Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft
File: 1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft (raw, json)
Hash identifier: sXnB2q7O7jioUpfRThiao5iAziI91uBbVg6eWw1G8qY=
Subject key identifier: CE:0D:17:FB:CB:D8:47:87:F0:73:79:B9:8F:C8:BC:1A:23:B1:90:26
Authority key identifier: F8:15:E0:2B:DA:7A:90:71:48:78:37:D3:15:58:B5:E0:22:1D:3C:F9
Certificate issuer: /CN=f815e02bda7a9071487837d31558b5e0221d3cf9
Certificate serial: 01976DAB31A3505E670063CE44F7D26B1238
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-BXgK9p6kHFIeDfTFVi14CIdPPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft
Manifest number: 04BF
Signing time: Sat 14 Jun 2025 09:00:25 +0000
Manifest this update: Sat 14 Jun 2025 09:00:25 +0000
Manifest next update: Sun 15 Jun 2025 09:00:25 +0000
Files and hashes: 1: 1-BXgK9p6kHFIeDfTFVi14CIdPPk.crl (hash: VaFeQUrHcForYXQIadCsjgNC//0xMbNCbwg7sQ0i4oA=)
2: lkUV_pQvaLsSaoJOegWniJF6RQo.roa (hash: i9n/5GhzO6//QgpiyuPewqwCFXVYirWQt6MCRZhl13U=)
3: x_9Ds4w921G-S6uMB3BqKl4lwk4.roa (hash: 4uIRZVtStLzfbHbkUvgOoPNPKk9YaTAL+flcnzSJknE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-BXgK9p6kHFIeDfTFVi14CIdPPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:ab:31:a3:50:5e:67:00:63:ce:44:f7:d2:6b:12:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f815e02bda7a9071487837d31558b5e0221d3cf9
Validity
Not Before: Jun 14 09:00:25 2025 GMT
Not After : Jun 15 09:00:25 2025 GMT
Subject: CN=ce0d17fbcbd84787f07379b98fc8bc1a23b19026
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:1c:95:a1:ed:22:00:c4:e4:0e:48:e4:e7:73:
55:5b:cf:a5:1a:ad:b5:be:69:f0:a2:69:44:ce:64:
ad:50:52:94:dc:de:fa:b5:38:07:52:b5:bd:3b:fc:
f0:da:bc:03:21:2a:60:77:2a:b4:5b:c2:fa:83:77:
a4:69:a4:98:ed:60:6e:41:a0:ef:78:58:fb:00:c6:
ed:ac:0e:64:3f:eb:e8:7c:a5:69:2f:12:2f:ee:b0:
11:0f:c4:a6:dd:6d:99:87:0b:c3:29:06:2a:40:31:
26:6a:63:3c:40:fa:aa:a2:8b:60:0c:ca:92:5d:11:
a3:99:0a:be:7b:4c:89:62:53:2f:89:b4:a5:e5:80:
d4:21:e3:72:77:67:74:f0:da:74:b7:ea:f8:a2:c6:
d5:a2:a8:af:42:a6:ae:96:8f:6d:e2:ca:02:7c:08:
88:b3:11:90:ed:5c:61:9e:76:8e:8d:32:4b:b5:0f:
6b:02:c9:e5:f5:78:cd:4f:60:bd:47:1b:69:ad:64:
fe:fe:06:ab:d6:6d:94:71:a8:9d:6d:3d:cd:81:ec:
c0:87:39:3b:87:88:7b:e0:57:59:fd:78:ee:6f:5a:
42:3e:9b:5e:ba:df:c2:e1:45:7f:a9:06:2f:bb:7b:
b0:91:dc:41:eb:c0:1a:0a:84:18:2f:f0:e1:6c:ad:
d7:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:0D:17:FB:CB:D8:47:87:F0:73:79:B9:8F:C8:BC:1A:23:B1:90:26
X509v3 Authority Key Identifier:
keyid:F8:15:E0:2B:DA:7A:90:71:48:78:37:D3:15:58:B5:E0:22:1D:3C:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-BXgK9p6kHFIeDfTFVi14CIdPPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:ec:93:eb:16:35:aa:d8:7c:db:e6:31:5a:08:67:0a:52:cd:
33:0d:a1:32:f0:52:ad:99:c8:22:b4:97:ce:e6:8f:31:e3:4a:
20:ee:8e:33:39:f6:2f:f2:31:e3:78:de:4d:18:e0:6b:f2:df:
6e:38:7d:19:ca:28:54:c8:33:9d:8f:cf:c2:5f:64:db:46:b9:
60:90:12:2e:9e:86:4e:70:22:87:66:53:47:00:37:e7:c0:b7:
a0:05:aa:e7:13:d5:d7:9c:4e:68:38:c9:fe:d1:72:04:9a:7d:
b2:87:43:64:cd:09:9a:6e:e4:4e:45:e9:af:2a:4f:65:63:b8:
5d:0f:73:b6:5a:bd:b4:78:3e:b4:92:88:cb:47:b0:7b:b9:75:
8d:60:4a:1c:5a:36:23:8c:74:9e:ae:a9:2e:ce:d9:eb:73:5e:
66:84:00:ae:13:62:19:4f:db:18:b7:fb:13:03:dc:b3:e4:c4:
00:31:92:50:0f:87:24:39:fd:cc:a0:04:7d:dc:40:48:44:73:
1a:9b:ca:c9:d4:37:a4:0b:76:e0:64:db:99:a9:2b:51:92:e2:
26:58:58:ae:54:2a:62:13:18:67:90:1c:8f:98:5a:bd:8a:f6:
d6:5d:9c:ab:4b:8f:df:33:58:d3:f0:cf:b9:16:ac:20:7f:40:
ca:97:4b:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:24:56 2025 by rpki-client