Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.mft
File: BE1l50JUsl_gDrjqBrtY--aKwZs.mft (raw, json)
Hash identifier: UfWT0Hf7PmbVY4FOtdu9vd5UlV+ZpF715BKhdnz9wGc=
Subject key identifier: 3A:C5:76:47:B4:3D:2D:01:2C:3C:92:C4:F9:24:46:2F:B4:A1:1B:01
Authority key identifier: 04:4D:65:E7:42:54:B2:5F:E0:0E:B8:EA:06:BB:58:FB:E6:8A:C1:9B
Certificate issuer: /CN=044d65e74254b25fe00eb8ea06bb58fbe68ac19b
Certificate serial: 01974D44EE6FD7D0FB3041F2111BA47B7A85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BE1l50JUsl_gDrjqBrtY--aKwZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.mft
Manifest number: 0B7F
Signing time: Sun 08 Jun 2025 02:00:52 +0000
Manifest this update: Sun 08 Jun 2025 02:00:52 +0000
Manifest next update: Mon 09 Jun 2025 02:00:52 +0000
Files and hashes: 1: BE1l50JUsl_gDrjqBrtY--aKwZs.crl (hash: zfbQSSfMUcXBFHUUOHFuHRYogMtCskcRMplnQ/Un1TA=)
2: rthTWvBWTldvCBC_jsm-IEkTBFQ.roa (hash: GkYmfEttYtLOHlLhDgqjd5V7UynvO3JpXV9H0/Hyyb4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/BE1l50JUsl_gDrjqBrtY--aKwZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:44:ee:6f:d7:d0:fb:30:41:f2:11:1b:a4:7b:7a:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=044d65e74254b25fe00eb8ea06bb58fbe68ac19b
Validity
Not Before: Jun 8 02:00:52 2025 GMT
Not After : Jun 9 02:00:52 2025 GMT
Subject: CN=3ac57647b43d2d012c3c92c4f924462fb4a11b01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4c:d2:e8:2a:8e:bd:96:3d:83:7e:b9:b4:19:
5f:63:c1:c0:10:e2:7d:df:ec:14:37:a0:97:df:ce:
d1:fa:c8:ba:07:1f:f5:fe:14:78:7d:94:f6:17:11:
05:74:37:01:20:c4:50:c7:13:87:00:9b:c3:da:56:
05:ca:ca:29:1f:1c:b2:9d:9b:97:a1:f2:b3:25:34:
f0:72:dc:46:71:ea:60:55:25:8f:18:a5:b6:3f:33:
df:eb:c5:a6:9a:7c:9a:d5:ea:ea:b9:b7:54:c8:1d:
da:80:c9:df:56:8e:2f:95:71:75:aa:f6:c5:30:17:
9d:f1:49:26:17:40:b3:9d:7d:b9:14:2a:05:17:71:
ac:f0:c5:34:a6:e2:62:a1:80:db:98:81:56:be:2d:
d0:c6:45:c7:98:80:cd:f3:6d:b7:96:a9:e4:26:3f:
8b:8c:fe:1b:70:e5:8a:95:43:78:3c:35:82:0a:a6:
8f:f1:c5:94:2b:82:9e:33:64:af:e1:b1:15:35:eb:
49:23:b7:e9:7b:6e:9f:50:22:d8:c6:5c:aa:8e:a1:
44:9f:0f:39:4c:a4:5d:18:5e:84:38:77:d8:46:02:
f5:f0:d9:d5:f7:95:5e:20:ab:78:8e:fa:f9:50:12:
ed:7c:a0:ca:3a:c3:f4:c8:84:32:1e:f6:60:b5:d3:
50:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:C5:76:47:B4:3D:2D:01:2C:3C:92:C4:F9:24:46:2F:B4:A1:1B:01
X509v3 Authority Key Identifier:
keyid:04:4D:65:E7:42:54:B2:5F:E0:0E:B8:EA:06:BB:58:FB:E6:8A:C1:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BE1l50JUsl_gDrjqBrtY--aKwZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/d39c6c-45e1-4126-a4e2-40438a999414/1/BE1l50JUsl_gDrjqBrtY--aKwZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:c0:45:31:d8:e4:9e:0f:67:42:fc:74:92:39:67:2c:10:6b:
df:0a:dd:09:43:b8:1e:bf:07:86:01:9b:d4:b3:47:88:00:f1:
dd:75:04:a9:41:91:1a:a2:60:3d:00:a9:f3:02:10:dd:58:1d:
6a:0c:f5:a3:d6:88:0a:0e:d9:9d:9c:a6:70:04:73:52:09:b3:
7f:96:ba:cb:2b:5d:4d:f4:3e:c5:a4:01:f0:ac:e7:1a:10:5b:
82:93:fa:4a:46:28:07:c1:b5:b1:3e:26:b0:66:93:31:13:6a:
4d:61:53:ef:55:3c:cd:12:ae:95:cb:f6:8d:92:1d:d8:01:36:
a5:8e:2e:4a:fb:8f:69:e7:7a:40:f0:67:ef:3d:92:66:38:72:
38:f0:af:0d:9b:f0:2e:0e:f7:04:d9:4d:81:ae:e6:ca:8c:f2:
aa:8c:d3:1b:2c:c0:93:89:f6:1a:d9:b5:ce:28:d0:cf:96:48:
e7:78:05:2e:77:15:81:00:5a:a1:68:24:4c:98:09:3a:69:d4:
8a:9c:99:a6:d7:30:6b:bb:08:50:d5:d6:52:0c:84:26:92:bb:
7f:a3:e1:be:f3:47:da:d9:f6:2c:00:c1:cb:d7:db:00:2a:34:
ef:72:88:9e:09:c3:33:0a:b0:4f:07:ba:56:63:f3:b4:98:01:
c1:80:35:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:56:27 2025 by rpki-client