Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/45cf37-afa5-4994-aedb-485b20952d93/1/Bs5bKEZrknQlJgMTktlL8aVY6EQ.mft
File: Bs5bKEZrknQlJgMTktlL8aVY6EQ.mft (raw, json)
Hash identifier: pbmndVBM4lb34prwSOhguiPP4mCftbZRMY+dshCEptk=
Subject key identifier: F7:34:31:85:24:F6:18:01:30:3F:61:D2:AF:26:57:03:38:16:21:AF
Authority key identifier: 06:CE:5B:28:46:6B:92:74:25:26:03:13:92:D9:4B:F1:A5:58:E8:44
Certificate issuer: /CN=06ce5b28466b92742526031392d94bf1a558e844
Certificate serial: 01976170A3740BB96A7087F64864BC4CD5C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bs5bKEZrknQlJgMTktlL8aVY6EQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/45cf37-afa5-4994-aedb-485b20952d93/1/Bs5bKEZrknQlJgMTktlL8aVY6EQ.mft
Manifest number: 12C8
Signing time: Thu 12 Jun 2025 00:01:01 +0000
Manifest this update: Thu 12 Jun 2025 00:01:01 +0000
Manifest next update: Fri 13 Jun 2025 00:01:01 +0000
Files and hashes: 1: Bs5bKEZrknQlJgMTktlL8aVY6EQ.crl (hash: VDvWvNSZJrbUjL1I9BzOVz6pet649qJMKXYwZFswEqw=)
2: ELJxyLmNkAO4LH2akysrOoq_xxw.roa (hash: B5RpIzdoHJeEU/i0KYBMhNoTeQCE20VYj0EU96xzN7E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/45cf37-afa5-4994-aedb-485b20952d93/1/Bs5bKEZrknQlJgMTktlL8aVY6EQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/45cf37-afa5-4994-aedb-485b20952d93/1/Bs5bKEZrknQlJgMTktlL8aVY6EQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bs5bKEZrknQlJgMTktlL8aVY6EQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:61:70:a3:74:0b:b9:6a:70:87:f6:48:64:bc:4c:d5:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06ce5b28466b92742526031392d94bf1a558e844
Validity
Not Before: Jun 12 00:01:01 2025 GMT
Not After : Jun 13 00:01:01 2025 GMT
Subject: CN=f734318524f61801303f61d2af265703381621af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:a4:50:4b:d3:70:02:74:a6:e4:8c:18:8c:01:
46:a4:79:8c:1b:0f:73:9e:3d:95:09:4b:b0:9f:a6:
6d:ca:ee:d2:7c:d4:fc:00:4c:88:e3:95:b1:c0:b0:
d6:4e:19:93:9f:be:d9:2a:ae:f6:a7:87:35:f7:dc:
b8:b3:f4:8b:37:09:39:4c:cd:b0:f5:79:23:64:f9:
d3:7b:47:fe:1e:c0:f2:b8:cc:a8:36:68:7e:54:51:
67:e6:88:2e:e0:99:37:c0:85:c4:ca:eb:0e:15:41:
fa:89:fe:13:6c:ff:83:99:89:2c:b1:15:42:0f:52:
d6:90:ac:f6:64:23:20:fb:e0:c6:ce:2a:7c:80:a1:
19:3e:4b:39:bc:2f:a1:c6:07:e3:37:76:f6:d8:7c:
fb:8a:14:f7:dc:f1:da:93:5c:43:cc:d4:3f:d8:46:
e7:a7:a7:66:54:12:c1:4e:42:9c:df:ce:68:cd:b6:
5a:fd:9d:f7:b1:cf:95:67:26:a8:a2:54:9a:d8:7d:
85:b5:f9:12:97:fc:e0:1c:5f:09:43:f8:9c:e7:bc:
13:7a:14:99:9f:20:90:8f:43:1a:bc:a2:a9:25:fb:
c8:ab:ac:dd:8b:88:63:01:ea:52:0d:07:e8:1c:0a:
4e:03:7c:47:73:4d:75:54:e3:8f:51:f2:05:9d:a2:
fa:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:34:31:85:24:F6:18:01:30:3F:61:D2:AF:26:57:03:38:16:21:AF
X509v3 Authority Key Identifier:
keyid:06:CE:5B:28:46:6B:92:74:25:26:03:13:92:D9:4B:F1:A5:58:E8:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bs5bKEZrknQlJgMTktlL8aVY6EQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/45cf37-afa5-4994-aedb-485b20952d93/1/Bs5bKEZrknQlJgMTktlL8aVY6EQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/45cf37-afa5-4994-aedb-485b20952d93/1/Bs5bKEZrknQlJgMTktlL8aVY6EQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:b6:55:82:70:d5:1e:51:96:0e:78:e2:8b:68:fd:29:bd:df:
2c:10:ad:b0:61:68:f5:84:78:f4:90:4b:7d:35:9c:84:ac:a6:
ab:7f:f2:a5:54:f6:e9:04:63:e4:2e:f1:19:fb:c9:88:ae:da:
cb:1a:d1:50:3d:fa:a0:77:13:a6:e9:bf:5d:70:82:0b:37:f5:
b4:18:15:b3:cf:89:ae:a1:04:1d:de:09:1e:4a:04:66:d5:92:
08:0a:73:78:c4:27:5d:1e:8a:ca:aa:f3:21:8e:1e:e9:f9:2c:
ca:81:03:1f:96:52:61:cc:1d:fd:48:82:29:09:d5:b1:8b:0d:
43:54:ec:08:2b:00:eb:e5:3c:d9:a9:be:3e:ac:d8:fb:e5:66:
8d:80:fa:66:ec:85:90:9c:c4:1a:69:1c:9a:82:61:4d:68:15:
01:4b:a5:97:f5:f9:60:80:0d:54:53:ce:18:ce:75:4e:3c:04:
ec:fe:c8:92:17:60:36:2e:5b:6e:0a:d8:82:7c:2d:97:8a:8c:
f9:56:0e:a0:f9:49:0b:f7:87:78:de:7c:d0:ca:0c:9b:2a:b8:
94:c4:aa:99:8a:8d:6e:d5:06:f3:72:48:1e:36:fc:71:65:30:
6c:e9:c1:19:91:7a:af:69:ba:d8:9f:01:7d:7b:e6:45:6a:53:
6c:1a:82:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 08:34:49 2025 by rpki-client