Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/96dff3-abe5-48fb-aa25-526e7f6d7f5b/1/BhR0zs319QOtq2D8Ve5_eKDbqfI.mft
File: BhR0zs319QOtq2D8Ve5_eKDbqfI.mft (raw, json)
Hash identifier: lGxH41FqGIOj3h0oQuhsjWDVKlRfbjiB8SM6U+bz3Vs=
Subject key identifier: 70:B2:A1:4B:00:D4:5D:2C:D0:70:A4:5E:D5:97:0A:4A:4D:DC:0D:01
Authority key identifier: 06:14:74:CE:CD:F5:F5:03:AD:AB:60:FC:55:EE:7F:78:A0:DB:A9:F2
Certificate issuer: /CN=061474cecdf5f503adab60fc55ee7f78a0dba9f2
Certificate serial: 01976EBDD8C820A971FADE3306CB559CF0BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BhR0zs319QOtq2D8Ve5_eKDbqfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/96dff3-abe5-48fb-aa25-526e7f6d7f5b/1/BhR0zs319QOtq2D8Ve5_eKDbqfI.mft
Manifest number: 152E
Signing time: Sat 14 Jun 2025 14:00:24 +0000
Manifest this update: Sat 14 Jun 2025 14:00:24 +0000
Manifest next update: Sun 15 Jun 2025 14:00:24 +0000
Files and hashes: 1: BhR0zs319QOtq2D8Ve5_eKDbqfI.crl (hash: LQUKEHyCiVmOAGWdcBFgaCdm4HZYjAWBswrJGpzTDj0=)
2: aBUgXPt-AuoP5xgLF4UGTkPYOmI.roa (hash: 1abPHA97s7oD1kkbcwUPa4QCZkFrwRi930sxcHARzWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/96dff3-abe5-48fb-aa25-526e7f6d7f5b/1/BhR0zs319QOtq2D8Ve5_eKDbqfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/96dff3-abe5-48fb-aa25-526e7f6d7f5b/1/BhR0zs319QOtq2D8Ve5_eKDbqfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/BhR0zs319QOtq2D8Ve5_eKDbqfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:bd:d8:c8:20:a9:71:fa:de:33:06:cb:55:9c:f0:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=061474cecdf5f503adab60fc55ee7f78a0dba9f2
Validity
Not Before: Jun 14 14:00:24 2025 GMT
Not After : Jun 15 14:00:24 2025 GMT
Subject: CN=70b2a14b00d45d2cd070a45ed5970a4a4ddc0d01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:dd:33:11:32:b3:0a:56:5a:4c:5c:1a:41:a4:
1f:6a:5a:32:82:cc:39:7a:16:c0:71:d5:48:dc:3b:
d7:24:5a:1b:89:ea:f9:af:bb:dd:2e:38:14:84:3b:
8e:fb:09:e6:64:f6:29:56:20:a5:31:75:47:64:dc:
8b:a9:0f:40:b5:d7:b4:25:3a:a0:e1:b3:28:78:f9:
7e:2c:07:0a:10:04:64:1f:98:fa:e3:52:70:8a:c1:
a2:cd:20:f1:21:79:e8:9c:b3:55:d0:e5:aa:59:9c:
83:00:c6:f4:f7:c6:ab:3e:d0:6b:11:17:e5:e0:8f:
3d:e6:8c:b0:cb:d4:11:9f:57:88:8c:0d:df:b1:48:
11:5f:3f:9a:bb:7e:4e:63:0e:4c:b2:f7:7d:f6:34:
67:f7:63:9d:96:24:74:24:c0:99:dd:35:bf:9e:6f:
fb:a5:62:38:12:a2:c9:6f:fb:1d:80:fb:ab:dd:de:
4f:02:0c:e7:bb:99:fa:0e:cd:b1:07:ef:a5:74:ce:
9d:44:1f:22:48:cf:2d:17:89:30:15:0a:bc:ca:7a:
e4:3e:66:14:78:e2:ab:02:f2:d7:e9:cd:c5:e8:d5:
00:5a:51:4d:f0:65:aa:20:e3:cf:db:e6:7a:ba:9a:
59:81:31:f9:6d:0e:e8:0d:7b:88:e7:59:b2:51:01:
e1:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:B2:A1:4B:00:D4:5D:2C:D0:70:A4:5E:D5:97:0A:4A:4D:DC:0D:01
X509v3 Authority Key Identifier:
keyid:06:14:74:CE:CD:F5:F5:03:AD:AB:60:FC:55:EE:7F:78:A0:DB:A9:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BhR0zs319QOtq2D8Ve5_eKDbqfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/96dff3-abe5-48fb-aa25-526e7f6d7f5b/1/BhR0zs319QOtq2D8Ve5_eKDbqfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/96dff3-abe5-48fb-aa25-526e7f6d7f5b/1/BhR0zs319QOtq2D8Ve5_eKDbqfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:7b:d0:c7:86:98:56:4f:cf:b4:4a:8d:3f:a7:be:20:ed:74:
51:6b:5b:ba:b8:e6:33:40:5f:e5:cc:82:04:81:35:1d:9e:ac:
3e:43:df:1c:23:c4:22:fa:df:36:51:f8:6b:84:93:76:23:fd:
46:1f:f5:77:fb:05:ca:0a:94:45:b8:fd:b9:2e:a2:ba:c2:61:
4d:16:3b:74:43:e4:70:2c:e4:6f:24:b2:30:ef:10:e8:f6:02:
24:ea:ff:40:d5:46:90:cb:68:fa:c2:2c:4a:58:a4:f8:cd:0b:
7f:74:25:f7:a2:b3:2d:08:cd:43:6e:bb:02:80:ae:c6:b7:5d:
e1:bf:40:71:1b:a5:da:6c:0e:84:7b:a3:f5:48:2b:36:4b:ff:
3d:35:fa:ff:45:0e:7a:5f:e6:d2:f3:db:85:27:ab:52:c8:55:
39:6a:04:68:c0:46:de:9b:61:df:e6:74:14:97:7b:3d:40:a8:
54:8f:43:af:9f:91:6c:b4:05:51:c0:72:65:43:36:b0:fb:db:
92:a6:d3:51:6c:88:af:7b:55:d6:7e:c8:41:37:23:f8:18:12:
06:fb:f3:9c:1e:17:9a:6c:c8:73:dc:90:5e:26:8d:38:34:00:
0b:c7:fd:c2:a0:eb:54:b3:e4:ca:1d:83:af:b5:19:e5:a5:99:
71:40:0a:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:46:32 2025 by rpki-client