Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/880a54-d301-492d-acba-5aae3ab78995/1/BV1ugjSUcsyv0KBp9Xj2R8MKmEY.mft
File: BV1ugjSUcsyv0KBp9Xj2R8MKmEY.mft (raw, json)
Hash identifier: 0Ya+ElipPHVtGSdIaR1LjYw4hIr9wK1rZh9sYmDaQQY=
Subject key identifier: D1:A3:DF:E6:C0:E7:FE:DB:FF:0D:1F:8F:45:94:EB:CA:77:BC:C1:FC
Authority key identifier: 05:5D:6E:82:34:94:72:CC:AF:D0:A0:69:F5:78:F6:47:C3:0A:98:46
Certificate issuer: /CN=055d6e82349472ccafd0a069f578f647c30a9846
Certificate serial: 0197696179EA09E0095FF87F6077AEEB1EE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BV1ugjSUcsyv0KBp9Xj2R8MKmEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/880a54-d301-492d-acba-5aae3ab78995/1/BV1ugjSUcsyv0KBp9Xj2R8MKmEY.mft
Manifest number: 08BF
Signing time: Fri 13 Jun 2025 13:01:25 +0000
Manifest this update: Fri 13 Jun 2025 13:01:25 +0000
Manifest next update: Sat 14 Jun 2025 13:01:25 +0000
Files and hashes: 1: BV1ugjSUcsyv0KBp9Xj2R8MKmEY.crl (hash: ZPokDa9viSVSDjxLz63qhfcdtv6vqpZ90+jbRu3BAPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/880a54-d301-492d-acba-5aae3ab78995/1/BV1ugjSUcsyv0KBp9Xj2R8MKmEY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/880a54-d301-492d-acba-5aae3ab78995/1/BV1ugjSUcsyv0KBp9Xj2R8MKmEY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BV1ugjSUcsyv0KBp9Xj2R8MKmEY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:61:79:ea:09:e0:09:5f:f8:7f:60:77:ae:eb:1e:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=055d6e82349472ccafd0a069f578f647c30a9846
Validity
Not Before: Jun 13 13:01:25 2025 GMT
Not After : Jun 14 13:01:25 2025 GMT
Subject: CN=d1a3dfe6c0e7fedbff0d1f8f4594ebca77bcc1fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a1:b6:b1:3d:d2:24:56:24:06:61:b6:73:23:
9c:3c:f9:f0:1d:10:ba:94:2e:60:5d:23:15:9a:72:
ca:84:af:ce:29:f2:79:31:2b:d1:86:56:0d:1d:b1:
59:bd:dc:70:33:3a:70:91:7e:7e:bb:ac:64:e3:0e:
ba:bc:ca:b8:47:42:36:36:53:ca:52:96:8b:c1:84:
8e:d1:d1:28:32:89:79:b3:75:b4:67:76:7b:22:f5:
ab:df:f8:8e:d7:23:e3:8d:54:72:a6:95:03:ec:1a:
cd:af:2e:cb:6a:61:90:f0:16:ec:dd:e8:26:1e:5c:
e5:05:15:a2:0b:2e:61:76:56:73:59:a7:dd:2a:da:
71:90:45:2b:8d:ee:fc:8e:f5:2b:d9:3f:94:61:21:
b4:eb:aa:c1:8d:1b:73:bf:36:09:6a:bd:f8:0f:9c:
70:cf:7c:77:5e:88:8e:f7:36:cb:3a:1d:0e:f1:04:
9e:30:38:27:5a:b4:10:ce:f4:c6:6e:d4:f1:4e:2d:
90:a7:fb:d0:6b:99:c5:5f:e6:49:f3:9a:2f:3f:d0:
37:61:92:6b:ab:61:74:f7:6f:4e:e0:38:99:14:58:
40:82:47:61:0c:d3:3a:99:21:2b:8f:82:d9:db:94:
5b:5a:80:53:dc:9c:0e:8c:6a:cf:78:da:85:b6:40:
d9:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:A3:DF:E6:C0:E7:FE:DB:FF:0D:1F:8F:45:94:EB:CA:77:BC:C1:FC
X509v3 Authority Key Identifier:
keyid:05:5D:6E:82:34:94:72:CC:AF:D0:A0:69:F5:78:F6:47:C3:0A:98:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BV1ugjSUcsyv0KBp9Xj2R8MKmEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/880a54-d301-492d-acba-5aae3ab78995/1/BV1ugjSUcsyv0KBp9Xj2R8MKmEY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/880a54-d301-492d-acba-5aae3ab78995/1/BV1ugjSUcsyv0KBp9Xj2R8MKmEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:e3:f8:6f:72:51:55:89:f9:c9:1e:3c:a3:01:17:fa:8e:66:
62:18:fc:91:57:1e:e0:ec:59:02:f8:92:13:da:c1:3a:45:ac:
2a:26:a4:30:92:62:f9:1b:89:af:c1:8a:71:c8:2f:9b:00:39:
3d:2e:8c:82:6c:46:77:55:88:ea:74:cf:fc:bc:73:ea:78:69:
fe:3c:3c:09:4d:40:db:4b:6a:1d:5d:a9:ac:27:e0:83:2b:f7:
4b:b9:a7:30:fc:5f:84:ef:9b:cb:cb:13:b8:08:96:9b:21:d2:
4e:86:1c:5b:c4:34:9f:3c:61:43:44:02:05:ad:9f:ba:47:31:
ce:fc:88:cb:4d:12:2b:1a:da:df:2d:82:a4:d3:d1:72:f0:36:
84:8c:26:5a:66:08:b4:9c:93:aa:ce:05:e3:fe:b7:1d:f1:d7:
c5:2d:4d:e8:35:48:39:f8:61:1c:be:fa:30:ae:06:39:0b:21:
aa:a9:a8:ae:cd:cf:6e:a4:c7:56:62:10:da:b5:82:e8:bc:77:
b9:68:7f:f4:95:3f:72:70:62:2f:c8:97:af:49:38:b6:be:47:
34:45:79:9a:80:8b:3c:66:d6:e6:e8:02:8a:cb:a7:0f:de:3d:
99:61:8c:fe:bc:a4:f6:05:db:a6:ce:20:91:39:03:62:d9:1c:
48:04:72:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:22:35 2025 by rpki-client