Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/4307d1-b608-4581-992c-753741a80e94/1/B_pUCiVDLiqk3KBXhFw1nSFIhvc.mft
File: B_pUCiVDLiqk3KBXhFw1nSFIhvc.mft (raw, json)
Hash identifier: fdrq+kGjDcdxF5g33UaemLUaVJobGpkiN1ah2yduzCE=
Subject key identifier: 3A:BE:DC:20:5E:47:6D:36:BD:B0:6B:F8:F4:F0:D7:D3:D7:F1:D0:3A
Authority key identifier: 07:FA:54:0A:25:43:2E:2A:A4:DC:A0:57:84:5C:35:9D:21:48:86:F7
Certificate issuer: /CN=07fa540a25432e2aa4dca057845c359d214886f7
Certificate serial: 01976BBD5CF43F776D85AA52758A720581C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B_pUCiVDLiqk3KBXhFw1nSFIhvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/4307d1-b608-4581-992c-753741a80e94/1/B_pUCiVDLiqk3KBXhFw1nSFIhvc.mft
Manifest number: 1595
Signing time: Sat 14 Jun 2025 00:01:01 +0000
Manifest this update: Sat 14 Jun 2025 00:01:01 +0000
Manifest next update: Sun 15 Jun 2025 00:01:01 +0000
Files and hashes: 1: B_pUCiVDLiqk3KBXhFw1nSFIhvc.crl (hash: O9q2M9XPJ534i+AKCOWL5HNPKTpTn7SJ90t08C+KB2g=)
2: HNB1sDrF9WUErSCuLUa0aVt_L3Y.roa (hash: EEUhMDLd8LaCLpdh0d8yAfmLAD7g/8SwACNlTGSymQI=)
3: cGnWsTG6_HuBPIKsK-FAxem4vS0.roa (hash: PlfTsNs/Znlb07VC2B9dZOKYLjXkQ4SWFGFGxZnDFiU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/4307d1-b608-4581-992c-753741a80e94/1/B_pUCiVDLiqk3KBXhFw1nSFIhvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/4307d1-b608-4581-992c-753741a80e94/1/B_pUCiVDLiqk3KBXhFw1nSFIhvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/B_pUCiVDLiqk3KBXhFw1nSFIhvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 00:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:bd:5c:f4:3f:77:6d:85:aa:52:75:8a:72:05:81:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07fa540a25432e2aa4dca057845c359d214886f7
Validity
Not Before: Jun 14 00:01:01 2025 GMT
Not After : Jun 15 00:01:01 2025 GMT
Subject: CN=3abedc205e476d36bdb06bf8f4f0d7d3d7f1d03a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c3:0a:b0:83:1a:7f:bb:85:c7:c5:5a:1c:de:
de:38:3e:cd:74:f9:ff:71:ec:73:b7:b8:7f:57:ff:
e9:f0:65:d6:4d:92:c4:bf:b4:7d:32:e4:47:b9:bd:
df:69:50:be:d5:5c:2f:43:14:6c:2f:b1:39:d9:e4:
fc:bf:aa:1c:e2:d0:d3:00:90:d6:71:ce:d6:0a:cc:
6e:35:8b:8a:40:f4:dd:ac:6a:75:e7:1f:cd:cf:75:
cf:0d:e6:8c:89:82:07:c9:8f:7d:05:2c:cb:48:fc:
04:e6:69:f7:ce:42:0e:09:bc:92:0f:3f:77:85:05:
41:06:f6:45:9c:f7:ef:04:96:2c:4d:db:74:cc:fc:
65:bc:03:ff:b8:8d:9f:01:ca:84:e4:86:96:ce:55:
c7:90:c9:6c:82:a9:f1:c4:81:6d:20:c1:0b:57:8c:
fd:00:97:4b:da:c0:47:2c:b1:f4:94:e7:9e:4b:47:
31:38:0d:07:60:cc:90:a2:95:b2:a2:c0:d6:95:a4:
4d:bc:39:60:65:b6:42:42:5f:37:0e:59:c7:bb:ff:
6a:06:b6:23:48:79:84:26:2b:75:5a:18:fe:ff:7e:
7a:e5:c5:80:91:54:88:13:a4:b9:80:64:2b:8d:c7:
0d:c3:b2:62:0a:b9:3e:cb:14:9f:64:79:98:25:cc:
af:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:BE:DC:20:5E:47:6D:36:BD:B0:6B:F8:F4:F0:D7:D3:D7:F1:D0:3A
X509v3 Authority Key Identifier:
keyid:07:FA:54:0A:25:43:2E:2A:A4:DC:A0:57:84:5C:35:9D:21:48:86:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_pUCiVDLiqk3KBXhFw1nSFIhvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4307d1-b608-4581-992c-753741a80e94/1/B_pUCiVDLiqk3KBXhFw1nSFIhvc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/4307d1-b608-4581-992c-753741a80e94/1/B_pUCiVDLiqk3KBXhFw1nSFIhvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:59:6e:74:cf:85:64:03:58:46:c3:f4:bb:41:de:7e:d5:70:
10:c1:3b:63:02:20:77:9d:28:7e:37:26:a7:e1:f0:fc:7c:e7:
f4:b2:05:1a:e4:2b:68:16:76:4d:85:8f:08:19:10:0d:ad:a4:
23:05:54:26:e9:2f:f2:fb:c0:49:1b:e2:a0:59:02:a7:ef:2d:
e5:71:b9:1a:4b:49:07:e2:5e:6b:7e:a6:45:40:f5:b4:a5:53:
64:50:e0:5b:b5:06:14:2c:94:21:99:b8:4e:40:94:4f:11:63:
55:03:24:ed:74:16:10:5d:1e:71:23:0e:c2:f5:95:a1:ce:e1:
6d:c4:17:f9:ab:94:0d:e1:16:19:ba:2c:09:f6:84:6f:e0:65:
97:30:e0:1e:70:53:fc:44:1d:ea:8a:bd:3e:cc:84:97:af:e0:
21:85:c9:d2:0b:c2:bc:b7:ec:e5:76:da:2a:12:5c:af:a8:08:
ab:4c:cb:68:14:5d:43:53:2d:f1:22:fd:06:dd:4c:6a:f1:5e:
4f:f2:da:e7:70:31:99:61:31:5f:02:2a:e4:ae:20:fe:07:b0:
7b:8d:20:1d:ce:fb:d1:5e:fa:e5:f7:62:c4:5e:21:59:3b:6f:
33:7e:59:8c:19:9b:d7:e1:cf:f5:2d:4b:24:f7:a5:28:b9:d3:
b5:58:c7:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:13:33 2025 by rpki-client