Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/fa6f43-7dd1-405b-8dce-29b038084aa6/1/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.mft
File: Bh4lVOUgN3gdEHyPgxnJPlmYbwU.mft (raw, json)
Hash identifier: zJXFUvCMs4rqoFoZUgNSJFy7B2w282xV7von1jhXS7g=
Subject key identifier: 9E:39:16:90:4C:96:CB:E3:6C:84:8F:88:CC:14:09:44:4D:12:F2:96
Authority key identifier: 06:1E:25:54:E5:20:37:78:1D:10:7C:8F:83:19:C9:3E:59:98:6F:05
Certificate issuer: /CN=061e2554e52037781d107c8f8319c93e59986f05
Certificate serial: 019771F690D8707EA9DBC80772DD75B4FC1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/fa6f43-7dd1-405b-8dce-29b038084aa6/1/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.mft
Manifest number: 0910
Signing time: Sun 15 Jun 2025 05:01:13 +0000
Manifest this update: Sun 15 Jun 2025 05:01:13 +0000
Manifest next update: Mon 16 Jun 2025 05:01:13 +0000
Files and hashes: 1: 1uAuKLt072-ZQlDEaEvJ4cVZt0U.roa (hash: VxasM346e46c28SKyluMBsYSF6rJX7VQBKo0/PUfiM8=)
2: Bh4lVOUgN3gdEHyPgxnJPlmYbwU.crl (hash: B603DD5mT+LdrN9HB+gJuRq6MNOD3WW1W+DPn/b2KxQ=)
3: FOTPh9BPoJbjEvO_XqYw0Ecj8wo.roa (hash: Tk8RIwgbHfyEByRiqFBz9C7JpjarILl3F0YIF0cWF/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/fa6f43-7dd1-405b-8dce-29b038084aa6/1/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/fa6f43-7dd1-405b-8dce-29b038084aa6/1/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:f6:90:d8:70:7e:a9:db:c8:07:72:dd:75:b4:fc:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=061e2554e52037781d107c8f8319c93e59986f05
Validity
Not Before: Jun 15 05:01:13 2025 GMT
Not After : Jun 16 05:01:13 2025 GMT
Subject: CN=9e3916904c96cbe36c848f88cc1409444d12f296
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:10:66:a7:92:03:64:39:2a:12:5f:fc:91:12:
9b:79:65:83:c7:16:32:54:81:3a:00:12:39:3e:e3:
85:21:79:e0:c5:6c:78:71:85:71:f6:75:dd:8a:5d:
c5:1b:df:fe:c0:7c:b4:1a:ab:3f:b8:45:67:f8:8e:
76:da:e5:a0:a4:3c:88:3e:4c:5f:67:bf:dc:55:e7:
e6:6f:ce:4c:f0:ff:44:53:6a:fd:d7:c6:6a:2d:b3:
79:56:8d:89:32:3a:3f:50:f4:f1:5d:39:d8:83:07:
5c:92:a3:c2:bb:ea:20:18:9c:c0:3a:37:a3:42:7e:
25:e6:dd:a9:62:64:bd:ce:0f:bf:c2:aa:97:49:88:
78:83:7a:1a:af:6b:f6:b7:0f:0f:02:34:8c:56:be:
59:71:00:d4:32:0e:e3:2d:f2:10:c1:c0:a7:0b:bd:
77:d4:a2:52:76:de:2a:06:fb:7d:85:75:88:be:f8:
41:c4:95:37:aa:8c:37:a9:17:e2:09:ba:80:3c:30:
de:3b:00:8e:28:d2:68:a2:d5:8c:61:5a:f5:d3:fd:
28:9b:33:26:de:50:dc:45:88:9a:19:0b:90:a4:41:
ce:d8:03:fb:15:4f:db:ea:ad:67:3c:4f:eb:86:2e:
0b:e5:75:ff:5a:84:62:ed:a1:e0:51:9d:0b:7f:f4:
ca:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:39:16:90:4C:96:CB:E3:6C:84:8F:88:CC:14:09:44:4D:12:F2:96
X509v3 Authority Key Identifier:
keyid:06:1E:25:54:E5:20:37:78:1D:10:7C:8F:83:19:C9:3E:59:98:6F:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/fa6f43-7dd1-405b-8dce-29b038084aa6/1/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/fa6f43-7dd1-405b-8dce-29b038084aa6/1/Bh4lVOUgN3gdEHyPgxnJPlmYbwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:b2:3f:3c:35:1c:d2:b5:46:21:65:4d:19:c0:d0:16:07:48:
2c:3b:03:58:ac:05:ec:76:2b:1c:eb:f2:4d:92:e9:1a:39:c8:
07:9e:0c:73:06:c5:b9:8f:3f:38:44:02:a4:55:de:0c:6d:05:
e9:2e:2b:a3:36:72:5d:2d:f6:0b:65:ea:20:ef:b1:8f:59:bd:
d3:a7:be:e4:cb:01:03:f3:a1:ca:d5:39:6b:11:a0:a1:87:f3:
e4:c5:61:06:e9:07:5e:91:99:e0:fe:67:c8:fe:a3:d3:1e:9e:
4f:7f:32:2c:e3:21:6e:52:5d:79:c1:0c:72:e7:ad:05:7f:48:
53:1f:b5:9b:01:23:d9:ba:fb:e4:db:6b:20:19:29:82:e5:c2:
11:4e:34:ef:43:73:62:10:70:29:8b:e3:ac:b5:af:34:49:55:
04:79:2a:0d:31:93:55:bf:81:ad:4d:da:9b:db:e3:53:83:8c:
c8:d3:5e:5c:46:e1:37:ae:60:9b:4a:df:66:67:68:59:0e:33:
2a:23:d8:11:c8:f8:d6:19:fb:3b:c8:1b:34:21:d4:74:03:e3:
f3:c4:e3:3f:cf:9e:d0:6b:87:35:57:b7:38:3f:9d:57:2e:29:
d4:be:a3:02:0d:af:12:56:f6:80:60:f8:19:d3:10:58:7c:b3:
7b:90:99:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:34:49 2025 by rpki-client