Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.mft
File: B9CN-Lx6OD6XbbsD0qDrn-DXhuc.mft (raw, json)
Hash identifier: oM+fCp3i+t49x1JJk0lMfr0BBfOwucu14B43u1wSHGk=
Subject key identifier: F5:B5:CD:35:98:A5:93:6D:C3:EA:06:F9:D2:8D:00:E5:89:8E:97:83
Authority key identifier: 07:D0:8D:F8:BC:7A:38:3E:97:6D:BB:03:D2:A0:EB:9F:E0:D7:86:E7
Certificate issuer: /CN=07d08df8bc7a383e976dbb03d2a0eb9fe0d786e7
Certificate serial: 0197462FC1069C6E02FAAD9E89E1EF595779
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.mft
Manifest number: 157C
Signing time: Fri 06 Jun 2025 17:00:24 +0000
Manifest this update: Fri 06 Jun 2025 17:00:24 +0000
Manifest next update: Sat 07 Jun 2025 17:00:24 +0000
Files and hashes: 1: B9CN-Lx6OD6XbbsD0qDrn-DXhuc.crl (hash: uiQW/6/p2q8reAKYNabV5jjaJCdWb7Y70T6NdZDh8mo=)
2: bOCBzzRvzuJPuu-j2dvPA0mnOUw.roa (hash: InvZiY5TCPmmHvBaq4Cag3h3swbwKMBYSgXMQxCeJZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.mft
rsync://rpki.ripe.net/repository/DEFAULT/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:2f:c1:06:9c:6e:02:fa:ad:9e:89:e1:ef:59:57:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07d08df8bc7a383e976dbb03d2a0eb9fe0d786e7
Validity
Not Before: Jun 6 17:00:24 2025 GMT
Not After : Jun 7 17:00:24 2025 GMT
Subject: CN=f5b5cd3598a5936dc3ea06f9d28d00e5898e9783
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:62:78:4a:90:b8:df:d9:a2:80:ea:22:84:fe:
52:4f:d4:2d:3e:2b:43:8d:51:6c:7b:e2:66:d1:0a:
23:84:b7:0b:b6:0a:5c:7d:cc:cb:9a:e2:ee:0b:89:
aa:a2:94:6d:48:7b:7b:af:6a:66:61:d0:a4:7c:3e:
65:e7:b3:08:01:d7:2d:76:bc:dc:e8:6d:f3:2e:ea:
a0:fd:b6:49:c3:ed:20:7f:ae:80:2e:04:cb:00:bf:
00:4b:99:4b:28:ec:27:f5:a7:2c:92:52:3f:c7:8e:
68:1a:4d:fa:25:93:4e:d1:95:fd:d1:47:cd:66:0c:
84:d0:ea:9c:df:62:11:01:67:2a:63:fe:3f:0a:28:
b8:21:77:e2:26:05:a1:b0:ba:12:57:16:f1:39:8f:
63:09:00:ac:94:23:97:72:0c:ec:4a:b5:0c:00:89:
73:50:c0:1f:aa:83:d6:61:55:9a:3f:16:a8:99:f5:
65:23:8f:9f:4c:b9:07:25:4b:49:3e:3d:04:da:b6:
55:dc:37:b6:00:59:a8:6f:75:91:3f:29:b7:9d:12:
b4:ac:50:50:87:d6:e5:be:ad:7f:4e:0c:6e:68:86:
d3:69:28:2f:34:19:08:f2:f1:ed:57:e3:c2:5b:e3:
43:33:04:98:e9:0e:16:cc:f0:6e:1b:24:58:9e:e1:
20:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:B5:CD:35:98:A5:93:6D:C3:EA:06:F9:D2:8D:00:E5:89:8E:97:83
X509v3 Authority Key Identifier:
keyid:07:D0:8D:F8:BC:7A:38:3E:97:6D:BB:03:D2:A0:EB:9F:E0:D7:86:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/031818-0463-4bab-bb56-51485fe222db/1/B9CN-Lx6OD6XbbsD0qDrn-DXhuc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:2d:4d:fc:8f:dd:c2:04:ff:3e:31:e2:97:21:79:55:25:5d:
fc:20:15:54:c2:90:f3:52:1d:7a:e8:07:d5:47:51:8b:00:eb:
cb:89:f3:6f:2b:b4:e7:47:fc:c7:fa:62:e8:f9:e4:08:22:64:
49:52:e4:72:54:8c:22:9f:6e:ac:cd:47:61:d0:ec:da:1c:70:
07:1f:22:0c:38:d1:a9:97:cf:62:f1:68:b9:1a:72:f9:c8:76:
e4:9d:09:bf:a6:e3:ca:b5:70:e0:b7:56:af:f8:c3:21:45:5f:
c2:fc:12:86:57:14:e7:02:fb:12:76:6d:a5:70:b9:04:0e:07:
eb:6f:54:f1:87:fd:b3:fa:37:1e:13:57:6d:0c:83:02:af:13:
a2:79:00:40:78:b6:47:33:84:c9:08:cb:e2:f4:68:5f:85:7f:
48:8c:58:bc:2b:c1:f5:c8:1d:f8:ba:e0:f2:9a:6a:29:8c:b5:
96:13:83:b7:2c:d4:60:6b:07:08:93:5f:38:34:0d:56:b3:bc:
8e:3d:81:f3:73:2b:0e:e9:02:74:39:65:18:bc:b9:e6:c0:34:
fb:d6:81:f0:93:c1:c6:05:74:cb:bd:fa:c5:6f:b9:05:fa:49:
e7:12:8c:aa:37:21:51:c4:a1:d0:e1:8f:f4:99:b9:d7:db:07:
18:0d:f6:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:46:45 2025 by rpki-client