Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/1e3846-9c42-4998-a960-b1d73797a29f/1/BjyTAb89LhVgz69-3EGnw-yKFqY.mft
File: BjyTAb89LhVgz69-3EGnw-yKFqY.mft (raw, json)
Hash identifier: z8hk7KQpewD++kJCTQ5IPEEXfHQV312P8nxJ4jlEVqA=
Subject key identifier: EE:9D:B3:66:5C:A3:4F:73:C1:56:B7:9D:46:B0:A6:11:CF:C4:5E:15
Authority key identifier: 06:3C:93:01:BF:3D:2E:15:60:CF:AF:7E:DC:41:A7:C3:EC:8A:16:A6
Certificate issuer: /CN=063c9301bf3d2e1560cfaf7edc41a7c3ec8a16a6
Certificate serial: 01974DB2AF0014325D5A524B48421D84E487
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BjyTAb89LhVgz69-3EGnw-yKFqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/1e3846-9c42-4998-a960-b1d73797a29f/1/BjyTAb89LhVgz69-3EGnw-yKFqY.mft
Manifest number: 157C
Signing time: Sun 08 Jun 2025 04:00:45 +0000
Manifest this update: Sun 08 Jun 2025 04:00:45 +0000
Manifest next update: Mon 09 Jun 2025 04:00:45 +0000
Files and hashes: 1: BjyTAb89LhVgz69-3EGnw-yKFqY.crl (hash: RU76dFUzZayWlCWL6+YdAOpnmmtKmunjF7bU4O7yxQw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/1e3846-9c42-4998-a960-b1d73797a29f/1/BjyTAb89LhVgz69-3EGnw-yKFqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/1e3846-9c42-4998-a960-b1d73797a29f/1/BjyTAb89LhVgz69-3EGnw-yKFqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/BjyTAb89LhVgz69-3EGnw-yKFqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:b2:af:00:14:32:5d:5a:52:4b:48:42:1d:84:e4:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=063c9301bf3d2e1560cfaf7edc41a7c3ec8a16a6
Validity
Not Before: Jun 8 04:00:45 2025 GMT
Not After : Jun 9 04:00:45 2025 GMT
Subject: CN=ee9db3665ca34f73c156b79d46b0a611cfc45e15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:74:7d:00:b4:75:07:a1:65:46:08:df:8b:e3:
5d:f1:40:14:30:e7:59:d4:2b:72:c3:78:ff:bf:43:
68:5e:82:02:19:31:21:b3:b7:a4:89:1f:b7:7d:10:
a5:e3:7a:e2:1e:d2:75:37:cd:86:1c:1c:e5:74:4b:
73:c7:a7:92:3d:d6:24:41:a3:85:81:c2:25:b5:e8:
50:0f:a1:73:93:83:cf:de:a0:13:01:3d:86:66:e6:
39:90:63:cd:c1:e8:f4:cc:6b:ec:92:52:3b:38:a9:
56:40:26:d2:02:ee:8c:19:ae:15:3e:92:bf:9f:b2:
58:0b:0c:c7:93:33:d1:43:08:dd:0e:bf:f0:4d:fb:
ec:93:05:68:08:8b:20:d1:0f:11:0b:b3:c9:cf:d3:
ec:e7:44:a2:86:c6:b7:d8:aa:af:00:44:18:92:f1:
0b:2e:dc:27:fb:68:ad:a9:c9:a9:c7:a6:eb:d4:27:
32:69:e0:82:7c:91:0e:7b:0d:22:cb:78:a1:14:d7:
29:1b:af:56:45:2c:84:1b:a9:62:0f:ef:29:94:c8:
4a:02:fd:7d:9b:5b:ed:b9:68:69:39:66:9f:5f:63:
b3:cd:2c:b2:fc:80:33:ef:df:33:5f:f3:be:14:0d:
51:50:a6:80:92:92:6c:88:d5:a3:16:a2:e5:e2:55:
f5:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:9D:B3:66:5C:A3:4F:73:C1:56:B7:9D:46:B0:A6:11:CF:C4:5E:15
X509v3 Authority Key Identifier:
keyid:06:3C:93:01:BF:3D:2E:15:60:CF:AF:7E:DC:41:A7:C3:EC:8A:16:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BjyTAb89LhVgz69-3EGnw-yKFqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/1e3846-9c42-4998-a960-b1d73797a29f/1/BjyTAb89LhVgz69-3EGnw-yKFqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/1e3846-9c42-4998-a960-b1d73797a29f/1/BjyTAb89LhVgz69-3EGnw-yKFqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:48:ac:89:4d:fa:cc:0c:ab:c1:4d:98:69:16:ad:b3:03:18:
a6:0a:5b:ea:29:a6:f0:84:7d:88:ef:1d:fc:99:91:79:ea:05:
89:65:1c:e9:a2:5a:ad:43:23:ba:a8:9f:66:37:59:aa:9f:a3:
a4:5d:11:2f:ff:ca:e0:d8:8d:73:d2:c7:c2:c0:63:a0:f5:1c:
c1:82:32:56:fa:d0:f3:1f:da:3d:e1:d3:ce:a0:50:d1:77:f1:
59:5e:bb:d6:3c:d0:ec:17:92:29:a6:6e:51:42:ae:79:32:36:
6e:fc:a5:8c:39:2a:16:74:3c:6b:25:9b:53:1e:8d:12:86:0b:
ac:05:90:13:85:7b:1b:e9:c7:00:ef:4a:03:ba:2b:9c:11:a1:
da:6f:b4:12:02:28:b9:c4:bf:9a:32:31:fb:77:98:b9:01:4d:
c3:bb:44:3b:4a:7f:c8:b9:33:a8:b2:d1:79:e8:5f:65:8a:0a:
a8:43:28:0f:b2:f9:8e:91:e2:30:fb:10:bf:05:1f:e5:aa:fa:
22:bd:56:74:27:6c:fe:73:21:66:88:64:e2:e5:06:79:f4:88:
ac:0a:fa:7c:45:95:7f:c2:6d:a1:61:90:a4:c5:44:cc:cc:28:
fd:79:74:10:16:9a:58:62:62:7e:2a:04:64:24:d3:17:af:29:
24:7c:ae:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:00:37 2025 by rpki-client