Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/e243d0-19fe-4da3-a20a-e6effd3cef32/1/BsO4tfN-IQaCUFcfTbg7RxRGiiw.mft
File: BsO4tfN-IQaCUFcfTbg7RxRGiiw.mft (raw, json)
Hash identifier: tF6dhtgz6td6Ua9qyBQK4OYZVobG89n3CwiWKQ3Doz4=
Subject key identifier: E9:3E:C4:10:B9:92:5A:65:DF:D4:21:A9:40:25:FD:27:66:EA:2B:9D
Authority key identifier: 06:C3:B8:B5:F3:7E:21:06:82:50:57:1F:4D:B8:3B:47:14:46:8A:2C
Certificate issuer: /CN=06c3b8b5f37e21068250571f4db83b4714468a2c
Certificate serial: 01974FA0B6B7F8B90CAA8C4EF7C90F98A6AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BsO4tfN-IQaCUFcfTbg7RxRGiiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/e243d0-19fe-4da3-a20a-e6effd3cef32/1/BsO4tfN-IQaCUFcfTbg7RxRGiiw.mft
Manifest number: 1580
Signing time: Sun 08 Jun 2025 13:00:21 +0000
Manifest this update: Sun 08 Jun 2025 13:00:21 +0000
Manifest next update: Mon 09 Jun 2025 13:00:21 +0000
Files and hashes: 1: BsO4tfN-IQaCUFcfTbg7RxRGiiw.crl (hash: Yz5A/tSY3PnfBOgJLXxa3g2PotyDUYxo4N3VVD2gKLI=)
2: pa3jfF65O1LeusJmZP9_Hq2CHUA.roa (hash: DB5zR9clFk0B3PVw7uwrAY7t9bq1MxHbsRq/+LHkr9E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/e243d0-19fe-4da3-a20a-e6effd3cef32/1/BsO4tfN-IQaCUFcfTbg7RxRGiiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/e243d0-19fe-4da3-a20a-e6effd3cef32/1/BsO4tfN-IQaCUFcfTbg7RxRGiiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BsO4tfN-IQaCUFcfTbg7RxRGiiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:a0:b6:b7:f8:b9:0c:aa:8c:4e:f7:c9:0f:98:a6:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06c3b8b5f37e21068250571f4db83b4714468a2c
Validity
Not Before: Jun 8 13:00:21 2025 GMT
Not After : Jun 9 13:00:21 2025 GMT
Subject: CN=e93ec410b9925a65dfd421a94025fd2766ea2b9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e9:e5:56:d6:5e:dd:b3:13:c7:6c:a5:97:3f:
22:d8:d3:a9:46:1d:b1:d7:b3:7d:ec:f8:32:5c:b0:
9a:9a:8c:f4:6a:aa:a2:3a:7f:0e:10:8a:52:44:0b:
31:23:12:c1:3c:fc:37:ec:9b:53:d6:33:86:fa:50:
27:df:de:48:06:40:16:57:47:aa:af:85:3c:61:b1:
ce:3d:61:01:a9:29:c2:30:e1:28:a9:4b:ef:af:34:
4b:9f:1a:73:1b:54:37:38:c6:73:bd:8b:d7:a9:f5:
e2:34:d5:eb:4a:08:6b:41:42:a2:23:e0:14:75:3a:
d4:75:35:0c:5b:f4:70:25:33:7a:76:b9:aa:05:3e:
f4:08:5b:4d:e7:dd:5a:0c:3e:a9:d1:b8:d5:f0:79:
79:da:3e:ba:33:b6:3c:3b:21:a6:85:e9:11:a0:1b:
b1:17:fc:d7:8c:db:38:c4:32:95:b8:2c:29:22:80:
67:52:e8:a6:b3:19:46:4f:ad:f9:51:ed:8b:38:f0:
1a:e8:2a:48:60:87:73:12:83:02:e0:65:8f:3b:93:
9b:df:3e:1a:dd:b4:aa:26:a5:73:df:e6:8a:c8:21:
83:41:16:0d:8b:14:8e:99:de:53:3c:d5:cd:3b:ec:
2d:6a:5d:52:0a:c7:f7:60:58:fe:7c:63:91:cd:22:
a9:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:3E:C4:10:B9:92:5A:65:DF:D4:21:A9:40:25:FD:27:66:EA:2B:9D
X509v3 Authority Key Identifier:
keyid:06:C3:B8:B5:F3:7E:21:06:82:50:57:1F:4D:B8:3B:47:14:46:8A:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsO4tfN-IQaCUFcfTbg7RxRGiiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/e243d0-19fe-4da3-a20a-e6effd3cef32/1/BsO4tfN-IQaCUFcfTbg7RxRGiiw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/e243d0-19fe-4da3-a20a-e6effd3cef32/1/BsO4tfN-IQaCUFcfTbg7RxRGiiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:45:88:9f:02:c6:c1:9a:7f:8e:58:e3:5e:b1:5a:34:15:f5:
bf:9c:ba:ec:fd:e8:31:d8:99:7c:ae:c0:66:3b:41:b4:ea:69:
33:7d:2b:6c:2b:06:dc:44:af:70:c2:29:fb:07:dd:ee:f4:12:
58:2e:52:13:3a:ef:e1:d9:15:79:2a:b6:e3:9a:1e:1d:cb:a3:
8e:c2:19:8e:73:d2:48:dc:54:fa:c2:01:30:e4:db:37:d1:ca:
42:8b:71:99:25:15:fe:8d:19:64:a2:d9:8e:b0:64:ea:1b:63:
b2:06:4f:39:40:cd:48:30:bf:ba:bd:d6:42:1d:c6:e1:58:0f:
ba:6c:19:5a:95:48:d4:b3:19:f7:53:eb:dc:8f:70:e6:cc:38:
80:c4:65:34:ad:7b:12:31:fb:cc:b2:3e:ee:e7:d2:a5:d2:a1:
ec:b1:af:8a:72:48:85:97:8c:8a:4d:21:e7:a4:4a:4e:3f:4e:
86:47:f1:27:26:43:b3:1e:cc:a2:9e:01:f7:68:73:0c:fe:e8:
db:a0:1d:0c:2f:12:64:c0:9c:a5:ff:41:f4:d6:eb:7c:1e:db:
a3:cc:77:85:49:a4:78:0f:ca:47:03:0a:77:78:37:4d:60:09:
39:64:07:97:28:b9:fe:f3:e1:a0:ca:84:9a:a3:97:e4:e2:27:
94:eb:59:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 20:41:51 2025 by rpki-client