Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/45cf37-afa5-4994-aedb-485b20952d93/1/Bs5bKEZrknQlJgMTktlL8aVY6EQ.mft
File: Bs5bKEZrknQlJgMTktlL8aVY6EQ.mft (raw, json)
Hash identifier: f7iv7BJ8tJhR5ubzVEess8aCmM7Efvf4aYtPv/jEL3I=
Subject key identifier: 4D:87:8E:B7:9F:80:C5:E6:CC:C5:94:25:FD:AE:B3:27:7E:91:3A:E9
Authority key identifier: 06:CE:5B:28:46:6B:92:74:25:26:03:13:92:D9:4B:F1:A5:58:E8:44
Certificate issuer: /CN=06ce5b28466b92742526031392d94bf1a558e844
Certificate serial: 019854FD2191F1A7A25A4F554C9699569CAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bs5bKEZrknQlJgMTktlL8aVY6EQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/45cf37-afa5-4994-aedb-485b20952d93/1/Bs5bKEZrknQlJgMTktlL8aVY6EQ.mft
Manifest number: 1346
Signing time: Tue 29 Jul 2025 07:02:11 +0000
Manifest this update: Tue 29 Jul 2025 07:02:11 +0000
Manifest next update: Wed 30 Jul 2025 07:02:11 +0000
Files and hashes: 1: Bs5bKEZrknQlJgMTktlL8aVY6EQ.crl (hash: HafyRrMxxuR/Agzat01j8X3RLIUtS61Q0x6lmo01S6k=)
2: ELJxyLmNkAO4LH2akysrOoq_xxw.roa (hash: B5RpIzdoHJeEU/i0KYBMhNoTeQCE20VYj0EU96xzN7E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/45cf37-afa5-4994-aedb-485b20952d93/1/Bs5bKEZrknQlJgMTktlL8aVY6EQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/45cf37-afa5-4994-aedb-485b20952d93/1/Bs5bKEZrknQlJgMTktlL8aVY6EQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bs5bKEZrknQlJgMTktlL8aVY6EQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 07:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:54:fd:21:91:f1:a7:a2:5a:4f:55:4c:96:99:56:9c:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06ce5b28466b92742526031392d94bf1a558e844
Validity
Not Before: Jul 29 07:02:11 2025 GMT
Not After : Jul 30 07:02:11 2025 GMT
Subject: CN=4d878eb79f80c5e6ccc59425fdaeb3277e913ae9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f3:79:6d:29:bb:4f:22:a0:30:e3:32:dd:a5:
64:4f:6c:5e:a2:56:4e:9f:f7:4e:4f:0c:18:db:dd:
08:cb:55:1b:bf:ee:98:8b:fd:96:d8:76:93:d3:c3:
31:ae:72:7b:4a:34:65:99:81:b3:28:ff:05:76:16:
43:db:c9:d1:08:62:aa:de:5e:c0:dd:7b:0c:e9:04:
4b:d5:d7:08:8e:f6:aa:5c:ec:8d:b8:5c:d8:8e:15:
8a:7e:6c:5a:8f:ea:96:58:51:d7:97:ff:ff:60:27:
f4:09:68:15:7f:3b:56:8c:cb:bc:e4:7d:cb:ea:0f:
0d:81:32:29:78:c6:11:cf:2f:08:a5:c5:b7:df:14:
a9:90:0b:4f:59:81:e1:2b:c1:a8:df:24:c1:3f:7a:
ba:cc:a8:c3:aa:60:66:72:03:99:75:fd:ca:d9:ff:
78:55:0b:86:15:73:f0:0f:2f:ac:81:9d:4a:82:30:
4b:14:2d:0d:22:c5:a2:86:c6:b7:73:f8:ae:b1:1a:
4d:96:d6:3f:d3:ed:b7:f1:09:87:55:d5:b9:11:89:
8b:c5:2b:68:71:b6:4d:65:66:31:e5:72:42:00:05:
c6:f7:06:a0:35:c5:9b:58:9e:3b:7c:17:fb:6c:e0:
e5:1f:ed:1b:a3:f6:72:5e:c2:94:81:19:cb:e8:92:
2b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:87:8E:B7:9F:80:C5:E6:CC:C5:94:25:FD:AE:B3:27:7E:91:3A:E9
X509v3 Authority Key Identifier:
keyid:06:CE:5B:28:46:6B:92:74:25:26:03:13:92:D9:4B:F1:A5:58:E8:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bs5bKEZrknQlJgMTktlL8aVY6EQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/45cf37-afa5-4994-aedb-485b20952d93/1/Bs5bKEZrknQlJgMTktlL8aVY6EQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/45cf37-afa5-4994-aedb-485b20952d93/1/Bs5bKEZrknQlJgMTktlL8aVY6EQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:4f:2a:54:42:16:77:60:c8:b1:8b:02:93:58:e6:c8:1f:0f:
33:d8:19:f4:82:2c:3b:6e:29:f4:8c:ca:a4:85:48:50:98:30:
42:4e:df:c9:11:4d:90:96:49:93:02:1f:82:41:e1:70:45:fc:
79:69:d7:24:55:90:c3:dd:1a:ab:72:a6:cb:19:d6:ee:c4:ce:
a3:d8:94:52:c7:8b:b8:90:8d:35:f1:4f:44:fb:68:6f:2a:36:
34:6d:f7:e4:2f:bf:e6:d1:7c:e3:75:8e:8b:fc:94:1f:07:c8:
9f:05:98:c7:f3:c2:ce:72:82:d6:20:60:29:7d:21:63:5c:60:
da:e6:9d:ed:d7:0f:0a:8d:16:01:63:2a:55:20:36:aa:55:45:
81:e3:4e:4f:fc:4d:b5:6f:4f:aa:91:81:b6:d4:55:b6:d7:54:
0a:7d:f0:d5:ae:12:d0:b9:01:ef:b7:6e:1c:3a:74:fd:17:b6:
7b:c5:fa:d3:da:03:4f:2d:26:20:4a:7b:74:60:70:8f:03:50:
b0:11:4b:d3:2b:e6:4c:de:83:70:00:4b:d6:ea:09:9f:aa:c7:
2e:1a:fc:a0:1b:11:f6:9d:a5:27:9f:ec:04:ea:f6:b2:ab:2a:
f1:d2:33:5e:b5:16:c8:c1:e0:6f:f5:41:6d:f8:ef:90:14:7c:
c3:b0:64:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 12:12:33 2025 by rpki-client