Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/877f99-7acc-4d30-83c8-575a60de66a4/1/BsvHYUtJh4vzf94MGNfIUcLQfm8.mft
File: BsvHYUtJh4vzf94MGNfIUcLQfm8.mft (raw, json)
Hash identifier: WfpVqec0LcT80vs8ijR1OVLNivM86QzCqX/ac0op510=
Subject key identifier: 2D:66:1B:6E:B5:57:F1:79:A4:EC:4E:4F:85:32:10:BB:B1:4A:E6:5C
Authority key identifier: 06:CB:C7:61:4B:49:87:8B:F3:7F:DE:0C:18:D7:C8:51:C2:D0:7E:6F
Certificate issuer: /CN=06cbc7614b49878bf37fde0c18d7c851c2d07e6f
Certificate serial: 019749685B4C059C2B2F4DFFBF5A42E61D0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BsvHYUtJh4vzf94MGNfIUcLQfm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/877f99-7acc-4d30-83c8-575a60de66a4/1/BsvHYUtJh4vzf94MGNfIUcLQfm8.mft
Manifest number: 157C
Signing time: Sat 07 Jun 2025 08:01:04 +0000
Manifest this update: Sat 07 Jun 2025 08:01:04 +0000
Manifest next update: Sun 08 Jun 2025 08:01:04 +0000
Files and hashes: 1: 8AWj4g0mxpAeQ6fJYXYND52Gfz8.roa (hash: 2r0E8x2l8OQ6i+ALf5Xdf7skVCZem0LAwWfFUiiW7hQ=)
2: BsvHYUtJh4vzf94MGNfIUcLQfm8.crl (hash: 40QVLe5JV6BCyVHpZtvPXU1kcxA/LOz30P+mHWigWOk=)
3: z9CRwAoKZD-WKyzEgGIY-4pomCM.roa (hash: GIFVDo3J/VItfarKhSpqOK3aHLE2Bigm2lGriNtj4SI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/877f99-7acc-4d30-83c8-575a60de66a4/1/BsvHYUtJh4vzf94MGNfIUcLQfm8.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/877f99-7acc-4d30-83c8-575a60de66a4/1/BsvHYUtJh4vzf94MGNfIUcLQfm8.mft
rsync://rpki.ripe.net/repository/DEFAULT/BsvHYUtJh4vzf94MGNfIUcLQfm8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:68:5b:4c:05:9c:2b:2f:4d:ff:bf:5a:42:e6:1d:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06cbc7614b49878bf37fde0c18d7c851c2d07e6f
Validity
Not Before: Jun 7 08:01:04 2025 GMT
Not After : Jun 8 08:01:04 2025 GMT
Subject: CN=2d661b6eb557f179a4ec4e4f853210bbb14ae65c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b2:ab:07:0d:10:c7:04:b7:b7:bd:31:0c:d8:
bd:86:04:3d:c4:99:7a:cd:7b:01:a3:4b:67:33:f3:
6a:53:8b:5c:bc:99:19:da:4e:28:26:d1:47:4a:10:
04:ed:39:1e:83:26:a4:d8:dc:e4:96:9c:54:3e:06:
56:21:33:79:f0:e6:97:3a:b8:61:98:13:6d:28:de:
e1:2b:1c:e2:0c:5f:fb:1e:e7:86:31:3c:a7:61:dd:
ac:be:06:47:e8:2d:d4:5b:d8:02:3c:02:e3:88:9c:
20:2b:33:b9:6d:b3:f8:96:7a:8d:6d:54:85:90:b1:
8a:1c:61:c7:0d:8e:3c:e5:67:86:7c:09:54:cf:c6:
2c:3c:60:49:0b:28:e2:3b:12:3a:92:91:36:d6:df:
ec:6f:03:db:c8:e7:52:0d:2c:d1:e4:b0:78:19:d7:
06:b3:9a:d0:d3:71:64:37:59:5a:d4:52:70:17:d3:
ed:0e:8e:90:d9:cd:d6:14:99:a8:e0:bd:d4:d2:5b:
62:e2:36:8c:37:28:dd:83:31:ae:e3:52:c7:46:36:
f8:0e:f7:0a:2f:00:9f:2f:d0:5d:c0:de:fc:b1:26:
5c:9a:ec:cf:23:a4:1f:91:dd:74:2d:d9:e6:47:fe:
ce:41:7a:37:5c:f3:69:62:40:20:70:f8:47:93:29:
7b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:66:1B:6E:B5:57:F1:79:A4:EC:4E:4F:85:32:10:BB:B1:4A:E6:5C
X509v3 Authority Key Identifier:
keyid:06:CB:C7:61:4B:49:87:8B:F3:7F:DE:0C:18:D7:C8:51:C2:D0:7E:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsvHYUtJh4vzf94MGNfIUcLQfm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/877f99-7acc-4d30-83c8-575a60de66a4/1/BsvHYUtJh4vzf94MGNfIUcLQfm8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/877f99-7acc-4d30-83c8-575a60de66a4/1/BsvHYUtJh4vzf94MGNfIUcLQfm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:f2:b4:b8:e0:78:de:0f:d1:97:49:98:c1:b0:82:a6:4c:6a:
4f:4f:72:d0:70:8c:b9:91:13:06:7e:7c:69:ff:5f:b4:09:c9:
86:6e:9f:c9:21:af:b4:d9:75:79:17:72:1d:9d:a2:58:64:f3:
28:73:84:31:fe:df:36:be:2e:a3:4c:79:65:75:0e:64:8a:d4:
4c:43:64:2f:4f:2f:fb:1e:49:e0:8f:24:18:7e:8d:f6:ca:ca:
b8:7d:5f:a7:5b:33:0a:b9:bc:d8:3b:17:83:be:bf:d8:f0:e8:
f5:a0:d6:08:25:d8:44:84:60:26:f8:be:01:5f:71:ad:6c:ab:
63:a4:6a:04:fb:4f:56:37:d5:10:8e:b6:9f:07:b2:c3:05:c1:
2a:a0:bd:42:97:a4:44:1e:04:08:4e:26:d7:6c:2e:a0:34:cd:
ee:0d:85:dc:53:34:b2:da:8e:ed:87:65:ac:40:3e:cb:da:b6:
89:86:c7:f4:c9:5c:df:25:a9:e0:e1:e9:63:fa:f3:c9:23:66:
22:01:d9:f0:63:b0:38:11:0a:5a:75:1f:40:1d:5e:bc:99:9c:
75:ca:59:dd:36:09:1c:81:ea:c1:63:15:35:2b:e1:4c:5d:32:
14:ae:72:a6:22:db:b9:66:36:83:7a:06:43:a5:8f:f0:6f:c4:
85:57:67:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:59:28 2025 by rpki-client