Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/e3eef7-baab-4d51-b16b-27fef685cbb2/1/BXe7kyT8dQpT4FWEjvBpA0FsPgg.mft
File: BXe7kyT8dQpT4FWEjvBpA0FsPgg.mft (raw, json)
Hash identifier: xd4sdo134JlYAO3wpPZWGOyGcQtMlFBwKUx9dV0nxMU=
Subject key identifier: 01:63:57:A6:A0:C4:59:63:7B:12:99:3F:47:DE:32:DC:85:9F:25:6A
Authority key identifier: 05:77:BB:93:24:FC:75:0A:53:E0:55:84:8E:F0:69:03:41:6C:3E:08
Certificate issuer: /CN=0577bb9324fc750a53e055848ef06903416c3e08
Certificate serial: 0197711B2BFAA218D244569007B4E6F25BA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BXe7kyT8dQpT4FWEjvBpA0FsPgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/e3eef7-baab-4d51-b16b-27fef685cbb2/1/BXe7kyT8dQpT4FWEjvBpA0FsPgg.mft
Manifest number: 158C
Signing time: Sun 15 Jun 2025 01:01:35 +0000
Manifest this update: Sun 15 Jun 2025 01:01:35 +0000
Manifest next update: Mon 16 Jun 2025 01:01:35 +0000
Files and hashes: 1: BXe7kyT8dQpT4FWEjvBpA0FsPgg.crl (hash: SdjSA8xHUK6mr+TUSrASrVdjzMi/sbs+Ku49Kfkrai8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/e3eef7-baab-4d51-b16b-27fef685cbb2/1/BXe7kyT8dQpT4FWEjvBpA0FsPgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/e3eef7-baab-4d51-b16b-27fef685cbb2/1/BXe7kyT8dQpT4FWEjvBpA0FsPgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/BXe7kyT8dQpT4FWEjvBpA0FsPgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:1b:2b:fa:a2:18:d2:44:56:90:07:b4:e6:f2:5b:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0577bb9324fc750a53e055848ef06903416c3e08
Validity
Not Before: Jun 15 01:01:35 2025 GMT
Not After : Jun 16 01:01:35 2025 GMT
Subject: CN=016357a6a0c459637b12993f47de32dc859f256a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1a:50:eb:aa:14:7d:80:3c:a9:1f:12:e8:b0:
68:13:9a:c4:05:ce:b0:e5:f5:2d:39:76:02:0e:5e:
e3:ef:b1:75:6f:25:76:d1:c6:dc:57:df:e5:26:eb:
a3:46:fc:30:71:01:c4:96:38:d3:6e:49:0e:1d:71:
af:cd:58:5b:d5:d8:e3:95:38:e7:12:fb:76:bb:83:
1d:c2:af:e4:2d:1d:cf:43:5f:e7:51:ec:62:6c:0d:
b5:da:7a:ff:91:59:53:3b:03:b4:47:3d:85:3b:10:
d7:d1:c9:51:10:a0:f2:f8:66:3c:f2:b1:07:45:13:
a9:d4:32:8c:d4:6c:4a:32:e2:dd:89:e6:d0:58:2c:
9f:5e:07:cf:94:dc:dd:fb:60:93:3f:62:49:83:3c:
d0:a3:49:63:15:f6:58:9b:c5:61:87:d7:84:6d:3f:
04:02:e2:52:ad:3f:02:60:fb:73:52:87:87:61:8e:
f0:91:da:a3:d5:df:fc:c5:23:d9:de:7f:ed:59:fa:
42:48:51:17:b0:f6:f1:f2:aa:4e:d2:36:b4:8f:a0:
7b:be:c7:8d:97:b5:fc:d8:a7:b8:7a:f5:2c:d5:57:
a6:81:70:5e:1f:77:f9:a9:4a:98:e3:8a:97:f4:08:
c7:5c:7b:2f:5e:65:67:47:2d:45:08:36:c2:a1:0d:
d0:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:63:57:A6:A0:C4:59:63:7B:12:99:3F:47:DE:32:DC:85:9F:25:6A
X509v3 Authority Key Identifier:
