Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.mft
File: BXEuiJSdWkNaM-cEDJ-356gkQ5U.mft (raw, json)
Hash identifier: BYHTXaeNf59xyL4FssOA67/8B3H5sD15L9btqFiWhnA=
Subject key identifier: CA:68:12:2F:C1:DB:83:14:03:FB:7B:D6:12:82:F4:5C:19:78:38:D3
Authority key identifier: 05:71:2E:88:94:9D:5A:43:5A:33:E7:04:0C:9F:B7:E7:A8:24:43:95
Certificate issuer: /CN=05712e88949d5a435a33e7040c9fb7e7a8244395
Certificate serial: 01976EBDFE6BE85C73BBF41567BD0863364A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BXEuiJSdWkNaM-cEDJ-356gkQ5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.mft
Manifest number: 1292
Signing time: Sat 14 Jun 2025 14:00:34 +0000
Manifest this update: Sat 14 Jun 2025 14:00:34 +0000
Manifest next update: Sun 15 Jun 2025 14:00:34 +0000
Files and hashes: 1: BXEuiJSdWkNaM-cEDJ-356gkQ5U.crl (hash: 8+wzZyw8WpwyrEjraPKlktRpLvCF8XJMyKRh2EGLEiI=)
2: Sj4J_mFP2lQkR8Pqu4-vUWhntlo.roa (hash: OyHUO8zUzkjWGYsEn0Hm1G4SAQZ+8DrBTjWOD/M90zc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/BXEuiJSdWkNaM-cEDJ-356gkQ5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:bd:fe:6b:e8:5c:73:bb:f4:15:67:bd:08:63:36:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05712e88949d5a435a33e7040c9fb7e7a8244395
Validity
Not Before: Jun 14 14:00:34 2025 GMT
Not After : Jun 15 14:00:34 2025 GMT
Subject: CN=ca68122fc1db831403fb7bd61282f45c197838d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:4c:c8:ed:7a:b0:36:a2:8a:df:26:ca:31:16:
f4:53:20:fe:dc:a1:93:11:87:0f:0d:35:4c:6d:ea:
e9:32:78:fa:de:18:0d:ab:80:5a:53:05:59:a9:bb:
10:9c:d2:cc:24:08:bb:7e:6b:0c:73:a3:7d:9c:3c:
8e:5a:0a:34:e0:23:44:fe:11:ab:5b:c9:f8:db:a2:
67:97:75:cd:bb:d4:c7:45:c1:52:d0:99:62:a1:8f:
58:c8:e8:8b:9a:aa:48:f5:6f:a2:a8:8d:20:f4:25:
8e:d7:8d:e2:e0:8c:cf:a4:68:30:44:97:cf:44:91:
39:c5:95:2b:a1:66:31:d8:2e:8b:8a:be:7f:ed:15:
b7:a8:48:52:b3:9b:b9:06:87:0c:30:4a:96:5e:78:
52:bf:0e:fa:0c:a2:9c:ed:e1:5f:43:b2:98:f9:1e:
08:ec:1e:c0:6c:a7:3b:e2:bd:a5:80:19:54:be:83:
85:19:67:9d:19:11:ab:7d:3e:e9:0f:c7:7b:aa:db:
c1:47:02:46:85:16:50:32:38:d2:e2:b4:97:c8:b9:
93:25:c1:bd:12:82:78:f3:2e:00:d7:70:54:b3:58:
a1:f3:33:c9:3b:a1:80:4c:81:b6:99:bd:97:bc:7d:
00:93:73:c5:dc:5a:27:e6:b7:a8:ae:ea:2b:43:60:
67:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:68:12:2F:C1:DB:83:14:03:FB:7B:D6:12:82:F4:5C:19:78:38:D3
X509v3 Authority Key Identifier:
keyid:05:71:2E:88:94:9D:5A:43:5A:33:E7:04:0C:9F:B7:E7:A8:24:43:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BXEuiJSdWkNaM-cEDJ-356gkQ5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/2c950e-7d3a-4cad-841f-2c014b740c3b/1/BXEuiJSdWkNaM-cEDJ-356gkQ5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:15:6a:0c:55:a7:d6:89:4b:c0:da:e9:0f:b4:13:20:e8:e2:
43:f0:23:af:e1:15:1c:2e:b4:5c:00:3c:c8:f6:62:b6:97:f1:
f3:3a:44:1e:c0:26:eb:b8:99:40:61:17:d1:51:01:72:91:d0:
2f:1b:59:b6:03:a8:c8:ee:63:19:c0:fe:ce:56:8c:7d:c4:76:
f6:85:e2:47:3e:16:80:4c:f0:18:1d:68:6d:12:b6:e4:a9:98:
5b:f0:ce:f6:a0:72:52:d0:49:05:db:54:b3:cc:b0:22:fb:61:
d1:57:2e:36:a8:05:2b:7f:6f:aa:1d:0d:06:d8:6a:d4:9a:68:
5c:f5:e3:5b:a0:e3:16:ad:8b:41:83:56:bb:a6:45:3b:d6:40:
7b:71:bb:6f:25:4f:61:92:62:9b:a5:93:82:ce:3e:29:b3:c0:
f0:56:2d:00:42:05:8f:dd:b8:a6:eb:d2:24:c4:94:42:97:dc:
ad:4e:c8:35:bf:0e:70:41:d4:b5:db:c6:b8:1b:d8:d1:8f:ac:
9f:7b:86:a2:a6:ed:26:88:41:40:71:cc:3f:f7:0f:8c:94:91:
b8:63:69:f8:27:01:ae:20:11:91:45:9c:3d:df:97:eb:9c:3e:
f1:0b:f1:1d:eb:06:1b:f8:cc:c9:f8:4d:d9:7f:3a:33:3e:34:
f9:b4:15:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:13:46 2025 by rpki-client