Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.mft
File: Bdp1ccXrE7GuT0QXzv7CvXeQLi0.mft (raw, json)
Hash identifier: 1/OlJU+RWkDeA908rRmb82dsGLYreXuj7KLo2zqWs+k=
Subject key identifier: 0E:D3:EA:60:BF:EF:B5:0D:CF:D4:E8:79:4D:39:7F:97:AE:64:1C:74
Authority key identifier: 05:DA:75:71:C5:EB:13:B1:AE:4F:44:17:CE:FE:C2:BD:77:90:2E:2D
Certificate issuer: /CN=05da7571c5eb13b1ae4f4417cefec2bd77902e2d
Certificate serial: 0197820E0686FFD48519A0C35ED6E09A35CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.mft
Manifest number: 159B
Signing time: Wed 18 Jun 2025 08:00:46 +0000
Manifest this update: Wed 18 Jun 2025 08:00:46 +0000
Manifest next update: Thu 19 Jun 2025 08:00:46 +0000
Files and hashes: 1: AsYD6hoeMD1Ii3ouRsCjixk0isY.roa (hash: zcxHBop/y0fEgcQmkIj/4jrHcOuohd20eiO0g8A5mhM=)
2: Bdp1ccXrE7GuT0QXzv7CvXeQLi0.crl (hash: uCvbZP9Z7efXK2S0yfvMv8aW3NS1xj6qSgWEMS7t/j8=)
3: unS2BH6IRvMlWO0CeZZ9qSzMqA0.roa (hash: 7PVmOlO8Ugj501NmZwLgajumsSoAEyC9CKRs3IKLmtk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:82:0e:06:86:ff:d4:85:19:a0:c3:5e:d6:e0:9a:35:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05da7571c5eb13b1ae4f4417cefec2bd77902e2d
Validity
Not Before: Jun 18 08:00:46 2025 GMT
Not After : Jun 19 08:00:46 2025 GMT
Subject: CN=0ed3ea60bfefb50dcfd4e8794d397f97ae641c74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d8:8b:0b:d4:08:b0:e4:e5:97:7e:ed:87:e0:
8d:34:e3:1c:b6:b2:99:42:15:75:53:a2:e2:7e:33:
c2:ed:de:93:f1:af:18:ff:80:da:37:ff:b4:14:38:
a5:02:96:2c:21:5f:de:14:26:f0:3e:f5:19:39:4a:
42:34:1b:1b:48:3c:7b:6f:b7:06:df:32:92:6c:d7:
08:22:fb:ae:e7:c2:af:38:9d:8c:a3:15:ad:d8:f3:
62:cf:34:84:92:50:e7:6d:3d:75:81:28:42:9f:38:
b5:2b:6c:6c:66:02:3e:b1:10:90:a7:95:c4:16:88:
af:b4:e0:49:5c:c8:db:93:61:fe:02:13:4d:c0:02:
5a:b5:bf:9c:72:f0:7a:6d:43:fc:fd:17:d5:6b:64:
f4:27:5b:92:5b:ad:d1:87:fb:d5:ea:f4:63:52:e0:
4e:ae:cf:28:80:2e:f4:a1:f0:97:8c:08:21:84:56:
bf:7a:12:ec:58:0b:0e:97:ab:64:cb:0f:f7:be:36:
08:cb:16:d5:21:be:91:5f:4b:d7:1b:86:31:c7:85:
b0:a1:75:61:12:22:98:4d:78:0d:7b:89:d7:ba:d3:
49:c4:7b:0e:27:c1:20:61:a1:ca:c4:2b:dd:d3:03:
c6:17:4a:85:04:eb:38:55:ea:7a:5e:c7:e4:ec:86:
9a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:D3:EA:60:BF:EF:B5:0D:CF:D4:E8:79:4D:39:7F:97:AE:64:1C:74
X509v3 Authority Key Identifier:
keyid:05:DA:75:71:C5:EB:13:B1:AE:4F:44:17:CE:FE:C2:BD:77:90:2E:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:6b:d3:77:60:f6:53:c4:d4:46:12:14:80:14:2a:fc:fb:ae:
0c:e1:05:4a:7a:17:78:2f:96:fc:36:f2:10:58:db:24:40:16:
d2:bd:0b:1e:a5:82:d4:ad:77:27:11:da:1c:c3:04:ba:56:d4:
e7:4e:2f:78:8c:c9:c6:33:20:06:77:07:c8:61:b4:2f:03:c4:
8a:88:56:98:9e:da:a1:fc:0a:6f:1e:3c:e2:6c:50:4a:9c:85:
8a:67:b2:33:44:92:eb:24:fb:c8:24:ae:ff:d7:33:83:88:c4:
1e:44:17:81:4c:1b:16:b0:10:c7:b5:77:20:74:c2:25:3a:d9:
3e:8f:9f:f9:0f:52:49:50:5f:e4:0a:05:88:3a:1d:cf:3a:8c:
bf:32:9e:f9:09:94:fd:e4:b4:cc:9d:8d:cf:08:4c:0f:04:32:
2c:95:fc:0a:70:78:45:85:86:35:46:76:a8:ac:4f:ca:0a:05:
bf:25:db:a7:79:14:2c:48:d1:85:14:9a:89:77:14:f4:d6:51:
0d:3e:df:61:43:a7:ea:66:59:a7:11:47:96:39:ff:11:40:26:
75:9f:22:11:41:4c:35:3a:16:b2:05:29:01:11:ce:9b:72:3d:
95:96:9e:4d:f6:e3:4a:c7:50:98:aa:17:b0:50:b4:5b:d0:4e:
e2:0f:f1:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 13:54:26 2025 by rpki-client