keyid:05:77:BB:93:24:FC:75:0A:53:E0:55:84:8E:F0:69:03:41:6C:3E:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BXe7kyT8dQpT4FWEjvBpA0FsPgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e3eef7-baab-4d51-b16b-27fef685cbb2/1/BXe7kyT8dQpT4FWEjvBpA0FsPgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e3eef7-baab-4d51-b16b-27fef685cbb2/1/BXe7kyT8dQpT4FWEjvBpA0FsPgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:d9:b5:03:56:da:15:5e:22:00:60:de:ac:67:2a:66:6a:bd:
e2:6b:b5:a6:26:ea:d1:91:e2:b0:84:27:e4:97:35:26:46:c5:
b1:f1:23:1a:b6:af:d4:b1:4e:a8:ed:37:3f:29:0d:a7:50:e8:
40:6e:a6:66:9c:0e:f5:96:01:10:9f:b6:32:bb:0d:f2:a4:88:
36:30:ad:04:c4:91:b0:0c:08:9d:c5:c1:42:b1:59:be:fa:10:
a7:1f:ad:86:47:ef:4d:f4:ce:64:df:51:69:8c:99:97:50:88:
19:aa:33:00:43:53:d2:72:d4:b3:1a:18:46:de:06:c4:85:18:
b3:5a:c9:14:d1:57:b6:33:64:46:0a:72:55:21:3b:0a:81:b4:
a4:be:c0:8c:99:d7:cc:2e:fd:3e:90:08:9a:9c:15:5b:a5:eb:
f7:89:5d:31:79:2f:3d:c8:99:d6:cc:e6:24:6f:09:cd:9d:f4:
f2:d3:86:5d:fd:26:7d:7a:3a:b0:2b:2c:47:11:7a:28:12:67:
b7:a4:a0:05:f5:6b:ee:fb:38:fe:85:6a:a5:1f:f4:93:9b:20:
98:2e:b9:b5:56:e4:d7:1d:08:2f:84:b9:1d:1f:a4:33:43:98:
ce:d6:8d:55:83:4b:2e:b2:77:d1:f0:9b:17:1a:dc:b1:ed:26:
c4:85:97:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdxGyv6ohjSRFaQB7Tm8lujMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1NzdiYjkzMjRmYzc1MGE1M2UwNTU4NDhlZjA2OTAzNDE2
YzNlMDgwHhcNMjUwNjE1MDEwMTM1WhcNMjUwNjE2MDEwMTM1WjAzMTEwLwYDVQQD
EygwMTYzNTdhNmEwYzQ1OTYzN2IxMjk5M2Y0N2RlMzJkYzg1OWYyNTZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhpQ66oUfYA8qR8S6LBoE5rEBc6w
5fUtOXYCDl7j77F1byV20cbcV9/lJuujRvwwcQHEljjTbkkOHXGvzVhb1djjlTjn
Evt2u4Mdwq/kLR3PQ1/nUexibA212nr/kVlTOwO0Rz2FOxDX0clREKDy+GY88rEH
RROp1DKM1GxKMuLdiebQWCyfXgfPlNzd+2CTP2JJgzzQo0ljFfZYm8Vhh9eEbT8E
AuJSrT8CYPtzUoeHYY7wkdqj1d/8xSPZ3n/tWfpCSFEXsPbx8qpO0ja0j6B7vseN
l7X82Ke4evUs1VemgXBeH3f5qUqY44qX9AjHXHsvXmVnRy1FCDbCoQ3QlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAFjV6agxFljexKZP0feMtyFnyVqMB8GA1UdIwQY
MBaAFAV3u5Mk/HUKU+BVhI7waQNBbD4IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlhlN2t5VDhkUXBUNEZXRWp2QnBBMEZzUGdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9lM2VlZjctYmFhYi00ZDUxLWIxNmIt
MjdmZWY2ODVjYmIyLzEvQlhlN2t5VDhkUXBUNEZXRWp2QnBBMEZzUGdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC9lM2VlZjctYmFhYi00ZDUxLWIxNmItMjdmZWY2ODVjYmIy
LzEvQlhlN2t5VDhkUXBUNEZXRWp2QnBBMEZzUGdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW9m1A1ba
FV4iAGDerGcqZmq94mu1pibq0ZHisIQn5Jc1JkbFsfEjGrav1LFOqO03PykNp1Do
QG6mZpwO9ZYBEJ+2MrsN8qSINjCtBMSRsAwIncXBQrFZvvoQpx+thkfvTfTOZN9R
aYyZl1CIGaozAENT0nLUsxoYRt4GxIUYs1rJFNFXtjNkRgpyVSE7CoG0pL7AjJnX
zC79PpAImpwVW6Xr94ldMXkvPciZ1szmJG8JzZ308tOGXf0mfXo6sCssRxF6KBJn
t6SgBfVr7vs4/oVqpR/0k5sgmC65tVbk1x0IL4S5HR+kM0OYztaNVYNLLrJ30fCb
Fxrcse0mxIWXFw==
-----END CERTIFICATE-----
Generated at Sun Jun 15 09:06:54 2025 by rpki-client