Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/92d33c-8a69-4db3-b628-b62db772bbfa/1/B47RoBU3Yqki5V4PlIzRpUEceok.mft
File: B47RoBU3Yqki5V4PlIzRpUEceok.mft (raw, json)
Hash identifier: SPGdRmiH6+THNxX60RnbC9FISJJVeyhpsv2h62ys2wc=
Subject key identifier: 82:42:D8:6D:C9:81:F4:74:75:2A:89:94:81:E9:5D:11:C3:2C:AE:7B
Authority key identifier: 07:8E:D1:A0:15:37:62:A9:22:E5:5E:0F:94:8C:D1:A5:41:1C:7A:89
Certificate issuer: /CN=078ed1a0153762a922e55e0f948cd1a5411c7a89
Certificate serial: 0197470BCBCBBAC4FF3629E8B59FA96AD32A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B47RoBU3Yqki5V4PlIzRpUEceok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/92d33c-8a69-4db3-b628-b62db772bbfa/1/B47RoBU3Yqki5V4PlIzRpUEceok.mft
Manifest number: 10EB
Signing time: Fri 06 Jun 2025 21:00:44 +0000
Manifest this update: Fri 06 Jun 2025 21:00:44 +0000
Manifest next update: Sat 07 Jun 2025 21:00:44 +0000
Files and hashes: 1: B47RoBU3Yqki5V4PlIzRpUEceok.crl (hash: UoOfm23LqxdjG6QJmhPW150M19oClDn/dw5Or+he/ys=)
2: c4TFBL4EL5IADMniHZ0GVJJb_4Q.roa (hash: ZOFMhPaK+bFDPt6Ze8LlHlzvSqEu3m14aAhhA1S86RQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/92d33c-8a69-4db3-b628-b62db772bbfa/1/B47RoBU3Yqki5V4PlIzRpUEceok.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/92d33c-8a69-4db3-b628-b62db772bbfa/1/B47RoBU3Yqki5V4PlIzRpUEceok.mft
rsync://rpki.ripe.net/repository/DEFAULT/B47RoBU3Yqki5V4PlIzRpUEceok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 21:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:0b:cb:cb:ba:c4:ff:36:29:e8:b5:9f:a9:6a:d3:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=078ed1a0153762a922e55e0f948cd1a5411c7a89
Validity
Not Before: Jun 6 21:00:44 2025 GMT
Not After : Jun 7 21:00:44 2025 GMT
Subject: CN=8242d86dc981f474752a899481e95d11c32cae7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:7c:c9:b9:35:91:a1:3e:a3:22:ba:52:58:28:
21:11:e8:04:c8:20:92:db:c4:a2:83:e4:39:6b:4b:
e0:12:13:69:a6:d4:23:84:13:7c:65:29:ee:d1:3e:
38:a3:0e:73:1d:2e:f2:3f:cb:4b:86:7f:d7:48:19:
6d:87:83:38:f7:0a:37:e4:e0:e8:94:43:11:42:d0:
77:a9:d1:64:fa:37:a6:99:b8:4b:1b:db:30:f1:e8:
e9:ac:14:51:1d:fd:6d:86:3b:fe:a9:df:a4:03:e7:
94:9c:e7:33:83:11:38:8c:bf:30:a5:c7:98:64:35:
8d:f3:ef:b3:40:22:68:6f:79:c8:de:c0:03:2a:bf:
c3:87:2c:2c:66:0e:d4:3f:91:1c:d8:db:cc:9f:b4:
92:7a:ac:fd:25:a2:df:02:31:7a:22:33:20:67:aa:
7d:cf:21:72:12:22:39:c8:42:1c:a5:38:16:80:49:
dd:26:b0:af:51:d5:b9:6c:b6:0d:3d:bf:ad:9c:0f:
54:dc:5a:25:e1:e1:15:4e:c2:60:cc:22:58:3f:f1:
09:60:1e:d6:ec:5e:dd:e9:72:34:2a:87:b6:4d:82:
2a:33:c3:ed:eb:e0:cd:85:c2:52:f3:22:61:06:e9:
ef:c8:f0:85:e8:72:ec:3f:0e:31:b4:ef:f2:9e:01:
26:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:42:D8:6D:C9:81:F4:74:75:2A:89:94:81:E9:5D:11:C3:2C:AE:7B
X509v3 Authority Key Identifier:
keyid:07:8E:D1:A0:15:37:62:A9:22:E5:5E:0F:94:8C:D1:A5:41:1C:7A:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B47RoBU3Yqki5V4PlIzRpUEceok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/92d33c-8a69-4db3-b628-b62db772bbfa/1/B47RoBU3Yqki5V4PlIzRpUEceok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/92d33c-8a69-4db3-b628-b62db772bbfa/1/B47RoBU3Yqki5V4PlIzRpUEceok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:b3:23:0b:1e:77:4b:76:36:e5:5f:9e:05:6c:b8:91:95:22:
7c:9f:21:57:06:e0:5e:7c:11:55:af:da:22:35:56:db:8e:f1:
45:49:ec:3f:fc:01:80:0a:ba:74:1a:40:55:67:41:6c:39:7d:
b4:41:61:21:61:12:37:7b:05:2a:f4:8d:ad:73:73:d1:d3:51:
a3:8a:aa:89:f9:27:c0:e3:96:66:fd:af:0f:90:b2:bb:4d:bf:
66:49:76:40:ea:27:8f:9a:a3:62:24:d3:b4:e4:02:98:d3:e0:
4e:cb:8d:94:b5:4f:cf:51:1c:09:93:58:4f:07:c1:87:69:49:
e0:d2:9f:8b:a1:8c:75:38:d3:88:b6:0b:19:8d:86:d0:33:58:
ff:76:06:29:9e:e7:20:dc:98:34:fb:af:3b:d0:c7:54:a2:41:
50:3b:33:f0:0f:e9:c1:0d:df:8c:83:b3:59:8d:24:fe:78:7e:
ee:72:d4:1c:bc:4c:eb:5a:98:36:03:c2:4c:ed:63:c4:df:73:
fa:a6:77:c1:d5:d2:fc:92:14:cd:ef:e0:10:b0:50:aa:e4:12:
35:3d:24:60:69:5b:fa:a2:11:6d:68:18:89:0c:8c:35:20:e3:
4b:04:81:32:5e:6c:23:15:45:16:fc:83:39:b3:e1:dc:b3:a2:
a3:8e:39:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 02:47:52 2025 by rpki-client