Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/e01a29-c597-4974-86e1-092e7a16b74e/1/B2hREEqSGO_xc_Q09VvdJCCqri4.mft
File: B2hREEqSGO_xc_Q09VvdJCCqri4.mft (raw, json)
Hash identifier: nBH19ivJdFlDEzIOjM0EpZNi9snrU2hvagN9xlCo7NM=
Subject key identifier: CF:EF:57:73:62:21:E8:21:FD:58:7B:BE:81:1C:42:3F:0C:26:F2:48
Authority key identifier: 07:68:51:10:4A:92:18:EF:F1:73:F4:34:F5:5B:DD:24:20:AA:AE:2E
Certificate issuer: /CN=076851104a9218eff173f434f55bdd2420aaae2e
Certificate serial: 0197493100CD0B7B2FDD344564F455206819
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B2hREEqSGO_xc_Q09VvdJCCqri4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/e01a29-c597-4974-86e1-092e7a16b74e/1/B2hREEqSGO_xc_Q09VvdJCCqri4.mft
Manifest number: 0443
Signing time: Sat 07 Jun 2025 07:00:37 +0000
Manifest this update: Sat 07 Jun 2025 07:00:37 +0000
Manifest next update: Sun 08 Jun 2025 07:00:37 +0000
Files and hashes: 1: 5ehB_xO0eaE5SlSwW2V8tb-9juo.roa (hash: jMw+wf8Ui1y9ucMVATcO+6jIkCejwH6WgDWFGHXHV+0=)
2: B2hREEqSGO_xc_Q09VvdJCCqri4.crl (hash: kOf20QLy/lBYNyF2R1u16SSi3MPpJa6egyPjQl+Bn5w=)
3: Kk5ihchNeskFCXCUlES4TL8h7AA.roa (hash: rTX+zm5JxSO5etuxfkqUkcqlRI0XlBcLpmGUj1NxYmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/e01a29-c597-4974-86e1-092e7a16b74e/1/B2hREEqSGO_xc_Q09VvdJCCqri4.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/e01a29-c597-4974-86e1-092e7a16b74e/1/B2hREEqSGO_xc_Q09VvdJCCqri4.mft
rsync://rpki.ripe.net/repository/DEFAULT/B2hREEqSGO_xc_Q09VvdJCCqri4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:31:00:cd:0b:7b:2f:dd:34:45:64:f4:55:20:68:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=076851104a9218eff173f434f55bdd2420aaae2e
Validity
Not Before: Jun 7 07:00:37 2025 GMT
Not After : Jun 8 07:00:37 2025 GMT
Subject: CN=cfef57736221e821fd587bbe811c423f0c26f248
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:b1:23:ea:3d:38:c3:80:48:8d:75:d9:d8:27:
80:17:92:0a:1c:70:04:70:c7:64:95:12:eb:bd:bb:
83:f6:88:43:0c:26:d2:c1:61:64:4c:8a:64:4e:ae:
25:4b:0f:f1:cb:f8:11:71:11:99:b5:d9:05:eb:35:
78:d8:59:cb:0a:fb:3f:49:da:bf:2f:7c:ea:d2:8a:
97:dd:ff:ef:7e:d0:d3:4d:b7:aa:9f:76:49:fa:2f:
df:e4:64:d4:1f:d5:3b:74:fa:00:a0:70:98:dd:9d:
35:c7:dc:a3:7f:7c:88:43:a3:fe:19:0a:ba:83:60:
b4:e9:b5:b9:6f:7e:ec:71:51:33:59:88:c9:d5:87:
22:ac:54:9f:71:2f:3e:b4:92:13:5e:8f:90:ea:05:
91:ef:81:11:ee:ea:5d:d5:66:a2:ec:b1:eb:65:d6:
16:fe:75:ed:57:c1:8b:74:1c:41:49:72:04:37:4c:
e7:5d:52:1d:36:eb:41:85:98:16:f7:f5:05:92:9c:
2b:5f:b1:3d:d2:fd:0b:c5:31:bf:c8:45:72:21:13:
ba:89:92:34:88:80:34:2c:12:5e:db:8a:52:53:8e:
e6:5b:56:a0:67:a6:c1:c7:f3:a5:da:8a:b5:0b:0c:
52:4d:c3:5f:be:83:66:c3:1f:5e:29:0e:ef:a3:14:
f4:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:EF:57:73:62:21:E8:21:FD:58:7B:BE:81:1C:42:3F:0C:26:F2:48
X509v3 Authority Key Identifier:
keyid:07:68:51:10:4A:92:18:EF:F1:73:F4:34:F5:5B:DD:24:20:AA:AE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B2hREEqSGO_xc_Q09VvdJCCqri4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e01a29-c597-4974-86e1-092e7a16b74e/1/B2hREEqSGO_xc_Q09VvdJCCqri4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e01a29-c597-4974-86e1-092e7a16b74e/1/B2hREEqSGO_xc_Q09VvdJCCqri4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:3b:9b:ea:d1:41:19:08:3f:d6:6e:d3:a5:15:20:fc:cd:de:
be:db:de:2c:eb:64:1f:8b:fc:64:be:a8:ac:fa:cd:a1:3e:49:
c6:14:88:91:39:29:6c:53:23:50:16:58:4a:96:17:e8:81:70:
d3:aa:44:55:cc:79:2b:ad:ff:77:35:05:9d:c6:e3:71:f8:22:
74:cf:b4:12:4e:58:09:d3:7c:ac:27:2c:ce:bc:5c:2a:94:52:
70:e2:a3:f6:d4:1c:07:82:d2:3b:8f:d2:7d:e6:e0:e7:4c:97:
7c:ae:8a:64:e8:51:81:97:b1:03:83:01:7e:0d:cd:81:51:fe:
3a:54:a2:9f:1a:32:64:59:fd:21:e0:27:96:9b:4e:86:85:9e:
3b:11:d8:35:7f:59:49:ef:12:ed:c1:15:04:dc:98:e3:27:ef:
4d:94:01:3f:86:dd:2b:f0:a3:e4:48:32:88:fb:68:5c:49:2a:
bf:81:5e:46:53:1d:89:82:42:09:67:72:30:72:25:5e:e5:a8:
75:2a:e2:ae:fa:a9:db:97:e2:67:ba:b2:65:2a:a4:32:28:b4:
44:f7:90:aa:2c:66:91:b1:a1:d6:88:89:97:43:c9:a3:b1:82:
90:a1:72:a8:c0:61:b4:36:b8:12:83:3d:a9:a4:d2:87:76:23:
87:bf:93:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 10:48:07 2025 by rpki-client