Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/b8575a-8b63-4532-81ed-efe5bfc79994/1/BhYY9tMA3yz1ni35f_6flWoj5jw.mft
File: BhYY9tMA3yz1ni35f_6flWoj5jw.mft (raw, json)
Hash identifier: 2hj8N22FsDLY0PviQsnPRxaOjYnH6leilIw+0Eb1w80=
Subject key identifier: 77:0D:10:86:74:B7:57:4B:3A:20:59:BB:E6:B5:9E:08:E7:AF:B7:E3
Authority key identifier: 06:16:18:F6:D3:00:DF:2C:F5:9E:2D:F9:7F:FE:9F:95:6A:23:E6:3C
Certificate issuer: /CN=061618f6d300df2cf59e2df97ffe9f956a23e63c
Certificate serial: 01976214C58E2CDC9D354833BFF57DB8F213
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BhYY9tMA3yz1ni35f_6flWoj5jw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/b8575a-8b63-4532-81ed-efe5bfc79994/1/BhYY9tMA3yz1ni35f_6flWoj5jw.mft
Manifest number: 1588
Signing time: Thu 12 Jun 2025 03:00:17 +0000
Manifest this update: Thu 12 Jun 2025 03:00:17 +0000
Manifest next update: Fri 13 Jun 2025 03:00:17 +0000
Files and hashes: 1: BhYY9tMA3yz1ni35f_6flWoj5jw.crl (hash: 1O1b4XUYgfzmKtGmAa83WpckrmqhP+EkFN9QGbz7Dic=)
2: PpLMyuWEi7GW-Zo7FScOzQEDqmw.roa (hash: tpDYLlf85669UfO2WjK12JWkdre1n2ZIYLt0uyeHU34=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/b8575a-8b63-4532-81ed-efe5bfc79994/1/BhYY9tMA3yz1ni35f_6flWoj5jw.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/b8575a-8b63-4532-81ed-efe5bfc79994/1/BhYY9tMA3yz1ni35f_6flWoj5jw.mft
rsync://rpki.ripe.net/repository/DEFAULT/BhYY9tMA3yz1ni35f_6flWoj5jw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:62:14:c5:8e:2c:dc:9d:35:48:33:bf:f5:7d:b8:f2:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=061618f6d300df2cf59e2df97ffe9f956a23e63c
Validity
Not Before: Jun 12 03:00:17 2025 GMT
Not After : Jun 13 03:00:17 2025 GMT
Subject: CN=770d108674b7574b3a2059bbe6b59e08e7afb7e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:88:45:6c:59:f4:ce:32:24:cb:8f:66:7b:8f:
44:e0:1a:35:b2:0b:e6:35:49:ad:f5:93:ee:3f:e7:
c9:1f:d6:ee:a4:90:3d:c4:fb:05:82:b7:e3:be:ab:
bf:14:a8:4f:1b:cf:02:fd:ae:a4:13:fe:b0:3e:b2:
0e:01:a2:23:07:77:68:3e:cf:9c:ea:7a:ca:74:94:
00:40:b6:f0:a2:eb:cb:b5:b4:4a:07:f7:15:aa:cf:
ac:77:7a:fc:38:05:f1:c7:b7:2b:f2:b0:10:bb:2d:
46:1a:6d:17:84:5b:6d:6d:73:5e:5d:f2:2b:e8:97:
ab:eb:23:cd:c7:50:92:95:dd:37:64:db:f2:f1:f7:
d3:d0:fe:5f:69:ca:78:b7:f9:f8:57:b3:80:ac:e6:
3e:5a:45:63:7e:a7:14:95:41:0f:80:7d:82:3e:e5:
a0:75:ce:33:04:45:7f:dc:9e:75:05:b6:eb:54:ec:
9a:2c:04:cf:22:2e:82:6d:af:63:86:7b:c3:0c:e3:
fd:81:c3:7a:54:95:3d:40:4a:14:8f:53:f7:9c:94:
79:b4:df:ff:9a:a5:ed:c3:4b:d6:e7:f2:42:66:30:
13:87:31:d4:d3:99:fb:ab:03:47:f1:43:4d:2e:c8:
25:36:e8:15:c0:1c:6a:a4:02:b7:13:11:06:61:2d:
d2:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:0D:10:86:74:B7:57:4B:3A:20:59:BB:E6:B5:9E:08:E7:AF:B7:E3
X509v3 Authority Key Identifier:
keyid:06:16:18:F6:D3:00:DF:2C:F5:9E:2D:F9:7F:FE:9F:95:6A:23:E6:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BhYY9tMA3yz1ni35f_6flWoj5jw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b8575a-8b63-4532-81ed-efe5bfc79994/1/BhYY9tMA3yz1ni35f_6flWoj5jw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b8575a-8b63-4532-81ed-efe5bfc79994/1/BhYY9tMA3yz1ni35f_6flWoj5jw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:df:93:dd:29:74:81:39:e6:cf:7a:ef:88:0b:b1:77:da:aa:
a0:e3:b0:8a:a3:ad:9b:54:11:5d:ce:49:cb:40:91:31:eb:a7:
78:4b:ab:1f:ae:c9:6e:c4:f3:1b:4a:12:c1:36:81:2d:e3:e2:
ba:85:49:fa:16:20:d1:12:0f:67:9c:46:e0:8e:e2:e1:97:73:
44:a9:50:b8:b5:60:9c:ae:6c:4f:91:98:b7:86:15:34:2e:f2:
c1:19:c5:19:f0:38:d6:dc:4a:1b:11:15:42:37:78:9a:fb:61:
c5:c1:c7:97:47:21:cc:af:cc:25:7a:ec:64:82:18:ae:a3:1a:
80:20:db:b9:4a:a4:9a:50:30:2b:4d:29:7d:0a:39:44:a2:0f:
39:7c:19:8d:2d:7c:ae:7b:3a:e6:64:e6:f0:04:bd:f0:9f:1b:
cf:9c:f9:cf:2b:6c:b6:0d:f3:1a:ea:8b:6e:80:22:62:dc:4d:
e0:0b:9b:32:bb:c2:79:37:e2:29:e0:90:dc:a1:6a:7a:4f:32:
b6:28:8c:0b:c7:60:bb:de:4f:8a:8e:02:ec:ee:6e:a4:31:19:
31:9c:4b:1c:86:2f:6c:da:2a:d7:95:80:ae:f7:3e:12:c9:f2:
52:ea:3b:4d:03:a8:87:4e:15:a9:80:b5:e1:dd:34:4d:f2:ca:
1b:0c:e8:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 08:22:34 2025 by rpki-client