Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.mft
File: 70d8o7RJu8QSR-jJIeTI2r_Br64.mft (raw, json)
Hash identifier: C2aNDSwXWN1HcaEZJ1dz473P7qApsEW1Yj9Ux7XSiF0=
Subject key identifier: BD:2C:22:5A:80:01:D6:03:0B:96:10:9A:B1:C6:C9:06:28:29:CD:3D
Authority key identifier: EF:47:7C:A3:B4:49:BB:C4:12:47:E8:C9:21:E4:C8:DA:BF:C1:AF:AE
Certificate issuer: /CN=ef477ca3b449bbc41247e8c921e4c8dabfc1afae
Certificate serial: 01974D0DA85702916BD1ADE21E8B1E1B9426
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/70d8o7RJu8QSR-jJIeTI2r_Br64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.mft
Manifest number: 1512
Signing time: Sun 08 Jun 2025 01:00:29 +0000
Manifest this update: Sun 08 Jun 2025 01:00:29 +0000
Manifest next update: Mon 09 Jun 2025 01:00:29 +0000
Files and hashes: 1: 0fxrFgaOEJg9dbqq-7NyccGKfo8.roa (hash: PianfnGVaMrVPowuDRPfsiFVI9vqBZ2hff1ALtVypRc=)
2: 70d8o7RJu8QSR-jJIeTI2r_Br64.crl (hash: kxZPZmDX3vJ0UDc+jlfVmlK7UUVy46PXsbOFlEHtar0=)
3: wlvSN6qng0SspfaRqRgU0QaR_is.roa (hash: dvmYB11eIHXfV35gEc7/J0+3NCXH6IER/8ZhOiLqTT4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.mft
rsync://rpki.ripe.net/repository/DEFAULT/70d8o7RJu8QSR-jJIeTI2r_Br64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 01:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:0d:a8:57:02:91:6b:d1:ad:e2:1e:8b:1e:1b:94:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef477ca3b449bbc41247e8c921e4c8dabfc1afae
Validity
Not Before: Jun 8 01:00:29 2025 GMT
Not After : Jun 9 01:00:29 2025 GMT
Subject: CN=bd2c225a8001d6030b96109ab1c6c9062829cd3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:4d:64:65:25:da:6a:75:72:b6:6e:8a:03:37:
8d:36:00:ef:8c:c7:d5:c5:94:b3:ff:3c:15:d7:39:
e0:07:44:5a:36:e6:45:91:7a:19:87:05:96:16:4f:
c0:ce:1e:70:97:8b:78:39:e9:c5:ff:47:63:80:e7:
a7:0c:3f:be:2d:eb:fd:df:12:5c:19:01:52:01:26:
5c:97:88:6d:18:5f:9c:37:7c:80:c1:34:e3:e1:d9:
60:de:62:51:5b:15:0c:20:ad:ec:51:85:41:fe:ed:
f4:50:5f:11:92:71:12:6e:4e:59:8a:5d:79:4e:aa:
b0:40:61:c6:c4:e0:2f:95:ff:c7:53:3b:4c:b0:93:
33:a2:46:17:43:22:16:71:c4:6c:31:3e:79:ce:10:
81:d7:51:8b:40:70:70:f6:d1:1f:a5:f3:09:6a:75:
7d:ed:a2:ab:7f:e7:5c:41:48:4f:e8:aa:af:18:1a:
17:24:69:ab:3a:a6:4e:79:41:24:27:94:80:ab:28:
32:4f:98:4f:35:c8:4f:85:23:c8:d0:7d:25:cf:6b:
1e:d5:2a:35:29:96:a1:f4:73:a9:6e:55:30:14:d0:
85:da:59:e4:e9:52:62:18:67:92:d4:b5:e9:76:09:
b4:ed:a3:87:03:4f:ec:be:f0:8e:52:5d:21:d8:a0:
52:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:2C:22:5A:80:01:D6:03:0B:96:10:9A:B1:C6:C9:06:28:29:CD:3D
X509v3 Authority Key Identifier:
keyid:EF:47:7C:A3:B4:49:BB:C4:12:47:E8:C9:21:E4:C8:DA:BF:C1:AF:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/70d8o7RJu8QSR-jJIeTI2r_Br64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:28:15:b7:4d:98:7e:70:2a:8c:11:10:77:38:ee:51:16:1b:
70:0c:04:d4:ca:ec:f4:44:5e:96:88:6a:4f:cd:c0:2a:62:bb:
7d:64:9a:14:0a:32:82:7a:4b:ce:3e:47:99:0b:65:df:70:cb:
36:22:71:af:31:24:35:ff:85:c9:0c:89:7f:34:0d:f2:f7:9e:
2b:09:52:32:23:cb:e2:e1:0f:5a:f5:5c:75:f0:8c:c4:a8:67:
09:97:66:6a:e5:f7:ec:59:51:fa:eb:06:f8:97:f9:70:65:db:
7b:95:97:64:37:6a:5b:29:78:df:3a:99:4a:2c:9f:11:8d:fb:
b9:b8:b0:e7:b6:da:69:c7:6a:e9:f6:50:5a:6c:ab:d6:0b:23:
bf:48:ef:63:a6:91:5d:79:cb:b5:22:f5:83:d9:16:11:23:ab:
fd:77:f5:e0:a5:21:40:e9:60:94:44:eb:57:16:10:1f:da:27:
e5:a8:df:e8:b1:84:dc:c6:bf:ab:0a:b8:65:2a:5a:5f:ba:54:
91:f2:2f:b5:13:0c:08:d8:18:2c:88:18:cc:79:2d:5c:ae:e5:
64:ab:e5:6b:a4:e6:c2:f0:1e:9c:fc:fe:5f:20:1d:10:07:6c:
16:45:5c:51:ee:c5:d3:33:f6:f5:d3:14:3a:20:32:0e:f3:5f:
8f:b3:58:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:42:40 2025 by rpki-client