Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft
File: 1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft (raw, json)
Hash identifier: jl7fc0HfD2CDgSe+uXX6A7w5pRla40eSCE0JWEAau+I=
Subject key identifier: 75:46:39:C6:81:4F:7D:A2:B5:CA:BB:3A:EE:8E:64:6A:9D:BA:4F:46
Authority key identifier: F8:15:E0:2B:DA:7A:90:71:48:78:37:D3:15:58:B5:E0:22:1D:3C:F9
Certificate issuer: /CN=f815e02bda7a9071487837d31558b5e0221d3cf9
Certificate serial: 0197567EEE388E535012A89C9B6EF907BD74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-BXgK9p6kHFIeDfTFVi14CIdPPk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft
Manifest number: 04B3
Signing time: Mon 09 Jun 2025 21:00:48 +0000
Manifest this update: Mon 09 Jun 2025 21:00:48 +0000
Manifest next update: Tue 10 Jun 2025 21:00:48 +0000
Files and hashes: 1: 1-BXgK9p6kHFIeDfTFVi14CIdPPk.crl (hash: UiNimFGb6PcDmcqNT9EKdYzhH1g6FpdSOnfeqmWgrJw=)
2: lkUV_pQvaLsSaoJOegWniJF6RQo.roa (hash: i9n/5GhzO6//QgpiyuPewqwCFXVYirWQt6MCRZhl13U=)
3: x_9Ds4w921G-S6uMB3BqKl4lwk4.roa (hash: 4uIRZVtStLzfbHbkUvgOoPNPKk9YaTAL+flcnzSJknE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-BXgK9p6kHFIeDfTFVi14CIdPPk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:56:7e:ee:38:8e:53:50:12:a8:9c:9b:6e:f9:07:bd:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f815e02bda7a9071487837d31558b5e0221d3cf9
Validity
Not Before: Jun 9 21:00:48 2025 GMT
Not After : Jun 10 21:00:48 2025 GMT
Subject: CN=754639c6814f7da2b5cabb3aee8e646a9dba4f46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:59:d6:1e:76:68:a4:13:6c:9e:c7:a9:30:5d:
0e:17:ca:29:6f:b9:0a:28:62:1d:61:1d:0c:e7:56:
f0:e9:53:ff:2b:8a:be:d7:7f:9f:80:2b:c3:1d:82:
f7:58:ab:90:96:9f:63:b1:b5:a8:96:50:92:81:e5:
d2:36:4b:da:a3:ce:41:10:2d:38:78:ff:ff:ad:4b:
ab:30:26:0b:f8:88:f7:12:b9:b8:43:0d:6d:a0:de:
bc:f1:e7:98:a0:e6:74:47:62:4c:62:75:fa:8f:66:
f6:f1:3a:87:84:ae:02:b9:d6:a7:65:ff:0e:4f:11:
67:d3:26:24:c0:d0:81:53:5a:97:8b:73:f6:49:4b:
88:ba:1b:67:67:f6:50:37:01:6d:d4:0d:59:67:67:
f7:3a:f9:e3:cb:92:e9:00:75:48:cb:41:6d:48:dc:
0f:22:ef:a1:04:ac:2e:40:97:80:58:35:a5:51:af:
1a:38:9f:bb:09:f2:11:b5:be:e1:a6:3f:f8:d6:d2:
21:70:6f:3c:5b:5e:9f:fd:81:a9:5b:e8:cb:e8:9d:
e1:78:58:07:37:ad:d0:14:7e:2e:b2:80:c1:43:f1:
29:c9:4c:16:77:f2:6d:43:68:43:3e:59:32:11:74:
bc:45:07:29:b4:97:67:1d:78:b1:ee:21:37:74:bd:
fc:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:46:39:C6:81:4F:7D:A2:B5:CA:BB:3A:EE:8E:64:6A:9D:BA:4F:46
X509v3 Authority Key Identifier:
keyid:F8:15:E0:2B:DA:7A:90:71:48:78:37:D3:15:58:B5:E0:22:1D:3C:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-BXgK9p6kHFIeDfTFVi14CIdPPk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/cd472c-4256-40ff-98e2-d98384397929/1/1-BXgK9p6kHFIeDfTFVi14CIdPPk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:3e:71:b3:85:17:5b:cf:3d:29:48:b4:7e:f6:d3:c5:34:ba:
37:e6:e4:8d:55:24:d2:85:bf:cc:3f:14:fe:e0:56:85:12:03:
c8:80:a2:ed:51:31:24:7d:5f:f7:b3:a7:37:09:7f:43:15:1c:
d4:c6:f8:35:d8:04:70:03:f7:09:47:f5:18:80:fe:f3:e0:40:
8f:cb:0c:2b:a3:e3:f5:71:bc:97:29:79:c0:00:34:ae:e0:53:
2e:b7:46:05:59:36:db:3b:9d:54:aa:4b:bd:8f:2c:59:1f:b6:
80:e9:95:c9:98:9c:e9:07:56:16:77:7e:1c:a0:fa:27:b0:e5:
63:02:02:86:5a:8e:1e:a3:5c:44:01:93:85:1b:09:65:7d:08:
f0:92:5d:bc:76:1b:61:8f:47:21:b3:d7:7e:ae:ea:b4:0c:52:
da:5a:4f:2c:d5:9c:f0:77:08:81:07:55:d3:d2:ef:5a:82:38:
23:b1:19:30:ef:79:4e:89:73:f6:a7:a5:10:fd:bf:76:de:b2:
17:ca:0a:d2:af:41:f9:3b:1e:35:23:9f:54:0a:28:8c:e9:96:
5d:b8:26:de:ed:2e:b5:a5:17:5a:0e:d2:93:25:e2:a7:51:de:
bd:01:a0:a6:d8:e0:89:de:48:f1:1b:da:9d:7f:59:cc:24:f2:
42:a2:f6:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 01:19:57 2025 by rpki-client