:4c:20:54:73:b0:6d:6c:2c:08:dc:e4:2a:07:e9:
1c:06:d2:1a:8b:d0:51:df:2d:87:c6:32:18:a6:3e:38:1e:20:
3a:91:93:ce:40:9e:8f:49:34:67:5b:78:92:60:92:39:ed:18:
69:81:c3:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 10:42:01 2025 by rpki-client