Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/95602e-9eb3-418b-bc00-167831613145/1/BaQevhJyohyuDqGzXcCD-taKXX0.mft
File: BaQevhJyohyuDqGzXcCD-taKXX0.mft (raw, json)
Hash identifier: 2CMbyinSPe0eSdMUhPU8DGz1WWpHaeMEKwSVdVTqPa0=
Subject key identifier: 56:92:C0:79:52:0A:A1:E9:56:6E:7A:77:86:AA:B0:BB:A2:1A:3D:0B
Authority key identifier: 05:A4:1E:BE:12:72:A2:1C:AE:0E:A1:B3:5D:C0:83:FA:D6:8A:5D:7D
Certificate issuer: /CN=05a41ebe1272a21cae0ea1b35dc083fad68a5d7d
Certificate serial: 01976B4F2578B576DF4DF6CB7C9A4AB6C157
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BaQevhJyohyuDqGzXcCD-taKXX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/95602e-9eb3-418b-bc00-167831613145/1/BaQevhJyohyuDqGzXcCD-taKXX0.mft
Manifest number: 158B
Signing time: Fri 13 Jun 2025 22:00:38 +0000
Manifest this update: Fri 13 Jun 2025 22:00:38 +0000
Manifest next update: Sat 14 Jun 2025 22:00:38 +0000
Files and hashes: 1: BaQevhJyohyuDqGzXcCD-taKXX0.crl (hash: qU7xpsXx0/9qM89w0yL1B7xwHv4SiwBc02fgTDlMiU8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/95602e-9eb3-418b-bc00-167831613145/1/BaQevhJyohyuDqGzXcCD-taKXX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/95602e-9eb3-418b-bc00-167831613145/1/BaQevhJyohyuDqGzXcCD-taKXX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/BaQevhJyohyuDqGzXcCD-taKXX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 22:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:4f:25:78:b5:76:df:4d:f6:cb:7c:9a:4a:b6:c1:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05a41ebe1272a21cae0ea1b35dc083fad68a5d7d
Validity
Not Before: Jun 13 22:00:38 2025 GMT
Not After : Jun 14 22:00:38 2025 GMT
Subject: CN=5692c079520aa1e9566e7a7786aab0bba21a3d0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f0:65:f9:c4:73:50:ed:b1:3e:86:78:d3:ec:
cf:53:26:33:8d:8a:7c:98:31:b6:3e:45:ec:f0:43:
25:56:ff:6c:4d:3d:ca:f7:72:6f:0b:12:ec:11:15:
b7:a9:ca:35:66:01:05:5b:94:dd:fa:38:b8:7a:ce:
e3:63:39:ec:22:99:24:b3:6c:f4:99:70:df:a4:0e:
1c:ac:9f:c8:68:ff:b2:d3:b9:4f:46:27:b6:12:f2:
b3:51:b4:62:af:7b:cc:ee:3a:5c:97:62:30:33:89:
b5:6d:82:fc:58:0e:d4:53:9f:8f:3f:2d:ed:d3:3b:
91:2e:32:bd:cc:82:50:f9:a5:29:e2:fd:d2:91:81:
fe:ee:9d:dc:14:00:ed:93:b7:ce:63:ae:72:33:6e:
bf:8c:ff:0d:7e:9e:14:85:39:ff:9f:23:89:5d:a7:
c4:a8:ba:1d:b9:f9:ca:68:85:16:47:ec:c1:ea:ac:
05:50:b1:09:d6:f7:eb:36:87:71:4c:a5:8c:cd:55:
86:e6:57:a7:27:aa:56:4a:cc:ef:fe:9d:46:4f:78:
8e:1e:92:a5:91:22:e7:db:32:9f:65:76:f3:40:52:
0a:ee:9a:b0:8a:fd:a2:f2:27:d8:05:5a:eb:72:f8:
e4:3e:df:70:59:b3:85:7b:51:f0:98:2f:fe:5f:24:
1a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:92:C0:79:52:0A:A1:E9:56:6E:7A:77:86:AA:B0:BB:A2:1A:3D:0B
X509v3 Authority Key Identifier:
keyid:05:A4:1E:BE:12:72:A2:1C:AE:0E:A1:B3:5D:C0:83:FA:D6:8A:5D:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BaQevhJyohyuDqGzXcCD-taKXX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/95602e-9eb3-418b-bc00-167831613145/1/BaQevhJyohyuDqGzXcCD-taKXX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/95602e-9eb3-418b-bc00-167831613145/1/BaQevhJyohyuDqGzXcCD-taKXX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:c6:8b:73:7f:58:7f:3c:81:6f:49:1f:b3:c5:95:6f:be:48:
0e:d2:64:7d:ee:61:9e:cd:7c:96:f1:83:e4:0a:7c:35:0c:53:
27:70:a7:9b:22:34:fa:ae:62:bd:21:e6:15:bb:2f:78:9e:ba:
dd:c9:f9:6e:59:a1:e2:a9:2f:86:a3:38:6e:f8:1f:5a:a8:d0:
e9:da:c6:25:78:a1:1b:ac:17:8b:71:48:82:a9:c7:98:27:ec:
57:ba:6c:a1:52:0d:ba:d3:50:fc:2e:8e:c1:2b:96:e4:0f:d2:
d2:0d:1d:8f:3f:d2:73:66:9b:4f:5f:9a:8c:17:aa:48:11:c2:
ae:70:f1:f9:d9:a2:9a:a9:16:4d:9c:ec:ad:2a:2a:b4:c4:53:
63:d6:9b:78:11:10:15:d1:39:41:d7:d8:d8:64:78:80:da:fa:
cf:69:0a:9b:76:30:98:4f:9b:a2:84:b1:a0:2a:75:b4:ec:1b:
a7:2a:53:23:76:8e:3b:da:af:5a:2f:08:21:5e:eb:eb:ee:2f:
a5:c3:b7:39:15:76:0e:df:3f:9d:12:64:c5:6f:71:78:a6:85:
f3:00:77:df:58:04:3a:54:5e:36:2f:35:3f:70:94:2b:8d:af:
5d:5a:8e:1d:0f:1c:cc:09:60:36:d4:83:b7:60:bc:cf:9d:cf:
a3:4e:9b:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:58:51 2025 by rpki-client