Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/45cf37-afa5-4994-aedb-485b20952d93/1/Bs5bKEZrknQlJgMTktlL8aVY6EQ.mft
File: Bs5bKEZrknQlJgMTktlL8aVY6EQ.mft (raw, json)
Hash identifier: 4X9iPLj8+vRocp9u/JJPOHR+XSuvF6Nip4iIZ07mchA=
Subject key identifier: 79:D2:3A:05:D7:C1:7D:E6:CE:F7:32:36:A5:8C:A7:7B:78:E1:ED:BD
Authority key identifier: 06:CE:5B:28:46:6B:92:74:25:26:03:13:92:D9:4B:F1:A5:58:E8:44
Certificate issuer: /CN=06ce5b28466b92742526031392d94bf1a558e844
Certificate serial: 019755DA39D3A90DA8586C8A3845A11803DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bs5bKEZrknQlJgMTktlL8aVY6EQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/45cf37-afa5-4994-aedb-485b20952d93/1/Bs5bKEZrknQlJgMTktlL8aVY6EQ.mft
Manifest number: 12C2
Signing time: Mon 09 Jun 2025 18:00:54 +0000
Manifest this update: Mon 09 Jun 2025 18:00:54 +0000
Manifest next update: Tue 10 Jun 2025 18:00:54 +0000
Files and hashes: 1: Bs5bKEZrknQlJgMTktlL8aVY6EQ.crl (hash: XlCRYBoNeYIrAP3M/twQdZyfUVLecqdTq9jKmGJwz7A=)
2: ELJxyLmNkAO4LH2akysrOoq_xxw.roa (hash: B5RpIzdoHJeEU/i0KYBMhNoTeQCE20VYj0EU96xzN7E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/45cf37-afa5-4994-aedb-485b20952d93/1/Bs5bKEZrknQlJgMTktlL8aVY6EQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/45cf37-afa5-4994-aedb-485b20952d93/1/Bs5bKEZrknQlJgMTktlL8aVY6EQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bs5bKEZrknQlJgMTktlL8aVY6EQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:55:da:39:d3:a9:0d:a8:58:6c:8a:38:45:a1:18:03:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06ce5b28466b92742526031392d94bf1a558e844
Validity
Not Before: Jun 9 18:00:54 2025 GMT
Not After : Jun 10 18:00:54 2025 GMT
Subject: CN=79d23a05d7c17de6cef73236a58ca77b78e1edbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0d:81:5b:06:9e:a8:c6:1e:c2:96:f3:b0:1a:
d0:42:bf:e8:c6:1e:fd:6a:30:fa:01:da:6c:8a:98:
49:48:f7:60:d3:0b:e1:71:89:43:c4:3a:2a:01:b8:
ad:a7:58:cc:ce:df:a3:eb:65:a3:a2:e9:d9:e6:a5:
b8:07:c2:91:9c:f6:f7:db:c3:97:45:70:e5:c1:cb:
49:6a:e8:db:36:d2:02:bf:d5:7c:fd:e0:c6:b7:7e:
29:4e:90:7d:40:d9:54:3f:f6:c6:8d:ef:2c:b2:7b:
ba:f8:53:0e:81:18:52:b2:e3:f7:64:5b:3f:10:2f:
44:f5:f8:d8:75:87:e5:a3:48:1d:a1:12:8c:06:e6:
75:05:a7:78:e4:f5:51:2b:65:0f:2a:ab:e5:dd:56:
e6:b0:fc:0c:eb:0b:cb:75:e3:91:38:84:e0:a7:73:
f9:c2:c8:54:62:7c:d6:cd:87:9b:e6:b6:cb:10:7f:
13:8f:22:dc:4a:4f:30:b9:29:9d:26:34:84:29:33:
92:b8:4c:33:0e:89:01:9f:fc:2a:c8:2c:8a:20:ca:
89:56:1c:b7:ee:73:3e:c6:09:6e:42:b7:ab:16:6b:
71:d3:80:35:cd:96:81:cf:16:bb:18:02:3f:15:a5:
65:22:ee:58:b1:ac:c3:8b:de:9f:03:e8:2b:72:ad:
e0:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:D2:3A:05:D7:C1:7D:E6:CE:F7:32:36:A5:8C:A7:7B:78:E1:ED:BD
X509v3 Authority Key Identifier:
keyid:06:CE:5B:28:46:6B:92:74:25:26:03:13:92:D9:4B:F1:A5:58:E8:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bs5bKEZrknQlJgMTktlL8aVY6EQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/45cf37-afa5-4994-aedb-485b20952d93/1/Bs5bKEZrknQlJgMTktlL8aVY6EQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/45cf37-afa5-4994-aedb-485b20952d93/1/Bs5bKEZrknQlJgMTktlL8aVY6EQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:e7:14:2c:c8:98:49:0c:fb:68:40:b0:74:00:49:05:5c:6a:
c7:29:95:3c:96:2c:3d:17:e7:83:01:48:8c:5f:4d:36:90:31:
70:d8:2e:7d:0f:39:49:5b:ad:3b:60:b7:e2:05:68:d5:7c:56:
88:ac:27:24:92:02:e1:b7:90:7e:d3:e2:db:8b:63:0b:a4:c8:
02:b8:2f:a1:ed:e3:4e:18:77:00:34:ca:6c:fb:fb:4a:ef:e9:
7c:6e:d3:9b:44:bf:97:be:e8:ef:b8:71:de:37:20:07:9a:54:
32:82:82:05:9a:e5:19:16:32:1a:4e:17:a9:a3:13:4c:73:0b:
14:73:4b:5b:e8:d6:29:dc:19:2f:3f:4a:69:a0:bd:41:44:01:
4d:42:f4:90:e0:d0:8d:76:a2:88:0a:5f:c3:b3:c8:a9:b6:88:
52:7c:68:39:99:f8:58:ac:11:0d:94:de:ed:bd:e1:cb:31:b9:
49:53:2f:68:eb:56:a3:42:3e:3e:22:e6:61:7d:c2:fd:fd:20:
48:ff:42:e9:47:25:b4:68:4d:aa:6e:97:1c:14:2f:92:e7:09:
41:9c:37:37:1b:f9:28:53:0e:94:e5:bd:b2:17:82:f0:d9:60:
cb:7e:3f:55:5f:21:cb:26:85:51:59:ef:83:50:52:40:75:40:
5d:04:11:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 01:35:44 2025 by rpki-client