Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/B1_bDeQFE0eiHpYorEFzZzTLTys.mft
File: B1_bDeQFE0eiHpYorEFzZzTLTys.mft (raw, json)
Hash identifier: VQEXLvoX/GyPS4mBqlbdyNIIq2yCWk30tGJI/fZAZVs=
Subject key identifier: B7:C8:15:25:B3:66:E6:92:4E:3A:2C:7A:23:66:37:C9:76:1E:D2:0D
Authority key identifier: 07:5F:DB:0D:E4:05:13:47:A2:1E:96:28:AC:41:73:67:34:CB:4F:2B
Certificate issuer: /CN=075fdb0de4051347a21e9628ac41736734cb4f2b
Certificate serial: 01974A7A77E86CB231A52F13A42F71E10741
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B1_bDeQFE0eiHpYorEFzZzTLTys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/B1_bDeQFE0eiHpYorEFzZzTLTys.mft
Manifest number: 08C1
Signing time: Sat 07 Jun 2025 13:00:29 +0000
Manifest this update: Sat 07 Jun 2025 13:00:29 +0000
Manifest next update: Sun 08 Jun 2025 13:00:29 +0000
Files and hashes: 1: B1_bDeQFE0eiHpYorEFzZzTLTys.crl (hash: kHWsld73haNGTvto9OAsbECrQRl2PHSIKs3z/huC/GQ=)
2: s5r9yap3tom_HtotpIwIYRM_tQI.roa (hash: nsesgmnToPnc+rmcM0u9Mw7MgCf2v2fzdAWiv7iq1Wc=)
3: y-daVj-enHGwMoAEp3dFw-2QKEo.roa (hash: 0URxQ+7I2C4N/tzneV2QeiIUIu31rOBP14ZL34RLUMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/B1_bDeQFE0eiHpYorEFzZzTLTys.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/B1_bDeQFE0eiHpYorEFzZzTLTys.mft
rsync://rpki.ripe.net/repository/DEFAULT/B1_bDeQFE0eiHpYorEFzZzTLTys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7a:77:e8:6c:b2:31:a5:2f:13:a4:2f:71:e1:07:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=075fdb0de4051347a21e9628ac41736734cb4f2b
Validity
Not Before: Jun 7 13:00:29 2025 GMT
Not After : Jun 8 13:00:29 2025 GMT
Subject: CN=b7c81525b366e6924e3a2c7a236637c9761ed20d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f9:31:c1:51:25:57:20:5b:3b:9b:27:86:d9:
9e:d1:b5:40:c1:0a:9c:65:49:d5:73:c7:4b:05:fd:
fc:c6:c4:de:a5:e6:fd:af:f5:d7:58:9a:e4:3f:90:
18:1f:c4:51:a8:c3:e6:93:1a:a9:88:be:06:48:b1:
56:c1:40:40:ad:43:cc:c4:c9:02:d5:c9:21:3f:67:
41:0e:26:f7:6b:00:40:78:15:a5:1e:c8:85:5a:72:
88:3b:7e:c4:1b:83:2a:84:b4:93:bc:3b:10:5b:c6:
57:6e:ef:7c:66:6b:f8:dd:3b:43:7d:6b:25:f3:32:
d4:a3:3d:3c:d3:5e:8d:01:9d:0a:60:d5:4c:17:b1:
0d:bc:39:54:ba:ef:86:e1:e8:30:0a:44:00:19:67:
a9:ad:9b:ec:bf:ab:8c:8e:de:6c:d7:7e:e8:58:e9:
01:8b:d8:fb:19:51:5f:e8:33:50:d3:5a:a9:86:a9:
09:fd:94:78:2b:71:1a:4d:e2:1c:5e:c9:b3:6f:2a:
8d:bc:c4:6a:ea:46:93:d3:a1:17:b4:f5:64:37:31:
53:4e:be:33:bd:8b:d7:19:3e:9f:08:33:16:70:16:
2b:5e:2f:b6:d4:96:dc:fa:ad:65:a8:21:52:c2:35:
ef:34:6b:49:e5:52:e9:f2:df:b4:73:d8:ca:83:88:
74:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:C8:15:25:B3:66:E6:92:4E:3A:2C:7A:23:66:37:C9:76:1E:D2:0D
X509v3 Authority Key Identifier:
keyid:07:5F:DB:0D:E4:05:13:47:A2:1E:96:28:AC:41:73:67:34:CB:4F:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B1_bDeQFE0eiHpYorEFzZzTLTys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/B1_bDeQFE0eiHpYorEFzZzTLTys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/2ef0f1-5082-48df-94fe-f7531a2b6247/1/B1_bDeQFE0eiHpYorEFzZzTLTys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:b8:22:ed:aa:15:da:10:01:03:de:d8:4f:2f:f1:e6:83:e3:
84:0b:5a:d3:b4:f3:a8:ca:36:24:39:86:84:17:49:3d:45:00:
80:5b:65:1c:1c:0f:58:0d:68:a5:2e:ac:6c:f3:0b:d1:7c:af:
ea:12:c3:bf:4e:62:a5:29:1c:47:f3:0a:09:59:a7:7d:02:64:
33:ae:c5:91:6a:fc:44:56:37:52:2b:5d:c7:29:84:27:ef:a3:
25:20:cd:97:7c:79:57:ae:64:bf:cc:6d:33:7a:a5:f5:7b:0f:
40:bc:7e:f5:23:42:e1:35:94:ff:b2:66:a6:33:08:22:a8:81:
78:86:51:1c:c0:6e:52:27:cb:3d:79:04:84:aa:21:93:d7:9c:
23:98:ad:72:85:08:83:b5:49:9d:da:23:7f:ba:bc:e2:01:13:
b1:35:97:a7:9f:86:33:b5:92:0f:bd:8c:59:52:d5:54:24:f8:
b5:ae:1d:dc:c2:82:d6:c8:9f:da:78:eb:d6:c3:4e:d5:f1:51:
d6:7b:e3:d6:f8:14:2f:83:bb:1f:85:47:f1:db:01:7c:b3:27:
01:3e:53:08:25:28:a6:25:10:8a:b3:08:c7:05:93:10:f4:42:
2a:ce:5e:81:a0:00:f4:c5:a3:fc:24:a9:ce:70:44:3a:4a:2e:
97:89:aa:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:37:48 2025 by rpki-client