Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/BYgfNX6maA3eUqKpv7u27UOF2Nk.mft
File: BYgfNX6maA3eUqKpv7u27UOF2Nk.mft (raw, json)
Hash identifier: +K9g8PC0mW/So76TO+tLOtBt4u6VyUxN0vSwBlA/0CU=
Subject key identifier: 89:A0:AF:CD:98:86:1F:B5:4C:87:09:5D:02:5B:48:82:64:43:04:3F
Authority key identifier: 05:88:1F:35:7E:A6:68:0D:DE:52:A2:A9:BF:BB:B6:ED:43:85:D8:D9
Certificate issuer: /CN=05881f357ea6680dde52a2a9bfbbb6ed4385d8d9
Certificate serial: 019748C3299966E93179968E401EA642D823
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BYgfNX6maA3eUqKpv7u27UOF2Nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/BYgfNX6maA3eUqKpv7u27UOF2Nk.mft
Manifest number: 14B1
Signing time: Sat 07 Jun 2025 05:00:38 +0000
Manifest this update: Sat 07 Jun 2025 05:00:38 +0000
Manifest next update: Sun 08 Jun 2025 05:00:38 +0000
Files and hashes: 1: BYgfNX6maA3eUqKpv7u27UOF2Nk.crl (hash: VNZztBoPAdTi6Sx+lM+M0KUPZrG2Jx4EJ5rC3Om+7aI=)
2: J4NELhXbzsP0O-fo9Zwk6eyKSHs.roa (hash: PonpGKcr3QXOrmCtfTF4Hg7UZOzqXswPkTn+XjDFr7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/BYgfNX6maA3eUqKpv7u27UOF2Nk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/BYgfNX6maA3eUqKpv7u27UOF2Nk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BYgfNX6maA3eUqKpv7u27UOF2Nk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:c3:29:99:66:e9:31:79:96:8e:40:1e:a6:42:d8:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05881f357ea6680dde52a2a9bfbbb6ed4385d8d9
Validity
Not Before: Jun 7 05:00:38 2025 GMT
Not After : Jun 8 05:00:38 2025 GMT
Subject: CN=89a0afcd98861fb54c87095d025b48826443043f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:dd:5c:2a:cf:fc:76:ae:4a:5a:b2:35:5b:72:
9f:cf:f6:ce:69:5c:da:0c:5b:f4:1c:51:34:c0:7f:
8d:19:bb:e9:fd:51:b0:f4:60:a6:40:bb:b8:bc:1f:
f8:98:78:2d:8f:53:8e:27:b4:88:9e:c0:84:5c:89:
cd:d4:d3:d5:52:3f:8e:7d:0d:e0:c5:bc:00:7a:54:
9e:21:ac:12:cb:62:27:d0:6c:54:55:a8:2c:94:fd:
67:d2:b3:da:c9:18:a0:ec:d9:dd:4a:6e:4d:a4:02:
9a:98:16:bd:da:57:6c:21:6e:ee:16:3a:c3:da:ea:
2e:d5:32:45:cd:da:5a:c2:31:78:b6:45:57:87:e8:
65:e5:09:c9:54:be:77:b6:ea:86:b9:8e:fc:75:7e:
be:b6:86:74:9d:ca:3c:95:5f:00:9d:a6:39:de:d4:
f4:23:2e:f1:03:86:d4:91:4d:98:1a:c6:98:15:11:
7a:c5:4e:3e:29:db:d2:9e:25:6b:20:a8:06:7d:37:
02:d9:f2:34:25:ea:97:4f:28:41:4d:b3:77:b8:16:
a3:29:ad:db:26:5c:d7:a0:ac:9e:7e:e4:00:29:a7:
dd:d2:c6:7e:57:35:77:0c:65:eb:c3:2c:f3:2b:26:
4d:72:f9:6a:81:1d:e9:09:38:f4:b9:ff:58:af:69:
97:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:A0:AF:CD:98:86:1F:B5:4C:87:09:5D:02:5B:48:82:64:43:04:3F
X509v3 Authority Key Identifier:
keyid:05:88:1F:35:7E:A6:68:0D:DE:52:A2:A9:BF:BB:B6:ED:43:85:D8:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BYgfNX6maA3eUqKpv7u27UOF2Nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/BYgfNX6maA3eUqKpv7u27UOF2Nk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/abc103-ce66-4fcc-8fe1-3c91ad4b3e08/1/BYgfNX6maA3eUqKpv7u27UOF2Nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:27:a9:3b:2c:a3:ff:a1:3e:e6:7a:9b:17:c6:01:de:54:c3:
c0:23:84:c9:e2:43:6a:8f:ec:f8:4f:fe:3e:56:74:39:4a:f2:
6d:93:2d:ca:cf:3b:df:1e:74:5b:a8:55:35:b4:64:3c:05:7e:
75:10:bc:c8:ee:35:b1:ae:01:45:9c:85:3a:e6:ac:3f:12:d1:
2b:4b:fc:9c:88:cc:b4:c7:cd:73:95:a0:2c:48:44:f8:13:38:
d7:58:8c:51:0b:3e:a4:38:cf:9e:5c:bf:99:33:75:58:e6:80:
93:2a:af:81:bc:f2:d4:70:81:55:9d:e9:55:42:6d:34:81:a1:
db:b4:a2:50:79:2a:6b:cd:55:69:fa:b9:95:15:fd:4c:f0:e6:
fc:ea:1e:1d:a6:82:45:3e:64:a9:0d:4c:d1:1e:69:0c:49:24:
77:f1:91:8c:e5:1e:86:f0:b5:cf:21:07:09:9f:3e:38:23:79:
74:f4:81:54:78:6f:aa:20:2a:f1:17:24:45:c2:a6:96:4c:8f:
7c:03:06:f3:2b:aa:db:ef:ab:0d:d1:72:20:08:dd:55:c7:61:
2a:53:0b:03:1a:a5:9d:bc:8b:10:1d:f5:93:f8:46:9f:82:53:
20:ad:fb:45:7a:79:09:b2:6a:d7:d8:c2:94:12:bf:bf:98:6b:
0f:6b:94:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:54:44 2025 by rpki-client